$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf6716a4-54e2-38f3-8051-105ae86b25fe.roa File: bf6716a4-54e2-38f3-8051-105ae86b25fe.roa (raw, json) Hash identifier: ES+2R/2J1qoZPGS6hozDdclUWruvjxxk+uCPAfEbeZw= Subject key identifier: F3:9A:35:ED:75:41:11:BF:24:85:57:D4:76:0D:85:E9:45:FA:0A:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963644F6B5DA2F119071FE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf6716a4-54e2-38f3-8051-105ae86b25fe.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.161.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:44:f6:b5:da:2f:11:90:71:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=07ddd270-1bd3-49e4-bc0e-9ee97b60204d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:50:21:3f:f6:f1:e9:4c:9e:d0:4b:dd:6d: 13:84:4b:7d:d3:0a:80:87:ab:10:6e:3b:5f:97:81: f9:ae:25:93:4b:0a:7d:19:0c:2d:5f:f8:06:85:ae: 51:47:cc:bf:06:db:be:4a:db:7f:e1:6d:cb:0d:30: 72:b7:11:00:97:97:bb:76:be:64:16:e2:7d:2e:8b: d7:ce:7c:ed:23:de:d2:ab:1f:f9:71:23:a6:28:d4: 1b:94:8b:b6:c7:99:51:de:22:57:85:4a:d6:23:5c: de:a2:e3:5b:1d:74:af:de:75:6b:bd:b2:c6:6f:63: 17:51:cd:7f:1c:c6:8b:85:53:28:b1:7b:dc:94:78: 10:1d:e1:37:f4:ed:76:23:69:fc:16:e7:a4:9e:c6: 58:87:14:80:b1:d2:55:4d:97:aa:24:a0:73:dc:8b: 49:86:8d:53:c8:24:60:c6:ea:f0:ab:9b:f7:18:fc: 46:3e:8c:db:a4:78:0b:61:91:ff:d2:f7:dc:36:7d: ec:62:99:bf:af:8f:13:8c:80:70:42:7a:04:66:4b: 10:dc:20:d4:f4:b5:61:79:ff:e1:0b:f5:3d:e1:c5: c4:12:68:1f:97:01:d1:d2:1d:9b:1b:be:30:5c:06: c6:00:71:08:b2:e4:11:05:92:1c:e1:13:92:4a:43: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9A:35:ED:75:41:11:BF:24:85:57:D4:76:0D:85:E9:45:FA:0A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf6716a4-54e2-38f3-8051-105ae86b25fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:86:33:c6:e7:9d:c4:7c:62:de:5e:e3:40:68:bd:4d:7d:aa: eb:e9:60:fd:6a:c7:35:1b:6d:24:9d:9e:f7:09:a0:8b:dc:5b: 77:ae:04:6c:8a:b9:8f:54:9f:e6:87:1a:c1:b1:ca:d2:13:03: 67:07:7c:c2:82:a6:47:6a:0b:a3:b1:3f:d6:18:ce:14:05:d7: 01:e0:80:bf:5b:84:c3:ad:49:b0:81:d1:d5:37:43:b3:fe:28: ab:23:ce:b8:6d:da:f0:54:90:f9:a6:1c:a3:b3:35:f6:64:46: fa:da:8a:a0:03:18:cc:18:59:a6:0d:d8:1b:0a:0f:28:34:93: ba:be:25:72:8b:43:b9:c1:87:70:5e:98:ae:e0:6b:aa:0e:ca: a1:b4:b7:26:49:6e:96:57:f2:98:4c:25:51:dd:f3:a4:e2:56: ea:5d:0b:75:cc:39:41:7c:30:ce:6a:2b:ee:22:94:50:8b:65: ed:68:35:f9:f5:5f:44:42:a1:81:c0:21:74:ca:33:8b:04:df: a8:15:62:59:09:ce:34:be:af:75:f7:6a:1d:11:79:92:68:88: f2:5b:47:8e:cd:18:48:e3:4b:eb:66:79:cb:c8:18:a2:16:cd: f2:29:0f:d9:83:a8:a7:62:6e:87:0e:fb:26:53:aa:a0:2e:c6: f8:83:f3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkT2tdovEZBx/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MDdkZGQyNzAtMWJkMy00OWU0LWJjMGUtOWVlOTdiNjAyMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6FQIT/28elMntBL3W0ThEt90wqAh6sQbjtf l4H5riWTSwp9GQwtX/gGha5RR8y/Btu+Stt/4W3LDTBytxEAl5e7dr5kFuJ9LovX znztI97Sqx/5cSOmKNQblIu2x5lR3iJXhUrWI1zeouNbHXSv3nVrvbLGb2MXUc1/ HMaLhVMosXvclHgQHeE39O12I2n8FueknsZYhxSAsdJVTZeqJKBz3ItJho1TyCRg xurwq5v3GPxGPozbpHgLYZH/0vfcNn3sYpm/r48TjIBwQnoEZksQ3CDU9LVhef/h C/U94cXEEmgflwHR0h2bG74wXAbGAHEIsuQRBZIc4ROSSkPbwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOaNe11QRG/JIVX1HYNhelF+gq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmY2NzE2YTQtNTRlMi0z OGYzLTgwNTEtMTA1YWU4NmIyNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6GM8bnncR8Yt5e40BovU19quvpYP1qxzUbbSSdnvcJoIvcW3euBGyK uY9Un+aHGsGxytITA2cHfMKCpkdqC6OxP9YYzhQF1wHggL9bhMOtSbCB0dU3Q7P+ KKsjzrht2vBUkPmmHKOzNfZkRvraiqADGMwYWaYN2BsKDyg0k7q+JXKLQ7nBh3Be mK7ga6oOyqG0tyZJbpZX8phMJVHd86TiVupdC3XMOUF8MM5qK+4ilFCLZe1oNfn1 X0RCoYHAIXTKM4sE36gVYlkJzjS+r3X3ah0ReZJoiPJbR47NGEjjS+tmecvIGKIW zfIpD9mDqKdibocO+yZTqqAuxviD8xI= -----END CERTIFICATE-----Generated at Fri Aug 8 00:47:57 2025 by rpki-client