$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8ecd144-036a-33a9-bf40-d4df5e5c5aec.roa File: b8ecd144-036a-33a9-bf40-d4df5e5c5aec.roa (raw, json) Hash identifier: WHOQkfIqM/1jjmG1KUzZP5hp4OYGRXfYxkVpIuurzJg= Subject key identifier: 35:7A:78:3E:1B:4B:EE:BD:02:9B:2B:AA:C1:8A:41:58:BC:79:9C:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367CA8855088C9A1AB2040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8ecd144-036a-33a9-bf40-d4df5e5c5aec.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 174.65.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7c:a8:85:50:88:c9:a1:ab:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=0b51c387-37b1-4a17-a08f-233a2f9d035c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:79:d0:a0:44:43:44:8a:61:b8:0f:36:fb:fc: 8b:12:cf:73:23:59:88:16:30:4e:d8:b6:f5:3e:bf: bd:f7:21:1c:1b:6a:d4:3d:4f:c9:29:ca:f9:06:f8: de:09:2d:d9:d7:22:4e:cb:8d:66:fa:c0:9c:d0:91: 25:7c:20:12:a9:70:1b:17:34:72:3e:44:c7:9a:4d: ca:c3:50:4d:37:e9:7a:c2:cf:50:68:cc:69:6c:b7: a3:a0:84:27:34:e0:91:32:0e:bb:04:d2:29:9a:b1: 6c:1d:7d:16:d0:ba:7e:dd:6a:63:b2:54:a7:aa:b4: 99:bc:52:70:19:1d:10:91:c1:d1:ab:f1:91:8c:84: 1c:9c:4a:7b:45:25:e4:06:66:91:46:cb:65:cc:de: 9d:42:c5:6b:57:2c:37:21:a6:05:54:bd:a1:f8:ce: 79:a0:53:23:40:04:78:84:b9:db:fe:e2:85:19:fe: 6e:62:48:5b:6b:2e:ed:ff:0d:bc:32:35:87:e1:95: f1:2e:a3:49:6a:de:7c:dd:c9:c3:a8:7c:b8:6c:f6: 36:72:0b:17:6c:f5:c2:5e:74:6e:43:aa:0f:98:73: dc:ad:31:90:5d:18:8f:90:8d:24:2d:71:51:6c:d5: 5c:9e:f8:f6:f4:19:30:06:56:e3:92:5f:ba:09:3d: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7A:78:3E:1B:4B:EE:BD:02:9B:2B:AA:C1:8A:41:58:BC:79:9C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8ecd144-036a-33a9-bf40-d4df5e5c5aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:79:aa:3b:b3:bf:39:7e:86:7c:93:dc:51:19:6f:b4:9a:05: b0:7f:c4:cb:d0:bc:dc:0d:fc:72:e7:5d:7e:1c:9a:c6:f6:a1: cc:dc:73:21:58:73:24:b6:67:6a:04:bf:ea:b7:02:91:ce:93: 83:3b:5f:57:75:30:14:13:ae:d1:23:0c:33:a4:f3:49:7d:5c: 82:49:5e:97:12:6a:41:55:2d:32:87:2e:58:8e:37:f3:49:a3: 3d:28:a8:85:a9:a2:92:a5:ba:bf:ba:7b:59:18:37:47:36:91: 40:77:ef:31:3c:70:a2:02:29:ec:19:56:2a:27:af:8a:9f:97: bf:de:4d:85:56:ee:64:a3:a4:0a:01:79:3d:e5:f5:8f:ed:ce: f0:3c:97:a7:9c:74:bd:db:89:23:86:88:cf:17:c3:6f:83:b5: 97:76:7d:7f:07:de:20:f2:7b:4e:6f:df:d3:1b:1a:0d:26:7c: 14:62:8c:c6:9c:82:38:e2:52:53:be:71:9d:b4:d6:3e:0a:10: 4b:c9:16:45:7a:e8:98:3f:d6:11:6c:3e:7c:e8:fd:07:de:01: 12:22:19:f8:b4:e5:3b:58:d3:19:19:97:14:72:5f:63:2d:ad: 81:88:a1:fe:cc:f9:26:95:cb:df:bf:5e:ff:fb:ca:ec:70:07: 8c:7c:5e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnyohVCIyaGrIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MGI1MWMzODctMzdiMS00YTE3LWEwOGYtMjMzYTJmOWQwMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnnQoERDRIphuA82+/yLEs9zI1mIFjBO2Lb1 Pr+99yEcG2rUPU/JKcr5BvjeCS3Z1yJOy41m+sCc0JElfCASqXAbFzRyPkTHmk3K w1BNN+l6ws9QaMxpbLejoIQnNOCRMg67BNIpmrFsHX0W0Lp+3WpjslSnqrSZvFJw GR0QkcHRq/GRjIQcnEp7RSXkBmaRRstlzN6dQsVrVyw3IaYFVL2h+M55oFMjQAR4 hLnb/uKFGf5uYkhbay7t/w28MjWH4ZXxLqNJat583cnDqHy4bPY2cgsXbPXCXnRu Q6oPmHPcrTGQXRiPkI0kLXFRbNVcnvj29BkwBlbjkl+6CT17VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV6eD4bS+69ApsrqsGKQVi8eZxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjhlY2QxNDQtMDM2YS0z M2E5LWJmNDAtZDRkZjVlNWM1YWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB5qjuzvzl+hnyT3FEZb7SaBbB/xMvQvNwN/HLnXX4cmsb2oczccyFY cyS2Z2oEv+q3ApHOk4M7X1d1MBQTrtEjDDOk80l9XIJJXpcSakFVLTKHLliON/NJ oz0oqIWpopKlur+6e1kYN0c2kUB37zE8cKICKewZVionr4qfl7/eTYVW7mSjpAoB eT3l9Y/tzvA8l6ecdL3biSOGiM8Xw2+DtZd2fX8H3iDye05v39MbGg0mfBRijMac gjjiUlO+cZ201j4KEEvJFkV66Jg/1hFsPnzo/QfeARIiGfi05TtY0xkZlxRyX2Mt rYGIof7M+SaVy9+/Xv/7yuxwB4x8XiQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:01:18 2025 by rpki-client