$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df17c849-a62a-3e54-ad20-6ffd9ed49d01.roa File: df17c849-a62a-3e54-ad20-6ffd9ed49d01.roa (raw, json) Hash identifier: va2jLxX8dNpi2cl6RV/jQn/WOK65NDboEf8sOS5SnyA= Subject key identifier: 8D:15:15:60:1C:6F:16:22:08:DF:EE:1C:3E:2C:C3:75:61:13:DE:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366772D449454E29D4CAC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df17c849-a62a-3e54-ad20-6ffd9ed49d01.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.181.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:67:72:d4:49:45:4e:29:d4:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d4ac17d3-14ee-459c-85cd-b9935488b956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:73:3f:d8:78:47:cb:fc:4a:29:b3:39:ed: 53:55:69:96:89:5e:22:b0:7a:e1:49:cc:ae:ee:b3: 89:1c:14:e7:61:06:1d:a4:32:bd:23:3a:f3:56:cd: a4:42:4b:4c:74:17:d5:13:35:7d:74:af:1e:af:e7: 89:bc:51:ea:7e:98:59:ce:f9:71:a5:96:be:9e:a0: 8d:2a:a3:c8:7f:ab:ba:93:e0:48:5d:ab:85:9a:09: 88:83:a5:24:6e:04:bc:77:52:31:6d:c6:fa:74:83: 07:ef:77:54:36:d2:87:97:d4:b6:b7:a4:b2:66:9e: cb:8b:ce:1e:ba:9b:dd:2a:ea:49:fe:a2:38:21:09: 78:6c:bf:30:cd:c9:c4:0d:96:a7:88:5d:56:6b:a3: d7:0d:df:35:31:e4:aa:3b:eb:6b:fd:93:32:47:3b: 51:2d:cd:ae:19:9b:29:32:0c:81:cf:f2:d0:fe:fd: a0:04:be:b4:18:f8:f4:9d:d5:06:4d:37:ea:3b:52: 67:a6:ea:1a:a4:53:ac:76:68:d7:d8:36:91:3e:13: 9b:c8:78:49:1c:69:ad:da:1a:7a:87:ae:6b:1f:82: 93:a4:34:bc:ac:53:d3:01:16:90:d4:a3:f4:a5:b0: 59:04:84:e9:f3:83:2d:c5:55:da:f4:8e:ab:d4:5d: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:15:15:60:1C:6F:16:22:08:DF:EE:1C:3E:2C:C3:75:61:13:DE:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df17c849-a62a-3e54-ad20-6ffd9ed49d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:73:ae:7f:d7:22:31:0a:f5:3e:39:8a:07:44:6c:cd:fd:67: 00:54:cf:a2:15:68:59:55:9c:d3:95:47:36:f8:e7:b6:fe:35: 24:2e:45:e0:98:7b:f5:07:2a:0a:d6:82:8f:af:f9:97:91:70: 47:f0:4c:30:12:4e:9b:09:25:bf:8b:22:90:f7:5a:7a:2f:75: 7e:6d:f8:2e:68:08:68:c7:9b:4a:4a:26:25:41:db:1a:b7:0e: fc:24:cd:f4:f1:b0:e9:e1:b6:a3:42:00:fc:05:ba:62:32:2b: 4e:9d:53:cb:0d:de:78:35:9e:46:a4:2a:2d:14:11:52:cb:51: ce:13:5c:4b:6a:4c:0f:00:61:44:55:97:2f:ef:5f:2e:b5:67: 1e:51:c4:40:a0:3f:1d:21:d9:7f:4c:31:76:82:49:f3:30:d9: db:4b:af:05:28:db:0e:4f:03:34:77:88:72:76:9f:93:ed:7a: 3a:14:75:19:5d:48:bb:f1:05:e2:8f:0f:d8:8c:ab:9f:00:85: 4e:40:d0:58:b1:ec:77:17:50:7d:39:3d:cc:05:b7:78:77:cb: 6b:43:21:78:14:9a:dc:85:fb:38:6d:93:b3:53:33:c9:9c:af: ea:7b:bc:81:6a:03:60:aa:29:68:2e:61:66:ec:26:a6:2f:09: 63:ec:a8:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmdy1ElFTinUysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDRhYzE3ZDMtMTRlZS00NTljLTg1Y2QtYjk5MzU0ODhiOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9pzP9h4R8v8SimzOe1TVWmWiV4isHrhScyu 7rOJHBTnYQYdpDK9IzrzVs2kQktMdBfVEzV9dK8er+eJvFHqfphZzvlxpZa+nqCN KqPIf6u6k+BIXauFmgmIg6UkbgS8d1Ixbcb6dIMH73dUNtKHl9S2t6SyZp7Li84e upvdKupJ/qI4IQl4bL8wzcnEDZaniF1Wa6PXDd81MeSqO+tr/ZMyRztRLc2uGZsp MgyBz/LQ/v2gBL60GPj0ndUGTTfqO1JnpuoapFOsdmjX2DaRPhObyHhJHGmt2hp6 h65rH4KTpDS8rFPTARaQ1KP0pbBZBITp84MtxVXa9I6r1F3ZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0VFWAcbxYiCN/uHD4sw3VhE96MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGYxN2M4NDktYTYyYS0z ZTU0LWFkMjAtNmZmZDllZDQ5ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxzrn/XIjEK9T45igdEbM39ZwBUz6IVaFlVnNOVRzb457b+NSQuReCY e/UHKgrWgo+v+ZeRcEfwTDASTpsJJb+LIpD3WnovdX5t+C5oCGjHm0pKJiVB2xq3 DvwkzfTxsOnhtqNCAPwFumIyK06dU8sN3ng1nkakKi0UEVLLUc4TXEtqTA8AYURV ly/vXy61Zx5RxECgPx0h2X9MMXaCSfMw2dtLrwUo2w5PAzR3iHJ2n5PtejoUdRld SLvxBeKPD9iMq58AhU5A0Fix7HcXUH05PcwFt3h3y2tDIXgUmtyF+zhtk7NTM8mc r+p7vIFqA2CqKWguYWbsJqYvCWPsqGA= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:41 2025 by rpki-client