$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07168bf3-d166-351b-a2ff-d6c276160275.roa File: 07168bf3-d166-351b-a2ff-d6c276160275.roa (raw, json) Hash identifier: exGLy3H9rPRfohwFpbVoUPp0a+Ge3il6ATKwRhMr2I0= Subject key identifier: 29:51:F3:C2:73:DB:67:19:F2:7F:D3:D9:B5:76:4A:8C:D2:85:E0:72 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ADB0536A56A7426B17B4E58D0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07168bf3-d166-351b-a2ff-d6c276160275.roa Signing time: Thu 14 Aug 2025 16:33:18 +0000 ROA not before: Thu 14 Aug 2025 16:33:18 +0000 ROA not after: Wed 12 Nov 2025 17:33:18 +0000 asID: 22773 IP address blocks: 70.172.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:05:36:a5:6a:74:26:b1:7b:4e:58:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 14 16:33:18 2025 GMT Not After : Nov 12 17:33:18 2025 GMT Subject: CN=94c1d07c-309c-468d-9b33-caf32136a905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:72:5f:d2:6e:fc:9b:1e:f8:5b:49:8c:c0: 78:17:e9:73:bb:cf:df:ba:f1:7f:69:67:a2:47:2e: ec:9a:31:cd:b2:bb:ee:11:cc:f5:78:a5:6b:3a:b9: b9:6c:cf:8b:cf:af:15:e3:a3:61:f3:4e:40:f6:7e: d4:89:cd:46:37:77:a9:8d:53:b9:4c:e6:23:47:c1: 6c:7a:17:96:1e:d6:2d:66:e9:bb:a6:f7:c4:db:82: bf:94:1f:ae:33:26:53:c9:91:ce:6c:ea:7d:a3:0a: a3:12:30:f3:ab:cd:4b:ae:76:39:a1:48:91:50:41: bc:cd:1e:f1:8f:73:63:ae:9b:37:35:27:fc:1a:9a: 27:a8:f4:f1:4a:37:f4:db:04:02:42:21:35:8c:3e: cd:f5:30:2e:e5:b6:e0:2c:27:4d:fb:b0:c4:d5:f0: 42:7b:72:c4:84:ec:66:16:b8:37:54:5d:bb:17:f6: 75:bc:a2:52:0d:54:76:b8:d9:bf:76:83:65:e6:5a: bf:13:0b:4d:51:01:07:a6:17:64:f2:e9:7f:7a:7a: 81:98:20:5b:c2:f2:4a:e2:05:99:ab:e1:c5:e5:e5: 3c:e2:0e:4f:e8:b7:12:65:22:40:3e:74:58:db:4f: 1b:e3:99:7f:7f:b5:78:ad:45:7a:66:fe:5c:ce:26: 1f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:51:F3:C2:73:DB:67:19:F2:7F:D3:D9:B5:76:4A:8C:D2:85:E0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07168bf3-d166-351b-a2ff-d6c276160275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:3f:1f:10:8a:fc:42:3e:60:74:c9:0d:bd:49:b5:27:2f:b9: 8f:2f:0e:56:82:8f:33:dc:00:0f:23:0f:ea:e4:48:08:bd:5c: 88:c5:5c:64:ec:f7:65:86:49:2f:17:a1:30:d0:dc:cd:e3:6e: 1d:70:9c:df:46:de:6c:a8:c2:9e:12:bb:51:06:fb:00:88:53: 7c:4c:a1:b2:0f:ba:19:38:c1:c8:42:1c:16:28:92:8c:0f:39: d2:8c:5a:10:f2:66:a5:66:55:e3:2a:9e:59:49:45:7d:6d:59: 9d:02:94:a2:b9:e1:db:46:cc:cf:92:43:32:ba:c3:ad:83:9e: d4:79:87:11:5a:44:36:65:5c:43:96:9a:5c:06:c0:b2:be:dd: 93:c7:2a:6b:b2:78:61:89:04:5b:88:af:82:16:a1:aa:17:9e: 1d:f4:ec:6d:98:9d:1c:eb:d8:80:9f:1f:ed:7c:39:f2:fa:22: b4:be:d8:f1:32:4b:1c:0f:76:62:aa:5e:29:fc:5e:52:b8:1c: 70:44:1d:4a:51:4a:08:6d:30:9a:64:b5:ff:43:2e:c9:19:27: 5e:15:a7:45:56:73:c7:96:f2:cf:be:c0:c1:75:e4:27:c8:9e: 2c:2d:45:e9:07:bd:dd:34:b4:af:d2:39:f4:32:2a:59:61:5b: 79:23:7d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErbBTalanQmsXtOWNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgxNDE2MzMxOFoXDTI1MTExMjE3MzMxOFowLzEtMCsGA1UEAxMk OTRjMWQwN2MtMzA5Yy00NjhkLTliMzMtY2FmMzIxMzZhOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq5yX9Ju/Jse+FtJjMB4F+lzu8/fuvF/aWei Ry7smjHNsrvuEcz1eKVrOrm5bM+Lz68V46Nh805A9n7Uic1GN3epjVO5TOYjR8Fs eheWHtYtZum7pvfE24K/lB+uMyZTyZHObOp9owqjEjDzq81LrnY5oUiRUEG8zR7x j3Njrps3NSf8GponqPTxSjf02wQCQiE1jD7N9TAu5bbgLCdN+7DE1fBCe3LEhOxm Frg3VF27F/Z1vKJSDVR2uNm/doNl5lq/EwtNUQEHphdk8ul/enqBmCBbwvJK4gWZ q+HF5eU84g5P6LcSZSJAPnRY208b45l/f7V4rUV6Zv5cziYfEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClR88Jz22cZ8n/T2bV2SozSheByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDcxNjhiZjMtZDE2Ni0z NTFiLWEyZmYtZDZjMjc2MTYwMjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4/HxCK/EI+YHTJDb1JtScvuY8vDlaCjzPcAA8jD+rkSAi9XIjFXGTs 92WGSS8XoTDQ3M3jbh1wnN9G3myowp4Su1EG+wCIU3xMobIPuhk4wchCHBYokowP OdKMWhDyZqVmVeMqnllJRX1tWZ0ClKK54dtGzM+SQzK6w62DntR5hxFaRDZlXEOW mlwGwLK+3ZPHKmuyeGGJBFuIr4IWoaoXnh307G2YnRzr2ICfH+18OfL6IrS+2PEy SxwPdmKqXin8XlK4HHBEHUpRSghtMJpktf9DLskZJ14Vp0VWc8eW8s++wMF15CfI niwtRekHvd00tK/SOfQyKllhW3kjfVI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:14 2025 by rpki-client