$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cdd003-51b6-38f1-ac91-909676b4e835.roa File: 10cdd003-51b6-38f1-ac91-909676b4e835.roa (raw, json) Hash identifier: KPx9AhOLcVYHj5kJlKT+m8TcYzftE7JypM5JLK0ikCg= Subject key identifier: EE:7D:CC:E9:B6:92:88:74:BD:6B:A5:75:30:D2:F7:C1:58:6E:E9:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA66270A82948EB6DBA3F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cdd003-51b6-38f1-ac91-909676b4e835.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 62957 IP address blocks: 70.165.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:62:70:a8:29:48:eb:6d:ba:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=1c1364bc-f671-4d64-9f90-e5dee0a77d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:81:cc:ce:cc:3f:cd:a6:91:a8:8b:29:6e: 7e:0d:69:ec:08:28:84:b2:a5:35:cc:a8:57:16:08: d7:c4:6e:ae:94:1f:41:fc:bd:44:80:5e:bf:52:ae: 0a:f4:d8:8b:3e:d6:7a:5b:11:f2:98:be:e4:38:ce: db:f0:d5:8a:f0:2d:1a:bb:b8:ac:14:30:2b:68:00: 02:83:f8:c8:d0:f7:21:6a:12:77:5d:b3:19:50:dc: 1c:1a:a6:d3:91:2e:eb:e1:f6:9b:65:e8:49:45:de: ce:e5:a1:a3:27:c1:0b:4b:ff:a5:3c:ed:75:80:9e: 8f:49:86:21:0d:b6:cf:95:de:2b:8a:28:71:07:bf: f1:58:32:70:fe:de:72:05:3f:28:96:ea:a2:58:99: b0:f3:3a:4e:9d:7f:e7:28:37:7a:21:3c:59:b8:8a: e8:d7:1d:81:68:28:40:48:bf:c4:ca:7f:e5:93:af: 8b:f9:87:4b:04:1a:d1:7a:77:59:09:de:6a:df:1a: 20:7d:5d:1d:e3:ac:33:e6:62:63:ec:b5:f0:d9:67: 83:9b:e5:30:04:fe:13:68:3f:84:57:a0:f0:85:90: bc:f4:e6:2d:0e:5d:75:8c:44:1f:bc:38:d0:70:d2: 4b:e4:9b:72:95:a2:a0:82:39:a8:f3:2f:df:20:a7: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7D:CC:E9:B6:92:88:74:BD:6B:A5:75:30:D2:F7:C1:58:6E:E9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cdd003-51b6-38f1-ac91-909676b4e835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ed:08:88:d9:6e:bc:19:1a:40:5d:1e:89:5a:10:21:18:ed: b1:fa:37:5a:b7:2e:45:dd:08:6c:de:07:2a:7e:8d:23:9e:b8: d3:cb:4e:3b:41:22:21:6b:dd:03:f6:91:b6:5e:68:70:2f:ee: eb:b5:75:1e:aa:37:30:de:e1:7b:66:0e:fa:d5:7e:fa:69:a3: ec:eb:8d:5e:06:44:25:d1:03:b5:30:6c:4e:1f:d3:b9:0f:f3: b6:6f:88:7f:a9:a1:2f:4a:50:cf:14:af:9c:88:40:99:9b:8f: 2d:b8:fe:93:ea:69:1e:86:49:5f:bb:d5:61:97:d7:b9:03:22: f4:58:52:8e:ee:37:05:c5:16:0d:4b:d9:cf:02:34:97:33:c2: e1:80:56:ea:eb:e1:17:98:db:f5:f5:17:4c:26:89:d0:f2:45: 32:85:47:55:e8:40:7a:3e:d7:90:b1:cd:0c:42:74:a8:a8:68: b5:d8:a6:77:22:ce:ab:ba:1a:61:f3:b1:ac:3c:71:22:00:b6: 6e:98:bd:66:61:32:06:10:67:9a:fd:89:fa:7c:1e:6e:6e:bd: 8d:cf:8a:a0:da:53:02:f5:18:23:b6:9d:74:72:9a:a3:bf:eb: ad:15:44:22:4b:b9:13:c9:aa:4e:0d:20:f3:42:f3:00:f0:b4: 73:bc:2a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmJwqClI6226P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MWMxMzY0YmMtZjY3MS00ZDY0LTlmOTAtZTVkZWUwYTc3ZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJmBzM7MP82mkaiLKW5+DWnsCCiEsqU1zKhX FgjXxG6ulB9B/L1EgF6/Uq4K9NiLPtZ6WxHymL7kOM7b8NWK8C0au7isFDAraAAC g/jI0PchahJ3XbMZUNwcGqbTkS7r4fabZehJRd7O5aGjJ8ELS/+lPO11gJ6PSYYh DbbPld4riihxB7/xWDJw/t5yBT8oluqiWJmw8zpOnX/nKDd6ITxZuIro1x2BaChA SL/Eyn/lk6+L+YdLBBrRendZCd5q3xogfV0d46wz5mJj7LXw2WeDm+UwBP4TaD+E V6DwhZC89OYtDl11jEQfvDjQcNJL5JtylaKggjmo8y/fIKcA0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO59zOm2koh0vWuldTDS98FYbunYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTBjZGQwMDMtNTFiNi0z OGYxLWFjOTEtOTA5Njc2YjRlODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjtCIjZbrwZGkBdHolaECEY7bH6N1q3LkXdCGzeByp+jSOeuNPLTjtB IiFr3QP2kbZeaHAv7uu1dR6qNzDe4XtmDvrVfvppo+zrjV4GRCXRA7UwbE4f07kP 87ZviH+poS9KUM8Ur5yIQJmbjy24/pPqaR6GSV+71WGX17kDIvRYUo7uNwXFFg1L 2c8CNJczwuGAVurr4ReY2/X1F0wmidDyRTKFR1XoQHo+15CxzQxCdKioaLXYpnci zqu6GmHzsaw8cSIAtm6YvWZhMgYQZ5r9ifp8Hm5uvY3PiqDaUwL1GCO2nXRymqO/ 660VRCJLuRPJqk4NIPNC8wDwtHO8KqQ= -----END CERTIFICATE-----Generated at Sun Aug 24 03:06:19 2025 by rpki-client