$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4080fb6-bf26-34ec-9ea8-1db0577c6181.roa File: c4080fb6-bf26-34ec-9ea8-1db0577c6181.roa (raw, json) Hash identifier: oCMNuGIoWHVs6ZW+C8APLWSzFpYVQ30lRlLpdeZ3+gA= Subject key identifier: 2C:08:45:34:D0:04:66:B2:BB:FE:42:E4:2B:2F:74:F5:29:8F:6C:4F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636267EF179D4AD36C13F4C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4080fb6-bf26-34ec-9ea8-1db0577c6181.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.188.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:26:7e:f1:79:d4:ad:36:c1:3f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=e95e7a76-795b-4550-828b-4bdd68bfa57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:12:b6:9d:b1:7f:29:a2:d9:01:b2:81:ad:de: bb:ad:87:21:0e:47:df:3c:6d:a9:59:79:ef:d0:d2: 36:45:11:3e:55:69:56:17:e9:4d:15:d9:6a:18:c9: 76:99:47:06:bd:87:1a:6f:f3:9b:f2:3b:2a:01:e9: f3:0f:96:95:d4:21:8a:e9:4e:50:00:ab:82:2f:94: d6:95:bc:82:d5:c9:24:93:11:15:76:f3:82:12:3b: 87:8f:d8:83:83:72:d7:0f:39:1b:bc:4e:0c:17:c6: b3:ab:1a:c3:43:38:20:b3:a1:51:a7:75:c9:b5:26: 51:e0:96:f1:67:9b:72:59:8a:e9:a0:75:6a:e3:42: 03:20:22:9a:39:63:4d:aa:58:1e:8e:4b:77:1e:a7: 71:5a:6b:c4:e2:31:1d:49:35:5c:ed:05:17:12:96: df:ca:45:ea:c7:c2:54:d5:99:a3:cf:8b:dc:27:7c: 8f:76:29:98:35:96:a1:f3:3c:ab:99:df:4b:03:8b: e9:e7:e5:58:4f:ba:24:23:6c:47:33:e9:45:7c:99: 77:c0:db:0f:fe:c1:f0:a5:31:66:ea:0f:a5:ed:8b: 3b:ff:4c:59:e7:3e:90:79:b6:66:ab:34:c1:7a:6f: 98:85:86:37:65:72:76:06:db:6b:a6:2a:06:84:ff: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:08:45:34:D0:04:66:B2:BB:FE:42:E4:2B:2F:74:F5:29:8F:6C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4080fb6-bf26-34ec-9ea8-1db0577c6181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0b:57:5e:64:35:c2:3a:f8:f9:f3:a4:05:ad:2f:7d:23:93: 40:e3:6e:91:1d:48:77:b8:03:5e:bb:ec:1c:92:94:c3:b9:06: dc:9e:00:67:c0:dc:f5:56:cc:29:93:1b:7b:fb:be:17:bb:75: 5a:47:e5:c8:f9:96:f0:b6:8c:21:dd:6b:71:54:86:a2:98:86: 86:11:2c:17:fc:d1:cf:11:55:3f:51:52:ec:5a:7d:0f:4d:f5: 34:6a:a6:1c:a7:45:eb:3e:74:70:9b:83:eb:eb:f2:01:64:24: f9:6e:87:3c:8b:43:52:56:e6:c8:27:af:fd:30:76:59:bf:a0: 49:71:3f:f6:63:14:ec:c8:00:7e:13:ea:92:8e:2e:db:3b:b7: ec:39:77:5b:b6:9a:52:e8:d6:f0:6e:64:2a:86:1b:b4:4b:7d: fb:e3:79:74:42:5a:fc:da:e0:93:37:e6:83:d2:03:05:44:ca: 60:2b:10:86:a0:98:ec:91:49:45:0b:0e:96:ff:c6:5d:d3:dd: ca:bc:e6:b9:7b:41:af:9a:3c:a9:0e:26:e2:bc:3f:a6:bd:da: f8:d0:57:a9:50:94:45:14:14:28:37:da:9b:97:af:e0:14:54: 46:cb:65:b2:7b:b6:70:c2:00:2c:03:86:77:f9:5b:4d:80:9c: 79:65:02:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiZ+8XnUrTbBP0wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTk1ZTdhNzYtNzk1Yi00NTUwLTgyOGItNGJkZDY4YmZhNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxK2nbF/KaLZAbKBrd67rYchDkffPG2pWXnv 0NI2RRE+VWlWF+lNFdlqGMl2mUcGvYcab/Ob8jsqAenzD5aV1CGK6U5QAKuCL5TW lbyC1ckkkxEVdvOCEjuHj9iDg3LXDzkbvE4MF8azqxrDQzggs6FRp3XJtSZR4Jbx Z5tyWYrpoHVq40IDICKaOWNNqlgejkt3HqdxWmvE4jEdSTVc7QUXEpbfykXqx8JU 1Zmjz4vcJ3yPdimYNZah8zyrmd9LA4vp5+VYT7okI2xHM+lFfJl3wNsP/sHwpTFm 6g+l7Ys7/0xZ5z6QebZmqzTBem+YhYY3ZXJ2BttrpioGhP8IeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwIRTTQBGayu/5C5CsvdPUpj2xPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzQwODBmYjYtYmYyNi0z NGVjLTllYTgtMWRiMDU3N2M2MTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYLV15kNcI6+PnzpAWtL30jk0DjbpEdSHe4A1677BySlMO5BtyeAGfA 3PVWzCmTG3v7vhe7dVpH5cj5lvC2jCHda3FUhqKYhoYRLBf80c8RVT9RUuxafQ9N 9TRqphynRes+dHCbg+vr8gFkJPluhzyLQ1JW5sgnr/0wdlm/oElxP/ZjFOzIAH4T 6pKOLts7t+w5d1u2mlLo1vBuZCqGG7RLffvjeXRCWvza4JM35oPSAwVEymArEIag mOyRSUULDpb/xl3T3cq85rl7Qa+aPKkOJuK8P6a92vjQV6lQlEUUFCg32puXr+AU VEbLZbJ7tnDCACwDhnf5W02AnHllAlA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:26:40 2025 by rpki-client