$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef914a77-74b6-38e7-8651-88cfbcfe396e.roa File: ef914a77-74b6-38e7-8651-88cfbcfe396e.roa (raw, json) Hash identifier: fRJEwcwozP7esW9lC6FA0Ny+pvvkP87/NRJBAifMeiE= Subject key identifier: 94:5A:AC:2F:64:5C:BC:47:4C:69:62:9D:AF:EA:C0:A3:11:0E:17:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364213470839C7BD117960 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef914a77-74b6-38e7-8651-88cfbcfe396e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.160.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:42:13:47:08:39:c7:bd:11:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=387447d8-a56d-4de4-b77b-d3e53e5b3436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:6a:39:e9:74:97:ab:08:91:44:16:c9:4a: 73:3f:6b:e2:03:81:7c:36:8d:2b:bb:17:31:b6:35: 23:33:90:f8:1c:27:6b:37:d7:4b:d1:dc:92:2b:c5: 66:69:2b:bc:1b:ef:a9:ca:f5:29:ef:62:3c:c1:8d: 5f:70:77:8b:8c:02:e9:1d:de:76:35:d9:ce:f6:fa: 6e:a6:84:ce:28:34:b6:3f:4b:32:4d:45:29:ff:bb: d7:75:62:2f:ac:ec:32:e2:61:48:dd:d0:aa:0e:e5: 30:d8:a9:22:a1:a2:fa:7e:dc:8f:15:f7:f9:41:b6: 46:94:87:76:97:f9:89:df:96:37:a9:73:2b:95:a5: 09:f2:1c:52:87:d3:66:81:f2:b3:67:5c:d4:13:bf: ef:b2:09:0b:ed:49:fc:a3:ac:6c:4e:49:fc:41:ae: 99:2d:61:e1:99:64:f4:01:21:5b:f5:cd:ee:de:7e: 7b:82:bf:97:6d:cf:91:44:89:c0:e3:73:b8:2c:6f: 21:ba:52:29:71:3e:fb:a7:9b:d8:1e:5f:18:f2:bc: 43:4a:f9:cf:a9:b2:8d:f8:49:84:80:4d:54:24:ba: f9:33:9f:38:2f:93:1c:72:9d:92:a4:86:26:62:8b: a4:ec:96:bf:fb:dd:93:19:36:d7:ae:d4:91:fb:a6: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5A:AC:2F:64:5C:BC:47:4C:69:62:9D:AF:EA:C0:A3:11:0E:17:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef914a77-74b6-38e7-8651-88cfbcfe396e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:a7:9b:a7:65:ba:5a:98:27:a3:e1:62:4f:06:37:42:ef:9c: 39:8b:4f:b3:30:37:ad:50:18:83:e4:b3:8c:8d:da:cb:7a:ab: bd:d9:b6:56:f2:c5:42:a4:b2:07:a7:e0:3c:3a:e9:82:cd:64: d5:cc:2b:9a:30:4a:6b:32:42:10:1d:ea:25:36:2c:0b:14:09: 42:3b:71:0a:4d:0c:7a:21:c5:0e:1d:91:9a:86:54:36:cc:ef: 23:b1:0e:ee:b3:cd:7d:72:68:60:0f:06:ba:6b:ba:5d:3b:9d: 55:df:d9:8c:73:74:62:d6:26:01:4e:b5:11:75:57:c6:43:05: e2:7e:84:06:71:c4:8b:48:91:8f:12:53:48:4e:1a:53:9d:9c: 7a:54:cc:31:c8:29:e6:03:1e:85:d9:2c:11:d8:f8:71:0b:ed: 48:37:bc:5a:fb:c1:c9:e8:5d:a9:d0:70:39:2b:32:7c:36:f1: 4d:6b:72:36:bb:35:40:eb:2a:3b:b7:2e:d9:c5:e9:eb:99:9b: 44:11:88:71:15:cc:29:5f:25:5b:7b:a0:85:f8:ed:03:3e:5c: b5:f1:e7:0b:7d:4b:3e:c4:49:72:5a:50:f2:62:6b:08:4f:c0: 10:26:1d:30:20:ab:eb:09:08:3b:cb:eb:f1:87:d9:b7:f3:5d: fa:7c:d4:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkITRwg5x70ReWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Mzg3NDQ3ZDgtYTU2ZC00ZGU0LWI3N2ItZDNlNTNlNWIzNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj5qOel0l6sIkUQWyUpzP2viA4F8No0ruxcx tjUjM5D4HCdrN9dL0dySK8VmaSu8G++pyvUp72I8wY1fcHeLjALpHd52NdnO9vpu poTOKDS2P0syTUUp/7vXdWIvrOwy4mFI3dCqDuUw2KkioaL6ftyPFff5QbZGlId2 l/mJ35Y3qXMrlaUJ8hxSh9NmgfKzZ1zUE7/vsgkL7Un8o6xsTkn8Qa6ZLWHhmWT0 ASFb9c3u3n57gr+Xbc+RRInA43O4LG8hulIpcT77p5vYHl8Y8rxDSvnPqbKN+EmE gE1UJLr5M584L5Mccp2SpIYmYouk7Ja/+92TGTbXrtSR+6aHwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRarC9kXLxHTGlina/qwKMRDherMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWY5MTRhNzctNzRiNi0z OGU3LTg2NTEtODhjZmJjZmUzOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFynm6dlulqYJ6PhYk8GN0LvnDmLT7MwN61QGIPks4yN2st6q73Ztlby xUKksgen4Dw66YLNZNXMK5owSmsyQhAd6iU2LAsUCUI7cQpNDHohxQ4dkZqGVDbM 7yOxDu6zzX1yaGAPBrprul07nVXf2YxzdGLWJgFOtRF1V8ZDBeJ+hAZxxItIkY8S U0hOGlOdnHpUzDHIKeYDHoXZLBHY+HEL7Ug3vFr7wcnoXanQcDkrMnw28U1rcja7 NUDrKju3LtnF6euZm0QRiHEVzClfJVt7oIX47QM+XLXx5wt9Sz7ESXJaUPJiawhP wBAmHTAgq+sJCDvL6/GH2bfzXfp81G0= -----END CERTIFICATE-----Generated at Fri Aug 8 13:07:28 2025 by rpki-client