$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1be8686-7555-30de-b692-489c496b8538.roa File: a1be8686-7555-30de-b692-489c496b8538.roa (raw, json) Hash identifier: ENcINUQObmKLmoODZggc3HwDVjkfSMtmpnxiVmxbUJo= Subject key identifier: 0F:17:98:73:4E:CD:69:D0:DD:CB:11:E5:D8:3B:85:82:9C:AD:29:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AAB266DCD7E79532BAD8B3440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1be8686-7555-30de-b692-489c496b8538.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 22773 IP address blocks: 70.174.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:6d:cd:7e:79:53:2b:ad:8b:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=1ae0481a-7c5a-422d-aec7-4ec1a3792539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:22:b7:f8:1c:23:17:b0:a5:3a:0e:4c:6d:94: 85:a1:d6:5c:cc:cb:50:21:46:34:66:08:96:d4:e8: ec:7f:21:ea:9c:40:8c:b4:26:2d:8e:e0:83:16:93: e3:33:b9:fb:ef:e9:57:1c:b5:00:d6:cc:f6:5c:83: 28:20:37:db:83:8f:cb:e7:57:c2:89:77:c0:15:3d: d8:8b:b7:3e:8a:92:6a:40:4c:f5:e8:8e:89:8a:fb: 1a:c0:85:4c:00:15:36:3d:9a:53:2e:a8:71:f3:e0: be:76:ca:ee:0b:5e:2b:42:89:ce:f5:53:c6:29:e1: 8c:73:76:87:c8:98:00:a8:6e:4d:55:8a:53:4a:25: 81:19:42:51:56:f7:cc:25:c9:09:ba:87:ce:45:e4: 3b:34:77:48:ee:1f:1e:21:49:e4:d5:41:ee:21:16: c6:8e:bc:16:7d:52:5f:72:4f:dc:e5:34:6f:94:6f: 17:03:f3:d5:25:12:c4:70:a2:5d:72:f7:15:94:78: 93:ce:21:a5:72:fc:71:c3:16:17:ea:1c:c1:5f:8f: 3d:2d:3b:e2:dc:ce:50:78:e3:b4:44:43:b2:41:61: 1e:71:65:61:00:95:8d:da:47:d8:3a:b3:c5:95:b0: cd:1b:12:ae:f9:40:ed:0f:62:94:17:64:9e:9f:c6: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:17:98:73:4E:CD:69:D0:DD:CB:11:E5:D8:3B:85:82:9C:AD:29:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1be8686-7555-30de-b692-489c496b8538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:91:6b:14:af:d4:76:bf:5b:55:ba:4d:f0:17:4f:bd:da:a5: 98:c4:49:38:33:5e:ba:fa:ae:ca:17:ea:b4:d6:ca:aa:c1:10: 84:3e:38:92:d3:eb:4a:b0:e4:e1:ec:df:ad:ac:e2:88:fc:9d: f9:54:07:e0:f3:2e:24:6b:b0:fe:39:7d:49:67:4a:f5:f6:05: cd:62:c0:b9:40:de:87:2b:d4:1c:29:c4:0c:7d:5a:ce:f1:42: ad:fc:15:59:c8:bf:8c:80:74:2e:54:db:60:be:0f:85:e3:8c: e0:27:80:6f:7a:01:69:c6:aa:07:b0:05:66:c2:30:2f:19:a0: 11:91:ba:9a:f1:ef:dd:79:4a:aa:71:44:ed:80:7e:88:23:ec: 09:7e:6f:f1:f9:9c:05:a4:71:1b:2d:ee:f1:1e:1d:cf:3f:48: b5:cb:1b:df:4a:c9:71:84:ea:1f:ab:45:98:13:b4:17:3f:0f: 60:e6:46:64:e8:a7:6c:ae:1d:7b:40:9a:6b:8c:97:b3:a2:23: 19:01:29:a1:d0:36:56:e0:38:3c:af:08:7d:49:5e:3b:a1:57: 4f:20:b7:6b:4e:78:bb:44:0c:ed:9b:3f:7d:54:f2:4d:2f:85: 28:24:aa:72:51:b7:d0:a2:35:92:fa:d1:79:2f:a7:f2:d0:74: fb:13:e1:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJm3NfnlTK62LNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MWFlMDQ4MWEtN2M1YS00MjJkLWFlYzctNGVjMWEzNzkyNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCK3+BwjF7ClOg5MbZSFodZczMtQIUY0ZgiW 1OjsfyHqnECMtCYtjuCDFpPjM7n77+lXHLUA1sz2XIMoIDfbg4/L51fCiXfAFT3Y i7c+ipJqQEz16I6JivsawIVMABU2PZpTLqhx8+C+dsruC14rQonO9VPGKeGMc3aH yJgAqG5NVYpTSiWBGUJRVvfMJckJuofOReQ7NHdI7h8eIUnk1UHuIRbGjrwWfVJf ck/c5TRvlG8XA/PVJRLEcKJdcvcVlHiTziGlcvxxwxYX6hzBX489LTvi3M5QeOO0 REOyQWEecWVhAJWN2kfYOrPFlbDNGxKu+UDtD2KUF2Sen8ZLkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8XmHNOzWnQ3csR5dg7hYKcrSmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTFiZTg2ODYtNzU1NS0z MGRlLWI2OTItNDg5YzQ5NmI4NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRq6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmRaxSv1Ha/W1W6TfAXT73apZjESTgzXrr6rsoX6rTWyqrBEIQ+OJLT 60qw5OHs362s4oj8nflUB+DzLiRrsP45fUlnSvX2Bc1iwLlA3ocr1BwpxAx9Ws7x Qq38FVnIv4yAdC5U22C+D4XjjOAngG96AWnGqgewBWbCMC8ZoBGRuprx7915Sqpx RO2Afogj7Al+b/H5nAWkcRst7vEeHc8/SLXLG99KyXGE6h+rRZgTtBc/D2DmRmTo p2yuHXtAmmuMl7OiIxkBKaHQNlbgODyvCH1JXjuhV08gt2tOeLtEDO2bP31U8k0v hSgkqnJRt9CiNZL60Xkvp/LQdPsT4dY= -----END CERTIFICATE-----Generated at Sat Aug 9 14:28:45 2025 by rpki-client