$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dee331ab-ecd5-3c45-8cc9-567c9570f119.roa File: dee331ab-ecd5-3c45-8cc9-567c9570f119.roa (raw, json) Hash identifier: x5cszJZyA0AI2j5kn3X4iVZ5Cfx+N9TCU3uh0bZR5k8= Subject key identifier: 85:98:0C:47:06:9D:CC:32:2C:29:21:4A:ED:98:D2:74:66:C5:1D:9F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636463C824126BF3A9F7980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dee331ab-ecd5-3c45-8cc9-567c9570f119.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.161.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:46:3c:82:41:26:bf:3a:9f:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ba54ef99-c839-4716-96a8-9da68d8743fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:63:af:3d:0a:fc:e4:92:5b:c6:06:27:34: 13:0f:24:f7:8e:ad:9c:03:3b:98:2b:d4:5d:e7:44: 03:77:db:ca:fe:a1:6b:04:b1:2d:d3:da:74:e3:b3: 99:71:b5:1d:7f:4a:9e:70:4b:f1:e7:bf:aa:0b:8d: 94:8c:e2:29:af:23:4a:84:0d:58:25:04:ff:33:74: 27:28:2d:28:b7:7b:55:26:86:b8:20:ff:79:12:77: d4:70:a5:85:45:e8:da:39:c9:d6:24:1c:41:de:f5: 90:81:26:41:ab:ee:fe:6b:45:0b:ad:3e:df:91:24: cc:8f:05:92:39:83:a8:ef:6d:ea:1c:e2:12:dd:5c: 42:f3:51:10:68:10:5c:54:c7:f4:7d:10:e3:18:3a: ec:4f:8b:da:6b:fd:56:4a:6b:b9:ab:92:09:54:56: 43:85:69:bf:6f:7d:fe:50:29:1d:bc:0b:b1:6a:2e: 54:54:86:0e:f9:f9:d1:e3:54:29:f8:3c:ee:85:ab: 81:83:35:fa:b2:c2:7b:eb:b7:2a:8b:77:2a:ef:75: 37:69:4f:79:9c:a8:de:40:75:de:7e:6a:11:20:c2: 57:d3:9f:81:c6:1c:16:58:fd:0d:b7:df:cc:39:44: 8b:41:b6:1a:0f:ee:4b:e2:78:dd:fe:d8:c2:b9:e7: bc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:98:0C:47:06:9D:CC:32:2C:29:21:4A:ED:98:D2:74:66:C5:1D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dee331ab-ecd5-3c45-8cc9-567c9570f119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ec:db:95:75:a5:70:30:9d:19:b2:7d:de:20:67:be:a3:3b: ad:f5:e6:e4:98:8b:6d:9a:55:c5:35:26:3f:fb:a7:a8:14:34: 57:36:ed:d9:9d:c0:2f:40:d4:64:0c:8a:9a:cd:4b:4c:0f:bb: d0:15:b2:c1:aa:79:7d:3a:44:8b:11:2f:e4:8d:c5:95:7d:22: 05:96:8f:81:34:ad:5b:2a:f1:76:c9:b2:a3:4f:73:97:1a:0f: 14:f3:34:95:02:db:e3:67:92:61:f6:66:5b:50:6e:2f:8a:36: 9e:ae:2d:27:e4:f1:f5:cd:df:33:3a:2a:50:9e:2b:58:cd:44: d0:c1:72:4d:dc:b8:1b:0b:9f:60:d4:f6:10:e8:ac:31:64:c0: eb:59:d4:9a:03:dc:f6:03:1c:0f:07:2e:ed:1f:f9:e0:74:86: f7:f1:31:38:ef:77:c8:b0:01:65:dc:78:48:a9:28:00:32:e5: 2b:30:f0:7e:0c:8a:c0:40:8b:23:2c:03:6b:e8:9f:68:e2:41: 39:d2:4d:19:69:21:00:37:dc:c5:ec:2a:1f:ce:0f:1b:40:55: 12:ac:62:76:2a:33:6f:65:68:55:b2:db:7c:e2:d7:bd:6b:78: b3:12:f2:cc:da:df:5b:61:a2:8e:ef:ac:1f:20:4f:19:19:41: cc:68:e8:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkY8gkEmvzqfeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmE1NGVmOTktYzgzOS00NzE2LTk2YTgtOWRhNjhkODc0M2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3djrz0K/OSSW8YGJzQTDyT3jq2cAzuYK9Rd 50QDd9vK/qFrBLEt09p047OZcbUdf0qecEvx57+qC42UjOIpryNKhA1YJQT/M3Qn KC0ot3tVJoa4IP95EnfUcKWFRejaOcnWJBxB3vWQgSZBq+7+a0ULrT7fkSTMjwWS OYOo723qHOIS3VxC81EQaBBcVMf0fRDjGDrsT4vaa/1WSmu5q5IJVFZDhWm/b33+ UCkdvAuxai5UVIYO+fnR41Qp+DzuhauBgzX6ssJ767cqi3cq73U3aU95nKjeQHXe fmoRIMJX05+BxhwWWP0Nt9/MOUSLQbYaD+5L4njd/tjCuee8IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWYDEcGncwyLCkhSu2Y0nRmxR2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGVlMzMxYWItZWNkNS0z YzQ1LThjYzktNTY3Yzk1NzBmMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjs25V1pXAwnRmyfd4gZ76jO6315uSYi22aVcU1Jj/7p6gUNFc27dmd wC9A1GQMiprNS0wPu9AVssGqeX06RIsRL+SNxZV9IgWWj4E0rVsq8XbJsqNPc5ca DxTzNJUC2+NnkmH2ZltQbi+KNp6uLSfk8fXN3zM6KlCeK1jNRNDBck3cuBsLn2DU 9hDorDFkwOtZ1JoD3PYDHA8HLu0f+eB0hvfxMTjvd8iwAWXceEipKAAy5Ssw8H4M isBAiyMsA2von2jiQTnSTRlpIQA33MXsKh/ODxtAVRKsYnYqM29laFWy23zi171r eLMS8sza31thoo7vrB8gTxkZQcxo6Ew= -----END CERTIFICATE-----Generated at Wed Aug 6 11:08:19 2025 by rpki-client