$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8efda1d-396c-3ef1-8d35-c9a2223b1e08.roa File: c8efda1d-396c-3ef1-8d35-c9a2223b1e08.roa (raw, json) Hash identifier: gCvBJ/dOHgxlQpRw24QPBvgyEUhszyHm0iDZ+FqOk+0= Subject key identifier: 60:40:BE:0B:A2:BF:48:BD:05:2E:0E:43:88:E7:DD:89:B6:A9:A6:35 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963645A882CD3F4E34B6BD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8efda1d-396c-3ef1-8d35-c9a2223b1e08.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.161.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:45:a8:82:cd:3f:4e:34:b6:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=12bfda2a-dd45-411d-bf2d-15ceb2d2cba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:cd:77:03:c8:ce:54:da:05:f5:2a:b8:71: 60:97:ab:fa:48:26:4e:ba:7b:01:04:a7:14:9c:5c: 44:52:2b:c2:fc:2d:80:0e:e9:1b:90:a8:17:a5:9a: 36:8c:9f:2f:56:99:29:42:13:e7:a4:2f:d7:e5:fd: bb:39:7d:2a:49:6a:98:58:d9:6d:0c:52:f9:d7:cc: 9f:7b:b2:5d:d8:0e:63:d6:08:23:4f:f5:29:9d:4e: a7:0f:57:a5:de:b1:e6:b8:97:8e:56:7d:88:f9:9f: ab:26:4a:e6:43:cf:02:a2:70:44:ff:53:f6:6c:65: 30:2e:8b:c8:bf:52:2f:1c:8d:4e:d7:b7:e1:f4:4a: f6:c9:46:ea:b2:04:74:96:b8:ed:af:45:9e:4a:c6: de:d7:33:34:d2:cb:d2:d4:97:34:75:13:79:e9:de: 22:22:ed:f8:9a:b4:63:3e:54:c6:24:7a:64:8b:a3: 27:c0:70:6f:64:10:1e:f1:cb:1c:49:87:f0:9c:fb: 24:66:e6:89:84:d8:06:f0:87:13:2f:5d:b9:f0:78: 2b:2f:8d:f1:1b:0f:97:b7:2e:a5:b6:ed:57:fb:c7: cb:0c:a4:e7:f2:fd:44:ee:d0:09:e9:c2:8f:a6:8e: b6:cb:a5:f4:83:f8:26:9a:30:46:e2:eb:48:cb:25: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:40:BE:0B:A2:BF:48:BD:05:2E:0E:43:88:E7:DD:89:B6:A9:A6:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8efda1d-396c-3ef1-8d35-c9a2223b1e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:82:9d:35:d0:d0:9d:b2:39:dc:63:c6:28:c8:c2:63:05:75: b9:fa:9e:43:82:e9:7c:0b:43:c0:9e:76:d6:df:a7:1e:a9:53: 41:94:02:5d:dc:6c:ab:04:a5:2b:a1:19:17:96:56:65:47:c3: 74:dd:70:fd:c7:22:e7:04:8a:46:f7:bb:b3:37:ff:c7:c8:ee: 8d:b3:c7:46:d8:3b:5e:fd:77:62:09:02:b7:39:4b:3b:1b:35: a4:e8:b5:63:09:af:9c:9f:54:0f:f7:80:45:78:d0:43:a2:f4: 85:4a:6d:cf:68:2a:e4:45:b2:4d:a5:8e:3a:e8:7b:31:3f:8b: 7e:10:a3:f3:e9:64:af:8d:9f:ba:74:df:9d:0c:60:04:7c:cc: 6f:5f:70:b4:68:ae:ab:20:3d:3b:b7:69:66:28:e6:54:24:ab: a0:aa:a3:f1:a0:ac:58:86:cc:e2:a2:e1:7f:fc:d8:0d:ed:e0: 2a:40:6e:0c:79:16:63:bf:0a:15:1b:e2:91:9a:53:91:e2:bd: 2d:dd:29:f9:ae:32:df:0c:23:85:13:78:2e:3c:05:7e:a5:64: 1c:24:53:b3:e0:11:ed:21:80:5f:1f:38:5a:d8:34:88:05:c6: 04:14:c1:35:12:a1:09:90:7a:77:1a:b8:4e:3e:5b:3f:50:f6: 03:8a:72:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkWogs0/TjS2vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MTJiZmRhMmEtZGQ0NS00MTFkLWJmMmQtMTVjZWIyZDJjYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJzNdwPIzlTaBfUquHFgl6v6SCZOunsBBKcU nFxEUivC/C2ADukbkKgXpZo2jJ8vVpkpQhPnpC/X5f27OX0qSWqYWNltDFL518yf e7Jd2A5j1ggjT/UpnU6nD1el3rHmuJeOVn2I+Z+rJkrmQ88ConBE/1P2bGUwLovI v1IvHI1O17fh9Er2yUbqsgR0lrjtr0WeSsbe1zM00svS1Jc0dRN56d4iIu34mrRj PlTGJHpki6MnwHBvZBAe8cscSYfwnPskZuaJhNgG8IcTL1258HgrL43xGw+Xty6l tu1X+8fLDKTn8v1E7tAJ6cKPpo62y6X0g/gmmjBG4utIyyUMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBAvguiv0i9BS4OQ4jn3Ym2qaY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzhlZmRhMWQtMzk2Yy0z ZWYxLThkMzUtYzlhMjIyM2IxZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSCnTXQ0J2yOdxjxijIwmMFdbn6nkOC6XwLQ8Cedtbfpx6pU0GUAl3c bKsEpSuhGReWVmVHw3TdcP3HIucEikb3u7M3/8fI7o2zx0bYO179d2IJArc5Szsb NaTotWMJr5yfVA/3gEV40EOi9IVKbc9oKuRFsk2ljjroezE/i34Qo/PpZK+Nn7p0 350MYAR8zG9fcLRorqsgPTu3aWYo5lQkq6Cqo/GgrFiGzOKi4X/82A3t4CpAbgx5 FmO/ChUb4pGaU5HivS3dKfmuMt8MI4UTeC48BX6lZBwkU7PgEe0hgF8fOFrYNIgF xgQUwTUSoQmQencauE4+Wz9Q9gOKcjk= -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:21 2025 by rpki-client