$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b3dae9f-4583-3c5f-99bd-ff8141e30223.roa File: 9b3dae9f-4583-3c5f-99bd-ff8141e30223.roa (raw, json) Hash identifier: CBD++vQIhE8iJUuZF6kDlGk0LDtXJIGCXcjWHr9DJCo= Subject key identifier: 30:35:61:1C:95:02:40:E4:53:33:C5:36:98:A7:D2:3F:2F:1A:18:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963643C0A53B73ABF2336780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b3dae9f-4583-3c5f-99bd-ff8141e30223.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.160.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:43:c0:a5:3b:73:ab:f2:33:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=0589e612-a505-4a82-852d-eb5229ed323d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c9:db:12:e3:96:2f:eb:de:45:6c:cb:f1:3b: 90:09:09:d0:84:f8:5b:75:2c:4b:12:e2:b0:e8:e6: 2c:f0:b7:3c:0e:1b:2f:54:9a:cc:56:b8:97:db:36: 79:eb:88:13:b1:65:ec:f8:fa:32:bf:1f:2c:76:f2: 80:de:e7:8a:d0:e5:3e:b5:91:3b:15:22:41:4b:dc: c6:6d:5e:e5:a7:cb:90:86:44:0c:41:1a:36:86:70: 0d:e4:8c:cd:ad:4a:70:3b:51:ea:6b:3a:f4:99:fe: 74:59:8d:53:6a:96:56:a2:1d:6c:71:ae:0d:6f:32: 1c:e2:a5:f9:25:cf:26:be:0c:e2:3b:97:96:6b:e3: 8c:ca:ad:aa:6d:f0:10:3f:1c:03:3d:26:8b:e6:0c: de:22:c3:15:b7:38:a0:e2:ad:0d:9b:5e:43:99:ae: 98:8a:1e:95:1a:e3:df:91:77:f9:99:a9:e4:22:23: af:44:58:fd:68:04:2d:2f:45:9b:a4:db:9a:21:5a: bc:b2:1b:60:58:47:fa:73:11:30:9a:43:31:64:11: 79:76:17:da:98:3e:d1:81:19:32:36:31:70:4d:11: ac:a1:5d:c9:a0:a1:95:83:dc:dc:4a:a7:b1:9f:7f: 3e:31:e0:17:bc:e4:27:f4:25:06:7b:20:71:be:ac: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:35:61:1C:95:02:40:E4:53:33:C5:36:98:A7:D2:3F:2F:1A:18:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b3dae9f-4583-3c5f-99bd-ff8141e30223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:27:25:8e:36:26:41:58:32:0c:18:4c:01:a2:58:75:b5:36: 90:53:d4:5f:f1:07:38:5e:8c:c2:3d:77:75:d7:42:46:00:d7: db:1b:05:d0:9e:75:86:c7:bf:8a:68:a5:f6:53:61:ac:1e:32: 30:77:b0:0a:0d:dc:3a:c4:a5:f4:81:df:cc:b3:db:a1:44:00: c5:e3:11:9e:a2:ea:65:10:1b:b3:91:ee:8a:7c:b9:55:2f:ad: 28:bc:48:c5:2d:43:ce:cd:43:8c:c2:37:9e:fb:9c:3c:bd:1f: 8e:a7:46:fe:62:78:d1:3b:cd:ce:5c:7d:48:89:3c:c1:62:8b: 0a:ad:af:88:d8:b0:ff:e5:dc:5e:96:72:1e:31:5a:05:3b:56: fd:73:bf:19:80:71:b1:89:4e:a4:cd:c2:e1:fb:5a:e6:f7:10: a0:a2:f4:bf:d0:64:df:d3:c9:7e:71:e6:bc:a6:50:2b:f7:11: 1d:d9:1b:97:92:0d:24:ec:f7:0c:83:0c:ec:08:ee:aa:af:0a: 1d:fd:66:22:07:c1:04:00:9e:4d:f7:7c:c2:11:34:40:00:d1: eb:ac:3e:65:13:7a:b1:33:b1:a5:3a:6c:dd:de:3b:89:16:84: 31:5a:23:84:0e:8d:c2:39:ad:a8:b6:66:6f:9e:ba:93:11:89: 19:20:29:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkPApTtzq/IzZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MDU4OWU2MTItYTUwNS00YTgyLTg1MmQtZWI1MjI5ZWQzMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MnbEuOWL+veRWzL8TuQCQnQhPhbdSxLEuKw 6OYs8Lc8DhsvVJrMVriX2zZ564gTsWXs+Poyvx8sdvKA3ueK0OU+tZE7FSJBS9zG bV7lp8uQhkQMQRo2hnAN5IzNrUpwO1Hqazr0mf50WY1TapZWoh1sca4NbzIc4qX5 Jc8mvgziO5eWa+OMyq2qbfAQPxwDPSaL5gzeIsMVtzig4q0Nm15Dma6Yih6VGuPf kXf5mankIiOvRFj9aAQtL0WbpNuaIVq8shtgWEf6cxEwmkMxZBF5dhfamD7RgRky NjFwTRGsoV3JoKGVg9zcSqexn38+MeAXvOQn9CUGeyBxvqwt1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA1YRyVAkDkUzPFNpin0j8vGhhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWIzZGFlOWYtNDU4My0z YzVmLTk5YmQtZmY4MTQxZTMwMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0nJY42JkFYMgwYTAGiWHW1NpBT1F/xBzhejMI9d3XXQkYA19sbBdCe dYbHv4popfZTYaweMjB3sAoN3DrEpfSB38yz26FEAMXjEZ6i6mUQG7OR7op8uVUv rSi8SMUtQ87NQ4zCN577nDy9H46nRv5ieNE7zc5cfUiJPMFiiwqtr4jYsP/l3F6W ch4xWgU7Vv1zvxmAcbGJTqTNwuH7Wub3EKCi9L/QZN/TyX5x5rymUCv3ER3ZG5eS DSTs9wyDDOwI7qqvCh39ZiIHwQQAnk33fMIRNEAA0eusPmUTerEzsaU6bN3eO4kW hDFaI4QOjcI5rai2Zm+eupMRiRkgKU0= -----END CERTIFICATE-----Generated at Wed Aug 6 13:02:35 2025 by rpki-client