$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ae8b2ef-bc7a-3117-b492-be3d4a3d8e4c.roa File: 7ae8b2ef-bc7a-3117-b492-be3d4a3d8e4c.roa (raw, json) Hash identifier: 3vjNQabDxoMyoyya3ValaR+2Rr3cl9sfCIFplGBj3cI= Subject key identifier: 3D:4E:CA:66:15:D0:D2:9C:5C:5F:80:C3:39:3B:FA:BC:8D:3C:A9:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963667A0EB71867954829500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ae8b2ef-bc7a-3117-b492-be3d4a3d8e4c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.181.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:67:a0:eb:71:86:79:54:82:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=bd1d6c0a-f6bc-4692-b005-97f266755c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:67:fa:01:d3:76:0c:83:f9:4f:ec:bb:87:00: 31:71:af:e3:76:3b:ab:81:f0:77:da:ac:24:9c:1b: 01:29:98:81:7d:c5:aa:2e:a4:18:64:b6:40:fe:90: e8:af:6e:0f:b9:d1:c3:91:4b:0b:d6:fa:65:aa:59: be:dc:6a:92:81:02:02:34:1a:61:67:16:a7:23:10: 05:c1:1b:60:41:2e:1f:94:09:ff:44:0a:c6:7d:74: d0:29:d0:15:8f:02:6a:4f:68:29:43:ce:6e:62:c2: 7f:c3:71:f1:d7:3c:59:44:6e:b3:5c:58:80:b6:a3: be:51:e8:36:91:0f:e7:e6:a2:78:94:d1:c9:81:ac: 83:d2:28:28:e8:97:56:04:ce:61:7e:a5:4e:13:a7: 84:52:35:f0:b1:ba:d4:63:14:34:ac:55:00:d5:62: f9:1b:1c:a0:83:44:0f:0b:44:08:60:b2:bb:87:18: ea:24:93:9f:a6:8e:b7:7a:63:28:7c:74:0b:3d:cc: 42:41:b6:9a:57:a8:d7:1e:42:17:b0:c7:91:3e:cb: a4:56:9b:72:b0:7b:02:0d:d7:91:21:04:d8:76:a1: db:61:cd:29:5a:97:02:fa:74:f5:b4:1f:6d:66:65: e9:c0:22:62:58:76:77:4c:c8:47:17:aa:cc:45:90: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4E:CA:66:15:D0:D2:9C:5C:5F:80:C3:39:3B:FA:BC:8D:3C:A9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ae8b2ef-bc7a-3117-b492-be3d4a3d8e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:13:c2:9f:f6:4f:83:e4:b9:11:0c:a1:2a:fb:ee:70:53:89: 0f:ba:31:e1:b9:34:b9:00:da:8b:55:72:0b:cf:fd:db:81:ea: a2:94:69:b5:b9:a4:30:18:d7:66:5a:2b:85:3c:c5:38:3f:04: 3f:e5:39:1e:5e:c8:0d:b2:bd:de:67:2e:04:d5:2f:a7:9d:a2: 5c:bc:98:f4:ed:c2:30:8c:55:2b:8e:f3:94:5a:b6:8a:11:e0: 01:21:a4:2d:a5:63:da:75:4c:84:c8:00:76:03:39:c3:a5:f6: ee:bd:3d:99:ff:17:34:73:ef:a5:dd:65:a8:55:c9:31:02:22: 19:da:1d:2e:48:9d:c9:c7:9a:55:99:bb:98:de:e3:21:b7:43: da:db:76:d0:fb:2a:c6:93:25:63:f6:3e:0f:d8:ee:55:09:4a: b1:5e:5b:5e:2d:e7:24:b5:72:2c:90:18:36:4d:95:8e:be:27: 7e:9f:44:18:aa:41:58:55:2a:e0:ee:3d:76:7a:2d:76:e3:b1: f2:27:92:e6:25:30:26:ff:1c:a0:a8:87:56:9a:c0:9c:83:52: fe:e0:87:9e:8a:fa:a5:91:bd:69:ed:3a:c4:cc:ec:8f:bb:b6: 5b:2d:70:b7:3e:b5:ce:4c:3b:e9:79:1b:2e:57:cd:d3:9c:8d: a0:d7:ac:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmeg63GGeVSClQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmQxZDZjMGEtZjZiYy00NjkyLWIwMDUtOTdmMjY2NzU1YzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGf6AdN2DIP5T+y7hwAxca/jdjurgfB32qwk nBsBKZiBfcWqLqQYZLZA/pDor24PudHDkUsL1vplqlm+3GqSgQICNBphZxanIxAF wRtgQS4flAn/RArGfXTQKdAVjwJqT2gpQ85uYsJ/w3Hx1zxZRG6zXFiAtqO+Ueg2 kQ/n5qJ4lNHJgayD0igo6JdWBM5hfqVOE6eEUjXwsbrUYxQ0rFUA1WL5Gxygg0QP C0QIYLK7hxjqJJOfpo63emMofHQLPcxCQbaaV6jXHkIXsMeRPsukVptysHsCDdeR IQTYdqHbYc0pWpcC+nT1tB9tZmXpwCJiWHZ3TMhHF6rMRZALzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1OymYV0NKcXF+Awzk7+ryNPKlpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2FlOGIyZWYtYmM3YS0z MTE3LWI0OTItYmUzZDRhM2Q4ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIETwp/2T4PkuREMoSr77nBTiQ+6MeG5NLkA2otVcgvP/duB6qKUabW5 pDAY12ZaK4U8xTg/BD/lOR5eyA2yvd5nLgTVL6edoly8mPTtwjCMVSuO85RatooR 4AEhpC2lY9p1TITIAHYDOcOl9u69PZn/FzRz76XdZahVyTECIhnaHS5IncnHmlWZ u5je4yG3Q9rbdtD7KsaTJWP2Pg/Y7lUJSrFeW14t5yS1ciyQGDZNlY6+J36fRBiq QVhVKuDuPXZ6LXbjsfInkuYlMCb/HKCoh1aawJyDUv7gh56K+qWRvWntOsTM7I+7 tlstcLc+tc5MO+l5Gy5XzdOcjaDXrAU= -----END CERTIFICATE-----Generated at Wed Aug 6 12:42:33 2025 by rpki-client