$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efc9a4c4-ba71-3de6-a7e4-474c2c7fc35d.roa File: efc9a4c4-ba71-3de6-a7e4-474c2c7fc35d.roa (raw, json) Hash identifier: IbjprnvP2rQRIQAxOpAyeAOzFV0YglZ2YfNRcJbSmbI= Subject key identifier: 5D:50:7A:31:25:FC:91:A4:FD:F7:CE:2C:E3:ED:40:0C:65:39:FC:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963646309EEF625CDF076700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efc9a4c4-ba71-3de6-a7e4-474c2c7fc35d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.161.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:46:30:9e:ef:62:5c:df:07:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=336145e9-e361-4fff-9d34-7492ec2709c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:28:c3:fd:bb:b4:82:fc:b3:7f:1a:17:07: c9:21:5c:50:9f:ba:c2:50:94:e8:6b:7a:38:24:b3: 35:b6:96:b1:d5:8b:5e:e4:d6:67:54:c2:54:3a:60: d8:c7:9e:8b:14:23:6d:7e:a7:23:7d:a6:22:d8:9e: 59:9e:05:fc:77:e6:31:0c:c4:a7:bb:83:7d:ce:a0: 09:c6:06:ed:09:30:15:14:35:1b:19:05:61:fc:02: ac:57:1b:84:33:e0:a4:5d:3a:92:54:a7:da:fe:01: 78:6b:a8:fb:c6:55:eb:d1:f1:b1:d9:3f:45:76:20: 30:e4:c9:45:60:8c:41:27:06:be:f6:1b:61:0d:2c: 8a:72:ff:69:78:2e:1d:1e:bd:46:94:14:35:53:4a: 1c:c8:0c:65:91:04:22:19:39:94:d6:b2:73:a9:40: ae:83:62:b8:e9:b6:39:a7:55:b3:16:0c:a1:94:92: ea:8d:ec:54:92:7a:9e:b6:e0:e8:a7:80:7d:7b:1b: 10:0b:46:76:5a:dd:13:fa:10:d4:c7:3e:5a:89:25: 10:d0:be:4b:65:94:bf:e8:40:a8:84:93:e4:67:d2: f8:53:2d:6b:98:24:39:6e:64:81:07:48:ee:5f:33: 14:62:49:e2:63:bc:dc:d8:30:f1:3d:e8:4d:ea:ee: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:50:7A:31:25:FC:91:A4:FD:F7:CE:2C:E3:ED:40:0C:65:39:FC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efc9a4c4-ba71-3de6-a7e4-474c2c7fc35d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e3:0d:97:c2:0c:bc:06:71:25:98:bb:1b:46:ed:80:f9:89: 3c:64:f3:0c:67:33:d3:02:37:1f:74:f1:a8:1d:70:45:34:74: b3:87:e1:fd:ee:b1:72:f0:14:83:79:01:c0:18:fd:b1:c7:fa: eb:20:26:f6:4d:09:85:b4:a8:c8:ce:af:67:fb:29:39:40:69: 42:ec:51:48:3a:46:f6:8d:cd:dc:5e:4f:f5:c6:71:9e:d5:be: 31:45:84:e3:5b:00:54:52:69:d4:54:53:04:1a:38:e8:d6:80: a7:14:3f:d7:c1:6f:16:e9:04:8c:26:65:ce:72:5f:f6:aa:3b: 69:be:4e:72:71:02:b9:39:32:1a:56:6a:e7:7b:6b:ae:bb:66: 57:18:eb:d8:c4:9f:c7:bc:be:5e:a4:d2:97:4f:57:25:5e:d7: 6d:f4:6c:f4:28:3e:f4:5d:05:d7:98:4e:7e:1e:da:17:17:60: 31:9a:c2:bb:28:00:94:c0:09:d8:0a:d3:a9:eb:12:47:12:9b: cc:64:ad:eb:2e:50:55:50:a0:b5:3b:ef:8c:fa:f1:f1:70:01: 49:54:5f:72:7e:3b:6d:7c:b0:f7:35:7e:a0:1e:db:78:75:e9: 27:1b:ba:52:45:a8:87:90:4f:ea:f3:e7:47:c2:73:ea:95:6a: e8:ee:7e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkYwnu9iXN8HZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzM2MTQ1ZTktZTM2MS00ZmZmLTlkMzQtNzQ5MmVjMjcwOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN8ow/27tIL8s38aFwfJIVxQn7rCUJToa3o4 JLM1tpax1Yte5NZnVMJUOmDYx56LFCNtfqcjfaYi2J5ZngX8d+YxDMSnu4N9zqAJ xgbtCTAVFDUbGQVh/AKsVxuEM+CkXTqSVKfa/gF4a6j7xlXr0fGx2T9FdiAw5MlF YIxBJwa+9hthDSyKcv9peC4dHr1GlBQ1U0ocyAxlkQQiGTmU1rJzqUCug2K46bY5 p1WzFgyhlJLqjexUknqetuDop4B9exsQC0Z2Wt0T+hDUxz5aiSUQ0L5LZZS/6ECo hJPkZ9L4Uy1rmCQ5bmSBB0juXzMUYkniY7zc2DDxPehN6u4rAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1QejEl/JGk/ffOLOPtQAxlOfxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWZjOWE0YzQtYmE3MS0z ZGU2LWE3ZTQtNDc0YzJjN2ZjMzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnjDZfCDLwGcSWYuxtG7YD5iTxk8wxnM9MCNx908agdcEU0dLOH4f3u sXLwFIN5AcAY/bHH+usgJvZNCYW0qMjOr2f7KTlAaULsUUg6RvaNzdxeT/XGcZ7V vjFFhONbAFRSadRUUwQaOOjWgKcUP9fBbxbpBIwmZc5yX/aqO2m+TnJxArk5MhpW aud7a667ZlcY69jEn8e8vl6k0pdPVyVe1230bPQoPvRdBdeYTn4e2hcXYDGawrso AJTACdgK06nrEkcSm8xkresuUFVQoLU774z68fFwAUlUX3J+O218sPc1fqAe23h1 6ScbulJFqIeQT+rz50fCc+qVaujufrM= -----END CERTIFICATE-----Generated at Wed Aug 6 07:56:18 2025 by rpki-client