$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed923d34-4e62-3764-a90a-ebcc76aa2d13.roa File: ed923d34-4e62-3764-a90a-ebcc76aa2d13.roa (raw, json) Hash identifier: R9PLr3jkNDIR2W1XWvvFy6KMTZ0fJJLRmfOUwa/oElk= Subject key identifier: E1:F7:4B:36:88:87:2E:05:B8:A0:8E:56:69:E3:73:2E:A5:9C:2F:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963647FEFBFE42FFE781B260 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed923d34-4e62-3764-a90a-ebcc76aa2d13.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.174.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:47:fe:fb:fe:42:ff:e7:81:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=bdae4d66-b78f-40b3-8326-29fa64ef95c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:98:af:ed:12:7c:5e:93:d3:32:23:d7:be: 0a:b5:a3:66:86:1c:bb:8b:b6:fc:b7:06:44:66:68: 2a:48:0d:8b:33:82:b7:02:9a:0e:89:8b:ee:23:35: 60:df:44:ba:e3:5f:a6:75:d9:ab:7a:e3:52:ca:12: 3c:6b:66:0f:30:89:21:8d:1c:74:dd:b1:84:7e:c1: 7b:d6:45:47:da:b5:24:87:ad:e6:6d:00:e6:b8:0d: 59:0e:ee:53:f6:55:4d:f6:c9:17:8f:3f:4d:c7:8c: b3:bb:02:52:f2:79:30:9c:1a:f5:d8:ce:ad:dc:ed: 45:85:88:9f:a3:e7:15:64:64:d4:fe:57:50:36:6d: ed:61:76:0c:84:7d:86:d5:f1:c5:c3:65:36:51:a4: e1:aa:2e:5c:b7:b8:3b:33:67:94:fa:95:5b:21:7c: 71:44:21:4c:39:fd:5c:99:e9:b3:c7:fc:10:c0:4a: 14:b8:9c:68:e7:d6:93:1f:c5:a6:d3:c2:1f:05:1e: e7:ca:0f:9d:2f:ed:dd:a3:b9:ce:61:70:3a:60:16: b5:44:12:11:ad:39:d1:ae:8c:bd:e7:35:17:51:1c: e8:53:07:71:b0:9e:43:3c:76:4a:f8:a4:0e:9f:94: d3:f9:b4:61:40:f4:b7:7f:dc:a8:1b:aa:e4:71:80: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F7:4B:36:88:87:2E:05:B8:A0:8E:56:69:E3:73:2E:A5:9C:2F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed923d34-4e62-3764-a90a-ebcc76aa2d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:23:6e:28:85:81:b7:a4:52:d5:be:20:59:78:66:35:5e:8b: 4b:49:33:a4:1f:ec:2c:cc:86:aa:45:97:e5:36:38:84:d7:47: bb:80:9d:0c:6a:d4:c2:af:ed:49:03:31:3f:8b:44:82:e3:e3: a6:67:29:d4:76:97:89:19:e0:f9:8f:eb:d6:1d:a5:31:c1:f9: 74:f8:cd:aa:93:1b:c9:15:c1:9a:3a:ed:f3:99:b5:7c:bb:14: 26:d7:c9:ee:c7:10:cb:a1:70:74:a9:b4:f9:64:2c:ae:bb:5d: d7:58:ef:ce:c5:f3:3e:fb:de:33:df:10:88:f8:ec:4e:62:0e: 6d:03:8e:e9:8d:35:13:de:db:9f:57:e6:44:7e:21:1c:02:71: 91:39:9e:75:99:3e:58:5e:d3:c6:20:1b:72:66:ce:ee:c3:65: 7e:f4:cd:b1:1b:8a:69:68:30:8e:75:a0:92:fc:07:a8:5b:09: ed:7f:52:30:a5:55:bc:c9:39:00:b9:5a:48:7b:97:0a:c1:3c: bd:95:fd:af:85:26:00:c1:dc:ad:52:2e:b1:7c:4b:57:d1:d9: 1c:1a:a0:d6:98:97:1b:cf:12:cc:42:cf:79:5e:48:52:51:0c: 87:6f:04:35:43:a0:74:3f:72:1f:20:45:50:56:6c:f7:da:3a: f3:f9:60:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkf++/5C/+eBsmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmRhZTRkNjYtYjc4Zi00MGIzLTgzMjYtMjlmYTY0ZWY5NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA126Yr+0SfF6T0zIj174KtaNmhhy7i7b8twZE ZmgqSA2LM4K3ApoOiYvuIzVg30S641+mddmreuNSyhI8a2YPMIkhjRx03bGEfsF7 1kVH2rUkh63mbQDmuA1ZDu5T9lVN9skXjz9Nx4yzuwJS8nkwnBr12M6t3O1FhYif o+cVZGTU/ldQNm3tYXYMhH2G1fHFw2U2UaThqi5ct7g7M2eU+pVbIXxxRCFMOf1c memzx/wQwEoUuJxo59aTH8Wm08IfBR7nyg+dL+3do7nOYXA6YBa1RBIRrTnRroy9 5zUXURzoUwdxsJ5DPHZK+KQOn5TT+bRhQPS3f9yoG6rkcYDn1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOH3SzaIhy4FuKCOVmnjcy6lnC/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWQ5MjNkMzQtNGU2Mi0z NzY0LWE5MGEtZWJjYzc2YWEyZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcjbiiFgbekUtW+IFl4ZjVei0tJM6Qf7CzMhqpFl+U2OITXR7uAnQxq 1MKv7UkDMT+LRILj46ZnKdR2l4kZ4PmP69YdpTHB+XT4zaqTG8kVwZo67fOZtXy7 FCbXye7HEMuhcHSptPlkLK67XddY787F8z773jPfEIj47E5iDm0DjumNNRPe259X 5kR+IRwCcZE5nnWZPlhe08YgG3Jmzu7DZX70zbEbimloMI51oJL8B6hbCe1/UjCl VbzJOQC5Wkh7lwrBPL2V/a+FJgDB3K1SLrF8S1fR2RwaoNaYlxvPEsxCz3leSFJR DIdvBDVDoHQ/ch8gRVBWbPfaOvP5YCw= -----END CERTIFICATE-----Generated at Wed Aug 6 14:18:29 2025 by rpki-client