$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c70ab4-f5f2-382b-94b2-f5d3ffcb65d4.roa File: d3c70ab4-f5f2-382b-94b2-f5d3ffcb65d4.roa (raw, json) Hash identifier: 7i70+AypgvG3mA1Esc+Beq/azPxREhO+WRp3ZRiX7tI= Subject key identifier: C6:29:DA:BB:8B:4C:3F:97:91:21:E1:48:DE:AE:91:0C:E8:92:93:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367E94369B27734AEA9500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c70ab4-f5f2-382b-94b2-f5d3ffcb65d4.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 174.65.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7e:94:36:9b:27:73:4a:ea:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a96a1be5-2b92-4f61-a0c6-0c2fb0584808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:40:ca:82:cd:c6:66:68:d2:29:73:d5:b6:c2: 81:ad:60:95:f3:df:cc:90:6c:63:1d:1e:24:62:14: 70:60:11:24:5d:97:57:2d:5e:db:f8:91:16:d3:0a: 2e:1c:49:cd:06:e4:d9:25:45:cf:16:cc:d5:50:9d: 27:1c:6d:4b:3f:60:fb:c0:cb:44:9a:52:2b:e1:6d: 2b:02:34:5d:d2:ef:3a:ec:fb:a0:8e:09:70:bc:34: a5:bd:42:54:3e:cf:52:1f:ef:18:af:33:46:9b:9b: 61:1f:28:a9:df:33:07:67:af:38:c1:5d:7d:4d:01: 3c:30:75:cd:cb:52:7a:4f:87:d5:52:a8:49:82:19: 3a:a4:15:e8:3f:4f:47:65:70:02:e1:1d:9e:de:aa: 51:1a:bb:fe:09:9c:d0:2c:29:db:26:6c:0b:34:b2: c3:64:c9:52:1b:35:4f:f3:be:9f:d2:f6:3d:a5:07: c2:45:1c:d7:09:aa:a8:77:01:ee:b3:f4:f2:19:20: f5:30:eb:fb:b9:7e:b7:09:d0:25:ce:e1:a7:f4:6d: ed:61:f0:86:6c:2d:00:e9:a2:a4:69:24:6d:e7:34: c1:9a:47:17:bf:de:0f:07:a1:7d:30:8b:51:74:17: 7a:43:09:d3:82:40:fa:eb:ac:45:d7:b9:7c:59:50: eb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:29:DA:BB:8B:4C:3F:97:91:21:E1:48:DE:AE:91:0C:E8:92:93:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c70ab4-f5f2-382b-94b2-f5d3ffcb65d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:74:44:f4:09:9b:07:89:38:9a:f6:25:af:7a:cc:32:38:5a: fe:a0:24:00:a3:90:ce:22:50:b6:e5:dd:80:a3:1f:02:61:4c: fb:b9:a7:9d:15:d9:07:dc:80:f1:89:02:9b:ce:41:a0:cb:5d: 6b:1a:41:7e:2a:73:c1:02:88:a8:20:2b:b5:20:3d:1a:f5:e8: 75:61:3e:cd:4a:34:f7:8f:8c:43:52:ac:c6:ba:d2:f7:6b:54: c5:2f:75:9f:d1:98:45:80:09:63:32:a8:8f:00:85:4e:86:62: 99:12:fa:e5:13:dc:ce:2d:22:22:34:46:a8:df:ee:3c:dc:d3: 77:00:4f:18:00:bd:13:e7:53:36:bc:bb:7e:cc:91:01:fb:c7: dd:11:bb:f6:c2:0c:e8:32:41:8e:ea:24:b3:28:a0:fb:75:b5: 2c:51:26:04:6f:7b:b3:e2:07:88:d8:3a:5f:69:68:eb:5b:54: 75:27:0c:cc:8d:fc:52:c1:ae:e8:7e:cb:81:55:8b:83:54:39: 46:36:42:35:e3:7d:16:55:16:06:3b:a5:8f:ed:b3:76:4e:15: 28:1e:af:44:7e:91:9d:05:c7:d8:71:2c:17:b4:2a:93:64:68: ee:fe:65:8d:cc:66:6c:40:fe:e6:ab:d3:34:8e:70:58:a7:2d: e0:75:13:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNn6UNpsnc0rqlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTk2YTFiZTUtMmI5Mi00ZjYxLWEwYzYtMGMyZmIwNTg0ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kDKgs3GZmjSKXPVtsKBrWCV89/MkGxjHR4k YhRwYBEkXZdXLV7b+JEW0wouHEnNBuTZJUXPFszVUJ0nHG1LP2D7wMtEmlIr4W0r AjRd0u867PugjglwvDSlvUJUPs9SH+8YrzNGm5thHyip3zMHZ684wV19TQE8MHXN y1J6T4fVUqhJghk6pBXoP09HZXAC4R2e3qpRGrv+CZzQLCnbJmwLNLLDZMlSGzVP 876f0vY9pQfCRRzXCaqodwHus/TyGSD1MOv7uX63CdAlzuGn9G3tYfCGbC0A6aKk aSRt5zTBmkcXv94PB6F9MItRdBd6QwnTgkD666xF17l8WVDrIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYp2ruLTD+XkSHhSN6ukQzokpMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNjNzBhYjQtZjVmMi0z ODJiLTk0YjItZjVkM2ZmY2I2NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB90RPQJmweJOJr2Ja96zDI4Wv6gJACjkM4iULbl3YCjHwJhTPu5p50V 2QfcgPGJApvOQaDLXWsaQX4qc8ECiKggK7UgPRr16HVhPs1KNPePjENSrMa60vdr VMUvdZ/RmEWACWMyqI8AhU6GYpkS+uUT3M4tIiI0Rqjf7jzc03cATxgAvRPnUza8 u37MkQH7x90Ru/bCDOgyQY7qJLMooPt1tSxRJgRve7PiB4jYOl9paOtbVHUnDMyN /FLBruh+y4FVi4NUOUY2QjXjfRZVFgY7pY/ts3ZOFSger0R+kZ0Fx9hxLBe0KpNk aO7+ZY3MZmxA/uar0zSOcFinLeB1E4s= -----END CERTIFICATE-----Generated at Wed Aug 6 16:07:56 2025 by rpki-client