$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc2a6f70-aeff-388d-bc36-a0d628d68a5d.roa File: bc2a6f70-aeff-388d-bc36-a0d628d68a5d.roa (raw, json) Hash identifier: Qp+n/LruXickLgD8V+tLJQiro6QNuusIFc68BsfdRxs= Subject key identifier: 9C:99:35:28:78:A9:24:A2:41:27:A4:2A:3F:D5:E3:A7:55:88:BD:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636423D95E2F510B3316780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc2a6f70-aeff-388d-bc36-a0d628d68a5d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.160.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:42:3d:95:e2:f5:10:b3:31:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=3108523f-6973-49e8-8295-14e851119919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:12:1b:a0:55:e6:c3:b2:d5:70:6e:2f:2e: 05:eb:db:6f:86:ae:76:28:40:5a:e1:49:35:25:ba: b5:1a:3e:1b:9c:71:88:d7:4c:df:b1:a9:f9:5f:a8: ad:ed:d5:8f:ca:cd:84:69:19:bb:08:74:aa:d2:b5: 63:27:c6:38:7e:83:55:03:fa:ca:c7:62:f5:ee:c3: 6a:c6:6d:f9:29:50:d1:d8:01:db:8b:f0:7e:33:5f: 68:e8:71:69:ef:b8:cc:a2:3d:a0:70:e4:d6:8c:73: 17:4e:e0:00:c6:b1:61:1e:7f:cb:19:d9:98:ed:b2: 2f:3e:b1:9e:4f:e6:92:1d:f1:da:d1:30:96:c2:e9: 53:f7:7c:79:c9:79:88:a8:8e:5b:54:e0:94:8a:9f: f5:b8:99:53:eb:c4:00:56:18:ac:02:94:2a:c0:bb: a9:99:a6:16:19:7d:ad:f3:fa:fd:dd:3b:b3:ff:74: 1b:6d:99:e9:d1:5f:e0:6a:0b:89:af:b1:79:01:eb: 62:b8:ec:a6:2e:04:40:e5:6b:c8:1c:bd:13:91:3f: d6:2e:bb:9e:3e:4a:69:b7:e8:22:c6:b4:2b:39:2d: 8c:6e:91:8d:b9:bb:88:c0:db:16:62:33:64:96:db: 67:46:67:e1:5c:33:9c:ff:36:3b:33:d6:14:02:3c: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:99:35:28:78:A9:24:A2:41:27:A4:2A:3F:D5:E3:A7:55:88:BD:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc2a6f70-aeff-388d-bc36-a0d628d68a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:0d:b5:fc:66:eb:95:f5:5e:30:86:ea:4c:f3:67:ef:42:3b: a7:b4:7f:ad:72:c4:a4:48:29:03:3e:e2:1d:24:ed:3f:44:85: 08:00:23:9a:f5:9f:92:56:de:39:d2:46:f2:4d:d6:ec:5d:12: c1:9c:35:4a:53:74:76:82:ed:f0:cb:67:10:90:83:76:7c:67: fa:cf:0a:2a:51:c2:80:19:70:79:59:a0:78:e7:9e:3f:8e:a0: 62:ef:c2:75:2d:56:3e:6b:1d:63:a4:2a:4b:80:d7:73:56:10: 2d:2f:28:63:e4:39:52:43:52:8a:c6:56:62:50:ce:df:a4:69: 41:24:8a:d6:85:6f:c9:75:a6:b3:58:34:73:ac:69:2e:62:a6: 78:08:4b:0e:9e:c6:0b:ff:e1:41:13:e3:55:0d:11:90:de:d6: f7:30:40:a0:fc:e3:92:d6:fa:2f:b9:1a:7b:f3:b7:17:ed:e3: d9:44:5d:bd:bc:a2:54:82:df:8b:a6:8b:43:9b:fb:ac:7e:f4: 86:af:e3:dc:de:13:dc:23:bc:ac:6f:06:e8:b9:1d:04:1c:27: 4f:39:e9:91:26:89:80:53:2a:d8:a2:98:df:e1:69:96:be:a4: 48:7b:fe:49:4b:32:b9:e0:2e:df:83:ff:1a:51:ca:cb:38:46: f8:0d:c8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkI9leL1ELMxZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzEwODUyM2YtNjk3My00OWU4LTgyOTUtMTRlODUxMTE5OTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHYSG6BV5sOy1XBuLy4F69tvhq52KEBa4Uk1 Jbq1Gj4bnHGI10zfsan5X6it7dWPys2EaRm7CHSq0rVjJ8Y4foNVA/rKx2L17sNq xm35KVDR2AHbi/B+M19o6HFp77jMoj2gcOTWjHMXTuAAxrFhHn/LGdmY7bIvPrGe T+aSHfHa0TCWwulT93x5yXmIqI5bVOCUip/1uJlT68QAVhisApQqwLupmaYWGX2t 8/r93Tuz/3QbbZnp0V/gaguJr7F5AetiuOymLgRA5WvIHL0TkT/WLruePkppt+gi xrQrOS2MbpGNubuIwNsWYjNklttnRmfhXDOc/zY7M9YUAjwtIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyZNSh4qSSiQSekKj/V46dViL3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmMyYTZmNzAtYWVmZi0z ODhkLWJjMzYtYTBkNjI4ZDY4YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkNtfxm65X1XjCG6kzzZ+9CO6e0f61yxKRIKQM+4h0k7T9EhQgAI5r1 n5JW3jnSRvJN1uxdEsGcNUpTdHaC7fDLZxCQg3Z8Z/rPCipRwoAZcHlZoHjnnj+O oGLvwnUtVj5rHWOkKkuA13NWEC0vKGPkOVJDUorGVmJQzt+kaUEkitaFb8l1prNY NHOsaS5ipngISw6exgv/4UET41UNEZDe1vcwQKD845LW+i+5Gnvztxft49lEXb28 olSC34umi0Ob+6x+9Iav49zeE9wjvKxvBui5HQQcJ0856ZEmiYBTKtiimN/haZa+ pEh7/klLMrngLt+D/xpRyss4RvgNyME= -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:43 2025 by rpki-client