$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9fc2402c-0f4d-3280-becc-8b436e0643d2.roa File: 9fc2402c-0f4d-3280-becc-8b436e0643d2.roa (raw, json) Hash identifier: HB4GmU7F2a7LRgZT0QMTdmhCQVHnj9z/2W31S4faA9Y= Subject key identifier: 4F:57:FE:76:7D:D5:BA:A3:69:18:E3:C2:BB:C6:25:BC:C6:F5:3D:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636260130D794C317985F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9fc2402c-0f4d-3280-becc-8b436e0643d2.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.188.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:26:01:30:d7:94:c3:17:98:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=16757cc5-9671-4f41-84d0-c317d2ebd406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:9e:c2:24:39:fa:fc:c8:69:33:06:7d:4a: 6d:bc:99:9b:51:63:d0:39:2a:3e:ea:18:3a:bd:8b: 0d:91:61:03:73:f3:8c:3e:41:f2:c7:09:ce:4a:6c: f7:b1:6d:c7:09:b1:da:68:32:3c:e2:eb:6c:86:6e: 00:37:86:5c:9b:ba:10:72:26:a2:8c:fa:05:60:1f: 44:84:53:93:ea:51:3c:36:ac:d5:8f:41:d2:71:00: bf:54:bd:56:bf:63:92:1f:95:95:85:fb:5d:c6:72: 3b:76:18:14:69:9c:af:4b:6c:9a:d5:fe:37:90:fc: 86:8b:6b:e3:bc:5e:20:e6:54:33:fc:87:c6:65:75: fb:6a:a4:99:01:b6:64:94:36:10:75:23:55:90:5c: c4:11:b1:f4:a0:90:23:05:fd:2f:50:95:99:b2:92: b8:4c:ac:e2:70:98:54:86:84:fa:7b:6c:cf:40:98: 48:d0:47:60:60:b3:33:b2:d6:5c:c8:03:0a:28:6c: c0:5a:e2:9d:13:7e:61:d3:cd:72:41:1d:4c:65:3d: 76:00:61:cd:82:54:0c:ca:ba:7a:8b:a4:96:80:41: 35:16:9a:5d:12:8f:dd:53:6c:1b:fc:a4:e2:2a:f0: 1a:b2:4e:54:76:e4:e7:cc:c3:46:24:93:7b:ab:36: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:FE:76:7D:D5:BA:A3:69:18:E3:C2:BB:C6:25:BC:C6:F5:3D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9fc2402c-0f4d-3280-becc-8b436e0643d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:66:65:ea:ba:5a:41:ba:f4:94:cf:94:61:bb:22:24:ed:cb: ae:28:e6:cc:4e:89:16:89:2d:be:45:d5:2d:31:5e:27:d0:0b: a4:e9:1c:99:3a:03:ca:01:02:81:4c:66:c4:00:1a:98:af:d9: ef:39:51:98:c1:68:9b:10:75:8b:57:c4:8e:f0:ed:c5:d0:f4: ca:f1:6b:2d:a1:91:6a:67:ac:bf:d3:ba:85:f7:4f:87:f4:bd: e5:0a:da:4f:7a:85:7a:d5:a1:4c:d3:4a:40:0a:30:a8:92:fb: 75:70:3c:78:e6:3f:10:de:dd:3f:ba:04:85:30:17:84:7a:e2: d5:5c:7e:cc:63:3e:5b:50:bc:cb:4e:69:2c:6e:c3:fc:28:cb: 7f:82:8f:5b:50:51:b1:56:a0:be:8f:e0:43:4e:05:91:2d:14: 00:63:06:d9:b9:43:5e:bc:45:f9:4b:1d:99:55:93:d0:2e:83: 3c:84:f6:24:f1:d9:69:94:2e:c3:10:12:71:6a:e9:19:ac:46: 2f:11:9e:3b:11:a0:5e:d6:bc:03:65:80:97:81:5d:92:16:24: f1:aa:1e:5e:f5:52:ae:b9:b6:53:16:04:56:f1:fa:49:a1:b0: 33:20:62:8d:c9:49:de:ac:15:b2:4c:e3:7a:11:68:8e:72:42: 0c:52:32:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiYBMNeUwxeYX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MTY3NTdjYzUtOTY3MS00ZjQxLTg0ZDAtYzMxN2QyZWJkNDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12SewiQ5+vzIaTMGfUptvJmbUWPQOSo+6hg6 vYsNkWEDc/OMPkHyxwnOSmz3sW3HCbHaaDI84utshm4AN4Zcm7oQciaijPoFYB9E hFOT6lE8NqzVj0HScQC/VL1Wv2OSH5WVhftdxnI7dhgUaZyvS2ya1f43kPyGi2vj vF4g5lQz/IfGZXX7aqSZAbZklDYQdSNVkFzEEbH0oJAjBf0vUJWZspK4TKzicJhU hoT6e2zPQJhI0EdgYLMzstZcyAMKKGzAWuKdE35h081yQR1MZT12AGHNglQMyrp6 i6SWgEE1FppdEo/dU2wb/KTiKvAask5UduTnzMNGJJN7qza5/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9X/nZ91bqjaRjjwrvGJbzG9T23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWZjMjQwMmMtMGY0ZC0z MjgwLWJlY2MtOGI0MzZlMDY0M2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRryQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhmZeq6WkG69JTPlGG7IiTty64o5sxOiRaJLb5F1S0xXifQC6TpHJk6 A8oBAoFMZsQAGpiv2e85UZjBaJsQdYtXxI7w7cXQ9Mrxay2hkWpnrL/TuoX3T4f0 veUK2k96hXrVoUzTSkAKMKiS+3VwPHjmPxDe3T+6BIUwF4R64tVcfsxjPltQvMtO aSxuw/woy3+Cj1tQUbFWoL6P4ENOBZEtFABjBtm5Q168RflLHZlVk9AugzyE9iTx 2WmULsMQEnFq6RmsRi8RnjsRoF7WvANlgJeBXZIWJPGqHl71Uq65tlMWBFbx+kmh sDMgYo3JSd6sFbJM43oRaI5yQgxSMsA= -----END CERTIFICATE-----Generated at Thu Aug 7 05:09:52 2025 by rpki-client