$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af5fa3e2-cabf-3d75-97f1-1341349cb118.roa File: af5fa3e2-cabf-3d75-97f1-1341349cb118.roa (raw, json) Hash identifier: WrN7xjA89MeMfWqvQ8DnsubHilNl7ojAwSKSUg9gzeg= Subject key identifier: D0:E2:0A:12:08:47:C9:18:3A:96:2D:4E:BB:16:1D:A9:DD:9D:6F:95 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636240F91FB7783B1405D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af5fa3e2-cabf-3d75-97f1-1341349cb118.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.175.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:24:0f:91:fb:77:83:b1:40:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=87c49f25-2c83-48f1-8a55-80669809cb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:d1:4c:83:63:16:f0:d6:b3:22:b5:78:08: a8:c6:db:dc:3f:fc:7d:69:35:7e:dd:75:7c:67:97: ca:e5:b5:af:d0:f8:f3:a1:ba:89:7e:12:cf:07:f5: 5e:30:ff:5a:7e:02:16:d5:c3:22:52:95:2b:9c:fb: c8:84:0f:e4:b6:cd:ed:42:03:0b:e5:2e:9f:5c:6d: f5:e4:56:68:5e:7e:1a:57:80:07:c1:ef:25:99:7f: ee:07:af:91:e5:d5:61:9f:6d:02:cc:7d:15:a8:8a: 74:4a:0c:a3:6c:95:84:9d:e7:a1:7c:d5:2b:22:7b: 8a:ad:e4:52:b4:6e:f6:ff:a8:51:40:62:32:1d:ad: 10:d8:ef:c3:fe:44:47:6d:25:a4:78:12:ff:ff:4a: c7:f5:a5:2e:0f:b5:7c:9b:fc:a6:5f:d2:b8:e6:37: 9e:cd:88:c2:43:6f:e1:bf:d5:ef:d1:7f:3c:7f:84: a3:40:46:00:60:0f:bb:38:5f:be:09:ca:58:8f:df: 76:d7:a4:2f:69:15:7e:d0:88:27:3d:91:c2:76:79: 75:fa:fd:f1:32:51:ba:76:85:47:ff:f8:46:ca:d2: f8:92:a4:76:49:16:da:86:d0:23:5d:94:20:6b:0b: eb:89:fd:68:61:d2:37:36:75:22:fb:fc:66:3d:0a: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E2:0A:12:08:47:C9:18:3A:96:2D:4E:BB:16:1D:A9:DD:9D:6F:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af5fa3e2-cabf-3d75-97f1-1341349cb118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.175.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:87:30:b3:ce:e5:a7:6a:ae:a9:b6:77:95:c3:c8:71:d9:7e: 72:78:e7:66:6e:3e:f0:7c:27:97:f6:d3:2d:7a:8b:66:89:cd: 84:2f:68:7f:71:dc:d5:59:6f:c0:69:a7:63:3c:2d:3b:f0:d0: fd:83:9a:b5:95:e2:10:17:ef:ee:81:a6:b4:05:e8:a2:3b:33: fa:f4:94:1c:03:4a:68:80:70:48:f5:d4:34:df:ac:e1:d3:c6: 0f:2a:17:87:cd:65:a8:81:25:37:50:8b:76:ca:ba:cf:15:cb: 37:13:a0:29:41:5f:5c:b9:53:fe:dc:28:1a:37:08:dc:94:7f: 6c:d6:e3:99:94:ed:a5:e5:2d:49:0f:13:05:43:30:37:0c:86: ec:52:da:48:7a:0d:c5:c5:28:a8:76:2c:99:82:e9:23:c9:3c: a0:b0:34:4c:9e:3b:da:83:d6:fc:c3:49:d0:7a:dd:2d:a0:b1: 40:55:7a:98:ae:b1:d4:7c:24:57:5e:57:f2:ae:89:02:cb:47: 5a:56:d0:5f:aa:1a:02:5c:e5:6a:5a:67:ce:87:07:6c:e2:56: ba:3f:10:5e:c0:b7:08:e5:09:b9:87:e8:6e:bc:75:7a:14:31: 30:08:2e:ad:0b:f9:ac:6b:5f:45:02:06:6b:ca:28:c0:35:5b: 43:6d:a4:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiQPkft3g7FAXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODdjNDlmMjUtMmM4My00OGYxLThhNTUtODA2Njk4MDljYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz/RTINjFvDWsyK1eAioxtvcP/x9aTV+3XV8 Z5fK5bWv0PjzobqJfhLPB/VeMP9afgIW1cMiUpUrnPvIhA/kts3tQgML5S6fXG31 5FZoXn4aV4AHwe8lmX/uB6+R5dVhn20CzH0VqIp0SgyjbJWEneehfNUrInuKreRS tG72/6hRQGIyHa0Q2O/D/kRHbSWkeBL//0rH9aUuD7V8m/ymX9K45jeezYjCQ2/h v9Xv0X88f4SjQEYAYA+7OF++CcpYj99216QvaRV+0IgnPZHCdnl1+v3xMlG6doVH //hGytL4kqR2SRbahtAjXZQgawvrif1oYdI3NnUi+/xmPQrUeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDiChIIR8kYOpYtTrsWHandnW+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY1ZmEzZTItY2FiZi0z ZDc1LTk3ZjEtMTM0MTM0OWNiMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiHMLPO5adqrqm2d5XDyHHZfnJ452ZuPvB8J5f20y16i2aJzYQvaH9x 3NVZb8Bpp2M8LTvw0P2DmrWV4hAX7+6BprQF6KI7M/r0lBwDSmiAcEj11DTfrOHT xg8qF4fNZaiBJTdQi3bKus8VyzcToClBX1y5U/7cKBo3CNyUf2zW45mU7aXlLUkP EwVDMDcMhuxS2kh6DcXFKKh2LJmC6SPJPKCwNEyeO9qD1vzDSdB63S2gsUBVepiu sdR8JFdeV/KuiQLLR1pW0F+qGgJc5WpaZ86HB2ziVro/EF7AtwjlCbmH6G68dXoU MTAILq0L+axrX0UCBmvKKMA1W0NtpKY= -----END CERTIFICATE-----Generated at Fri Aug 8 20:51:53 2025 by rpki-client