$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c7da2e-8bb0-3bf0-b3e9-4532a266452b.roa File: d3c7da2e-8bb0-3bf0-b3e9-4532a266452b.roa (raw, json) Hash identifier: ZXDTnM9607vTqimeLatC9UhJ5A5Df2WVLD1/m+UTEG0= Subject key identifier: 77:33:9E:4C:D9:2D:AD:AB:0F:53:2A:87:86:EE:4A:A9:7E:63:9E:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636426A09485795FFC45780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c7da2e-8bb0-3bf0-b3e9-4532a266452b.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.160.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:42:6a:09:48:57:95:ff:c4:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=2e206172-7f66-496a-b5ec-4cc4cc2e5ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:97:fa:51:d8:16:e2:b4:de:4b:5c:be:34: 2f:8c:88:0b:6b:82:19:02:cf:df:a0:b2:55:a9:d8: 07:34:86:ba:06:a4:8c:7e:da:88:ad:e6:71:91:08: ef:ed:44:cc:64:0c:1b:41:77:7c:37:8b:01:89:5c: 93:6f:dd:60:38:b4:9b:71:d8:ce:a2:84:23:9d:53: df:f3:d9:05:21:8a:bc:f9:72:77:3a:37:56:62:7b: fc:81:93:34:e7:1a:5b:7e:4f:3e:65:ca:78:40:27: ec:1f:79:35:b6:66:ff:d0:66:03:98:15:81:ac:d1: 79:60:fb:a2:7d:39:62:d5:08:4f:dc:b6:45:5e:21: 40:97:c6:d9:b0:e0:1d:61:4e:96:5d:b8:fd:5d:58: c0:7d:54:06:46:c6:b6:98:28:4e:0a:26:72:ad:d0: 65:af:a8:2f:e3:38:17:08:8e:ba:e7:60:4f:07:fb: fd:2a:83:7c:ce:e6:fb:66:40:68:13:c7:1c:9e:f0: 3e:21:36:ff:82:07:b9:bd:50:eb:be:7c:07:2f:c5: 69:1b:2d:31:47:73:32:6c:90:59:38:08:f3:ac:2c: 91:e7:40:a4:ff:8f:cf:d1:bd:3e:95:8c:c5:b4:f6: 09:3b:73:f2:ae:b2:88:1f:86:70:45:e1:e6:be:aa: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:33:9E:4C:D9:2D:AD:AB:0F:53:2A:87:86:EE:4A:A9:7E:63:9E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c7da2e-8bb0-3bf0-b3e9-4532a266452b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:50:26:ba:0f:5f:b3:90:f8:f5:1b:f5:2d:e9:ba:7c:cf:9a: 23:ef:fe:fc:95:41:f4:7c:5e:01:ca:11:ca:c9:49:4b:12:09: c5:44:84:64:cf:9b:db:13:61:cd:28:c2:7f:11:0a:9e:45:fa: 0e:8e:f2:47:89:7e:f7:76:ac:f2:20:f7:f8:9d:6c:42:cb:8b: e5:c8:07:29:18:58:28:6a:64:f6:60:f3:0f:ce:ac:56:4c:ca: 17:86:27:e7:5f:87:68:91:ff:45:85:10:9e:d5:b9:e9:51:4d: db:4f:13:92:fb:5c:25:6d:f6:1f:f9:93:7c:18:f5:fd:11:58: ce:12:60:db:ba:2a:29:53:b1:f5:c1:2f:d5:97:7b:9d:c6:8f: f9:c3:66:d1:41:b2:1d:01:12:cf:7f:f0:c6:93:9b:f1:93:21: 68:27:53:16:8c:cb:68:26:b4:9d:c9:33:92:bb:e8:c2:d0:24: a5:dd:c0:17:78:50:c4:ed:3d:f6:16:0c:72:6f:59:56:ad:2a: 90:20:64:5e:52:de:15:79:20:8d:46:c9:02:ec:1c:d8:b2:fc: 01:56:2d:01:0e:93:67:fa:df:ed:d3:18:2f:d5:07:47:74:88: 06:c8:22:8d:20:a9:ea:a1:f6:43:6d:b7:19:10:67:3a:65:6c: c0:cd:45:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkJqCUhXlf/EV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MmUyMDYxNzItN2Y2Ni00OTZhLWI1ZWMtNGNjNGNjMmU1ZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNaX+lHYFuK03ktcvjQvjIgLa4IZAs/foLJV qdgHNIa6BqSMftqIreZxkQjv7UTMZAwbQXd8N4sBiVyTb91gOLSbcdjOooQjnVPf 89kFIYq8+XJ3OjdWYnv8gZM05xpbfk8+Zcp4QCfsH3k1tmb/0GYDmBWBrNF5YPui fTli1QhP3LZFXiFAl8bZsOAdYU6WXbj9XVjAfVQGRsa2mChOCiZyrdBlr6gv4zgX CI6652BPB/v9KoN8zub7ZkBoE8ccnvA+ITb/gge5vVDrvnwHL8VpGy0xR3MybJBZ OAjzrCyR50Ck/4/P0b0+lYzFtPYJO3PyrrKIH4ZwReHmvqpLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcznkzZLa2rD1Mqh4buSql+Y57YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNjN2RhMmUtOGJiMC0z YmYwLWIzZTktNDUzMmEyNjY0NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJQJroPX7OQ+PUb9S3punzPmiPv/vyVQfR8XgHKEcrJSUsSCcVEhGTP m9sTYc0own8RCp5F+g6O8keJfvd2rPIg9/idbELLi+XIBykYWChqZPZg8w/OrFZM yheGJ+dfh2iR/0WFEJ7VuelRTdtPE5L7XCVt9h/5k3wY9f0RWM4SYNu6KilTsfXB L9WXe53Gj/nDZtFBsh0BEs9/8MaTm/GTIWgnUxaMy2gmtJ3JM5K76MLQJKXdwBd4 UMTtPfYWDHJvWVatKpAgZF5S3hV5II1GyQLsHNiy/AFWLQEOk2f63+3TGC/VB0d0 iAbIIo0gqeqh9kNttxkQZzplbMDNRa0= -----END CERTIFICATE-----Generated at Wed Aug 6 14:21:22 2025 by rpki-client