$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15360b46-2fed-37ea-af18-a7f856781e0d.roa File: 15360b46-2fed-37ea-af18-a7f856781e0d.roa (raw, json) Hash identifier: +S197hvSs1h5PrFoPs1BII9hyf0Em4Rh4KpyJ4jpQkw= Subject key identifier: B2:36:2E:E8:26:22:14:E2:B4:9C:3D:12:A5:87:A7:D5:DC:98:75:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636685A4A619BF90ECABA20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15360b46-2fed-37ea-af18-a7f856781e0d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.181.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:68:5a:4a:61:9b:f9:0e:ca:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ce4cf949-67c0-4d08-9c10-f633600a2e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:75:90:3d:51:4f:3e:e4:79:19:e3:61:db: cc:92:0f:6a:8a:5c:79:1e:76:3b:23:eb:e7:5e:93: 09:ad:a1:65:94:41:06:05:45:16:c2:30:b1:6c:a3: 3c:d7:4c:f5:cb:ec:5b:af:29:c6:0c:0c:81:c5:c9: 82:c0:7e:ca:b2:9e:9a:9c:27:9d:22:6b:11:04:61: ca:01:da:35:bd:46:68:f4:98:84:6b:1c:c4:79:bf: 7c:9b:66:32:19:76:cc:38:d0:c2:40:3b:d2:f8:00: 60:8a:d9:ad:20:f1:e4:60:af:33:5b:55:81:2a:20: ef:0d:b9:0d:f4:ba:2a:7a:b2:49:3f:72:ca:aa:a1: 5d:9d:d6:44:01:f2:9c:2c:e4:04:cd:a6:0b:90:ba: f4:a0:d9:10:2a:b7:3a:25:aa:69:28:51:af:8d:8a: e9:45:d0:bf:d9:c9:50:7e:69:15:c1:17:31:c2:95: 33:51:3d:08:d2:4d:ee:d1:8b:f1:b4:1e:ff:e5:27: a1:6b:60:22:63:a6:01:8d:66:98:39:ef:20:51:7b: 69:41:e7:e6:b5:66:bf:a3:e3:70:b7:f0:e4:a7:4a: 6a:8f:56:ee:d9:f7:2c:15:5f:fe:b1:44:27:55:ff: 81:87:27:93:94:42:71:2b:6e:f8:cc:6e:1f:e0:c5: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:2E:E8:26:22:14:E2:B4:9C:3D:12:A5:87:A7:D5:DC:98:75:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15360b46-2fed-37ea-af18-a7f856781e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c0:54:5a:46:fc:c7:33:7c:aa:2f:75:42:47:06:c5:98:83: 9e:b6:8d:6e:98:5c:c4:40:90:3a:6c:5e:be:32:26:c7:81:a1: 5d:23:58:db:b3:30:94:06:25:d0:0f:37:b4:41:9c:c1:f2:ca: 68:cf:c3:0f:f9:15:fa:94:3b:90:ca:a1:fe:ee:9f:4d:45:4c: 58:44:9a:3b:b2:b3:0e:b7:c4:38:a6:35:b3:e3:aa:26:ef:e1: 71:99:35:8b:03:90:2e:ca:77:bc:0f:93:01:03:98:d9:82:0a: b7:fa:91:ed:c0:0e:5e:4c:cd:83:2f:c9:54:ef:f6:d0:3b:e7: 3f:bb:e5:6a:93:f8:72:b5:f7:f4:02:9b:a6:ee:91:17:3f:ae: c1:55:13:a7:ea:35:80:65:57:a8:af:c4:70:5c:2c:84:6e:6e: f5:a3:a6:e9:37:62:83:e2:3b:7a:76:d8:ab:0a:65:23:f1:74: 59:62:2c:b7:59:a3:53:59:d9:95:2c:e4:16:c5:04:a7:07:ab: 39:46:17:09:05:da:77:1f:11:89:0d:d4:d9:9f:a3:19:f8:db: 61:b7:19:b1:18:3e:8c:32:43:e6:7a:11:61:1e:03:0f:4e:cd: 9f:02:fa:4b:c3:a4:90:dc:6a:72:9b:71:ed:08:bd:3f:11:aa: 0a:85:d6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmhaSmGb+Q7KuiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Y2U0Y2Y5NDktNjdjMC00ZDA4LTljMTAtZjYzMzYwMGEyZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwR1kD1RTz7keRnjYdvMkg9qilx5HnY7I+vn XpMJraFllEEGBUUWwjCxbKM810z1y+xbrynGDAyBxcmCwH7Ksp6anCedImsRBGHK Ado1vUZo9JiEaxzEeb98m2YyGXbMONDCQDvS+ABgitmtIPHkYK8zW1WBKiDvDbkN 9LoqerJJP3LKqqFdndZEAfKcLOQEzaYLkLr0oNkQKrc6JappKFGvjYrpRdC/2clQ fmkVwRcxwpUzUT0I0k3u0YvxtB7/5Seha2AiY6YBjWaYOe8gUXtpQefmtWa/o+Nw t/Dkp0pqj1bu2fcsFV/+sUQnVf+BhyeTlEJxK274zG4f4MVSkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI2LugmIhTitJw9EqWHp9XcmHWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTUzNjBiNDYtMmZlZC0z N2VhLWFmMTgtYTdmODU2NzgxZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDAVFpG/MczfKovdUJHBsWYg562jW6YXMRAkDpsXr4yJseBoV0jWNuz MJQGJdAPN7RBnMHyymjPww/5FfqUO5DKof7un01FTFhEmjuysw63xDimNbPjqibv 4XGZNYsDkC7Kd7wPkwEDmNmCCrf6ke3ADl5MzYMvyVTv9tA75z+75WqT+HK19/QC m6bukRc/rsFVE6fqNYBlV6ivxHBcLIRubvWjpuk3YoPiO3p22KsKZSPxdFliLLdZ o1NZ2ZUs5BbFBKcHqzlGFwkF2ncfEYkN1Nmfoxn422G3GbEYPowyQ+Z6EWEeAw9O zZ8C+kvDpJDcanKbce0IvT8RqgqF1ss= -----END CERTIFICATE-----Generated at Sat Aug 23 14:29:02 2025 by rpki-client