$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9a6ff1e-a2d1-3eaf-85ee-bff469350720.roa File: a9a6ff1e-a2d1-3eaf-85ee-bff469350720.roa (raw, json) Hash identifier: CRgQZAe8uAraYVuThliUBbFtgDe9DoLuzFinxgvc+Jk= Subject key identifier: BE:45:74:08:05:59:63:B5:FE:FF:57:95:BA:8B:D6:59:38:49:E5:EB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963622D38269F3E27C77A000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9a6ff1e-a2d1-3eaf-85ee-bff469350720.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.172.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:22:d3:82:69:f3:e2:7c:77:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=cb4f6194-7bda-4951-aec3-3a7778e6aa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:dc:ea:41:03:5c:02:bf:47:c2:bd:69:09: 4e:cc:09:f2:af:2e:a7:8b:f4:ed:c3:2e:61:be:3b: 21:88:fb:7c:88:54:2f:01:d9:1f:1d:50:bb:54:22: 38:14:36:a7:c7:8b:d4:23:32:62:93:cb:d0:87:d9: b6:f8:79:85:52:c9:58:9f:8c:85:62:e2:53:65:d1: 27:cb:c9:e8:fe:a6:f6:60:82:ee:3c:97:34:8b:12: 00:b6:a9:6e:bd:77:a2:bd:96:24:2c:42:e5:3d:c3: 98:e0:06:84:d0:27:30:d6:f6:6e:00:4b:6b:e8:70: e4:af:2c:94:ca:9f:a5:80:40:86:fe:9e:10:5e:d0: 41:0e:67:02:4d:a5:19:4a:52:1a:74:e6:d5:d4:6d: d0:ad:91:ef:d1:c0:e6:e1:9c:6e:12:2d:d8:e3:d3: 1d:ae:71:e0:f7:b6:02:87:43:0b:d7:8a:14:bc:1a: 88:70:a5:05:a3:b5:86:16:34:55:ae:91:1f:d6:72: 42:d5:8b:db:37:b7:bb:43:78:e2:81:12:09:7b:e1: 93:3a:c8:af:5d:07:f4:55:57:9f:e6:20:06:a5:d4: f2:a8:cd:9d:fb:7c:d9:f2:7d:39:62:d9:78:a1:e9: 03:a2:9c:f8:3b:fa:cd:dc:ce:e6:89:92:60:41:ac: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:45:74:08:05:59:63:B5:FE:FF:57:95:BA:8B:D6:59:38:49:E5:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9a6ff1e-a2d1-3eaf-85ee-bff469350720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:9f:ed:90:e0:5a:3a:20:0d:eb:12:04:85:37:98:a4:8b:75: 00:aa:1b:2c:4d:78:86:b4:19:a7:60:62:dd:99:5b:3a:a5:91: 5a:0d:3d:ff:c5:a8:d3:b6:aa:43:df:9a:60:0b:35:8b:97:54: 09:73:5f:06:61:06:ca:fc:5f:ee:4a:e3:1a:f2:63:bb:12:9b: 3a:dd:bc:3b:e6:e1:6c:11:6d:4b:e0:1c:e5:92:df:3f:e4:fb: 8d:08:98:2a:fe:79:a4:a6:04:df:79:f6:d1:f1:e0:9b:11:5b: 6d:36:79:fb:fe:c3:9e:05:f2:07:c7:ba:d4:e6:28:46:ba:df: 43:33:06:2f:b4:97:47:90:da:57:92:63:c0:0f:03:68:25:12: 86:35:55:5e:be:b7:fa:70:b6:3f:81:bb:0a:46:9b:1f:d2:d8: 94:f4:4a:d0:de:29:9d:63:4d:48:33:06:01:00:cc:48:d8:75: db:6a:d7:6a:88:12:8c:2a:ee:4d:52:a1:e4:dd:c9:0c:61:bc: 67:84:d4:5e:18:d8:ab:8c:ef:a3:ea:af:7c:90:a5:07:fc:a1: 75:e8:ee:ef:45:ce:26:2b:d5:7f:b8:41:c3:27:07:3d:5d:dd: 2c:09:3a:d0:42:80:35:af:48:38:57:bc:3d:2d:6c:a9:e8:b2: f9:8d:d2:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiLTgmnz4nx3oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Y2I0ZjYxOTQtN2JkYS00OTUxLWFlYzMtM2E3Nzc4ZTZhYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8bc6kEDXAK/R8K9aQlOzAnyry6ni/Ttwy5h vjshiPt8iFQvAdkfHVC7VCI4FDanx4vUIzJik8vQh9m2+HmFUslYn4yFYuJTZdEn y8no/qb2YILuPJc0ixIAtqluvXeivZYkLELlPcOY4AaE0Ccw1vZuAEtr6HDkryyU yp+lgECG/p4QXtBBDmcCTaUZSlIadObV1G3QrZHv0cDm4ZxuEi3Y49MdrnHg97YC h0ML14oUvBqIcKUFo7WGFjRVrpEf1nJC1YvbN7e7Q3jigRIJe+GTOsivXQf0VVef 5iAGpdTyqM2d+3zZ8n05Ytl4oekDopz4O/rN3M7miZJgQaz32QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5FdAgFWWO1/v9XlbqL1lk4SeXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTlhNmZmMWUtYTJkMS0z ZWFmLTg1ZWUtYmZmNDY5MzUwNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaf7ZDgWjogDesSBIU3mKSLdQCqGyxNeIa0GadgYt2ZWzqlkVoNPf/F qNO2qkPfmmALNYuXVAlzXwZhBsr8X+5K4xryY7sSmzrdvDvm4WwRbUvgHOWS3z/k +40ImCr+eaSmBN959tHx4JsRW202efv+w54F8gfHutTmKEa630MzBi+0l0eQ2leS Y8APA2glEoY1VV6+t/pwtj+BuwpGmx/S2JT0StDeKZ1jTUgzBgEAzEjYddtq12qI Eowq7k1SoeTdyQxhvGeE1F4Y2KuM76Pqr3yQpQf8oXXo7u9FziYr1X+4QcMnBz1d 3SwJOtBCgDWvSDhXvD0tbKnosvmN0iM= -----END CERTIFICATE-----Generated at Wed Aug 6 14:08:30 2025 by rpki-client