$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9798fe0-d07d-3ec9-a86f-6fd9bc60a320.roa File: d9798fe0-d07d-3ec9-a86f-6fd9bc60a320.roa (raw, json) Hash identifier: M8QlW4hdjYhp8Bmd4pSXwx+i0N3CNZ/Vg8nI1kHpDzY= Subject key identifier: BF:CB:A2:61:23:B4:49:96:1B:D7:30:86:8B:AD:99:77:0B:68:21:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963630EF8D32710D34730F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9798fe0-d07d-3ec9-a86f-6fd9bc60a320.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 174.70.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:30:ef:8d:32:71:0d:34:73:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=137ad7b0-7076-48d3-93ad-1fc30f94e9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:19:80:c7:d7:a8:49:3c:d5:8e:1c:e5:c8: 51:b4:d5:19:57:e4:ae:04:f6:00:28:43:73:41:4e: b4:c1:df:e1:fa:90:f2:74:6c:8a:5f:23:7d:87:d6: 34:b5:9d:0f:5a:33:3c:9f:f3:9c:e7:2a:5c:37:53: 72:91:bc:db:ca:e3:ea:34:09:67:24:d3:7e:f8:3b: ed:87:6c:b4:cc:cb:27:6e:cb:fc:d7:42:33:56:f4: 11:36:99:23:e2:e8:bb:0b:41:36:16:3b:97:80:9b: 18:08:a7:08:88:45:3f:82:96:59:f0:81:18:d9:3c: 34:eb:d3:9e:e6:a7:58:01:4b:12:43:6e:b7:ea:cd: 55:f6:bd:88:3a:47:fd:e5:41:db:0b:34:70:ee:61: 5c:99:13:1c:a9:5c:f5:9d:7e:e3:ea:59:eb:66:91: 21:dc:36:68:05:21:d5:52:59:eb:c2:a0:93:c6:c2: 44:ab:e1:28:46:a0:25:9c:0e:db:07:ca:72:f6:e3: b7:68:5e:86:ec:52:42:4e:e1:73:db:0b:1d:3e:bf: a3:3c:a6:22:8e:83:b9:e8:20:72:9b:ff:5d:ea:36: c4:13:bc:e5:b7:7b:77:cb:41:19:7c:0d:3c:02:fe: 01:41:11:8c:0b:3f:07:a7:2c:bb:37:3d:2f:d9:35: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CB:A2:61:23:B4:49:96:1B:D7:30:86:8B:AD:99:77:0B:68:21:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9798fe0-d07d-3ec9-a86f-6fd9bc60a320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.70.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:49:03:d7:20:f9:62:77:77:85:8b:17:63:48:8c:f5:75:68: 3d:51:bc:69:2a:28:37:89:c2:1e:59:9a:d9:f3:4d:ab:76:05: f1:19:9b:3e:9e:ad:ab:8d:69:f4:8b:f5:6c:3f:26:07:95:e2: 80:b0:e5:c4:b7:03:04:cd:e6:39:ba:e5:33:90:4b:c9:c6:50: 83:41:02:dc:9e:a0:a5:12:de:ca:43:26:9f:c9:23:c8:a7:30: d9:70:b5:5d:a3:03:33:8d:4e:56:ed:4e:f3:0a:0b:aa:4d:79: 9f:73:1d:33:76:13:20:93:05:c0:ee:06:fa:da:c6:fa:b8:b9: 2a:b5:d8:46:ea:6f:66:fb:f1:af:51:b6:45:af:f9:10:06:10: e8:ef:60:6f:07:1f:8e:84:52:50:ff:bb:7d:8e:b0:2c:5f:39: ad:ee:1b:86:f6:19:14:36:45:c3:8c:e4:0b:be:d5:6d:19:ba: 47:77:17:e7:b0:14:5d:9c:09:69:a8:f3:44:52:0f:d2:01:09: dd:f4:9b:3e:f6:ff:25:3f:55:76:c5:e0:e4:e9:35:7d:0b:9b: ee:72:48:c5:ec:d1:91:56:26:b4:7f:c5:51:9d:58:eb:57:3e: 97:31:e6:d2:c4:b1:3b:84:b0:19:2a:30:dc:c7:f4:a7:9b:ce: 03:99:f7:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjDvjTJxDTRzD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MTM3YWQ3YjAtNzA3Ni00OGQzLTkzYWQtMWZjMzBmOTRlOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS8ZgMfXqEk81Y4c5chRtNUZV+SuBPYAKENz QU60wd/h+pDydGyKXyN9h9Y0tZ0PWjM8n/Oc5ypcN1NykbzbyuPqNAlnJNN++Dvt h2y0zMsnbsv810IzVvQRNpkj4ui7C0E2FjuXgJsYCKcIiEU/gpZZ8IEY2Tw069Oe 5qdYAUsSQ2636s1V9r2IOkf95UHbCzRw7mFcmRMcqVz1nX7j6lnrZpEh3DZoBSHV UlnrwqCTxsJEq+EoRqAlnA7bB8py9uO3aF6G7FJCTuFz2wsdPr+jPKYijoO56CBy m/9d6jbEE7zlt3t3y0EZfA08Av4BQRGMCz8Hpyy7Nz0v2TUQTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/LomEjtEmWG9cwhoutmXcLaCHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDk3OThmZTAtZDA3ZC0z ZWM5LWE4NmYtNmZkOWJjNjBhMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkb6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRJA9cg+WJ3d4WLF2NIjPV1aD1RvGkqKDeJwh5ZmtnzTat2BfEZmz6e rauNafSL9Ww/JgeV4oCw5cS3AwTN5jm65TOQS8nGUINBAtyeoKUS3spDJp/JI8in MNlwtV2jAzONTlbtTvMKC6pNeZ9zHTN2EyCTBcDuBvraxvq4uSq12Ebqb2b78a9R tkWv+RAGEOjvYG8HH46EUlD/u32OsCxfOa3uG4b2GRQ2RcOM5Au+1W0Zukd3F+ew FF2cCWmo80RSD9IBCd30mz72/yU/VXbF4OTpNX0Lm+5ySMXs0ZFWJrR/xVGdWOtX Ppcx5tLEsTuEsBkqMNzH9KebzgOZ9xA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:09 2025 by rpki-client