$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34bf3249-91b3-3b4f-af7d-350e1ad44e35.roa File: 34bf3249-91b3-3b4f-af7d-350e1ad44e35.roa (raw, json) Hash identifier: TmQMrn66AB14SR12k9r/nE9O1Fj9CgOnpXqqkSgAfqA= Subject key identifier: 3B:89:98:DC:22:C3:56:95:B4:88:60:D4:CA:A1:D1:9A:15:0D:58:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963646123F731B6971188400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34bf3249-91b3-3b4f-af7d-350e1ad44e35.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.161.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:46:12:3f:73:1b:69:71:18:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=c9c7fc17-2d4c-4bb5-9261-307c4d98fbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:5c:e3:3d:b4:27:3c:02:7c:70:63:4a:5b: 07:ff:3b:00:35:23:db:20:03:d4:6c:c4:4d:91:5b: 82:90:c2:8e:4e:5f:55:4a:83:68:dd:eb:cb:e8:52: c2:56:66:6c:80:7c:e0:97:aa:c8:8a:5d:1c:cb:73: dd:42:67:e4:6d:d6:90:67:47:2e:a6:17:06:0d:d0: 39:82:04:28:a9:1f:12:5c:08:3c:bc:f2:16:fc:46: 44:14:5b:c6:79:33:09:e7:9a:c1:92:a2:76:ed:95: 7d:40:86:74:81:9d:53:56:cb:03:00:23:d0:f6:ec: 8d:6a:40:56:7c:18:ec:bc:8c:da:3d:87:3e:82:d5: e9:04:12:34:70:0a:aa:21:ad:0b:c8:f0:3f:70:9d: 09:bd:b0:36:3d:9f:bb:9a:0a:9a:f9:d1:1e:4e:75: 47:1a:e6:57:03:d1:02:79:d2:8b:6f:25:aa:d1:12: 78:8b:b2:01:6a:e3:e8:30:cd:26:9c:92:ab:a0:ea: e2:78:77:df:2c:ee:e9:2b:e0:df:7c:16:36:86:9a: 9e:a6:31:90:dd:ec:b0:ed:77:52:47:3c:43:67:93: 80:a9:9f:18:7e:58:3f:86:d2:ed:27:51:4c:70:44: 34:4a:9d:96:58:d6:4a:73:68:af:89:44:a9:7d:2a: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:89:98:DC:22:C3:56:95:B4:88:60:D4:CA:A1:D1:9A:15:0D:58:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34bf3249-91b3-3b4f-af7d-350e1ad44e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:44:ad:3e:64:3d:cc:01:2c:fc:97:49:22:15:f9:03:05:d7: d6:73:67:8a:a7:88:d2:5a:1d:4a:4f:df:9c:48:70:ea:a5:6d: 5b:39:34:d3:35:40:dc:62:04:92:a0:50:23:55:b7:5b:06:e3: c2:1f:31:ec:52:56:be:0d:06:2e:cb:06:71:d5:e4:61:46:84: 73:6b:c3:65:94:79:9a:9e:96:28:04:0f:83:28:76:a3:1a:4a: 63:d6:10:12:07:f0:8f:fd:b5:51:47:41:bf:2c:55:74:70:2f: 44:18:3c:4e:74:b4:39:d3:bd:04:ff:fc:15:19:28:55:84:f6: 75:cd:1c:ea:a4:99:03:ba:90:ef:44:cd:6d:50:6e:63:00:5d: 85:fd:78:28:96:04:4b:6c:56:fd:cc:98:e2:b4:d2:0e:bc:66: 39:ce:17:82:95:c4:e2:59:72:6f:2a:93:c3:1b:a9:ee:80:76: a6:b6:a1:c2:d8:d5:59:b1:ec:3c:fe:ce:00:0e:8d:e8:5f:4d: b2:b7:5f:a2:7a:e9:a7:c7:f0:73:4b:20:8b:c7:3a:60:29:78: 78:e5:20:65:d8:5b:9a:c6:f9:fb:e0:28:f2:31:8c:81:c7:89: be:aa:77:39:ae:74:af:19:6b:4c:bd:c0:bf:69:32:15:8c:71: 23:c3:fd:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkYSP3MbaXEYhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YzljN2ZjMTctMmQ0Yy00YmI1LTkyNjEtMzA3YzRkOThmYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHpc4z20JzwCfHBjSlsH/zsANSPbIAPUbMRN kVuCkMKOTl9VSoNo3evL6FLCVmZsgHzgl6rIil0cy3PdQmfkbdaQZ0cuphcGDdA5 ggQoqR8SXAg8vPIW/EZEFFvGeTMJ55rBkqJ27ZV9QIZ0gZ1TVssDACPQ9uyNakBW fBjsvIzaPYc+gtXpBBI0cAqqIa0LyPA/cJ0JvbA2PZ+7mgqa+dEeTnVHGuZXA9EC edKLbyWq0RJ4i7IBauPoMM0mnJKroOrieHffLO7pK+DffBY2hpqepjGQ3eyw7XdS RzxDZ5OAqZ8Yflg/htLtJ1FMcEQ0Sp2WWNZKc2iviUSpfSqS0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuJmNwiw1aVtIhg1Mqh0ZoVDViwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzRiZjMyNDktOTFiMy0z YjRmLWFmN2QtMzUwZTFhZDQ0ZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBErT5kPcwBLPyXSSIV+QMF19ZzZ4qniNJaHUpP35xIcOqlbVs5NNM1 QNxiBJKgUCNVt1sG48IfMexSVr4NBi7LBnHV5GFGhHNrw2WUeZqeligED4ModqMa SmPWEBIH8I/9tVFHQb8sVXRwL0QYPE50tDnTvQT//BUZKFWE9nXNHOqkmQO6kO9E zW1QbmMAXYX9eCiWBEtsVv3MmOK00g68ZjnOF4KVxOJZcm8qk8Mbqe6Adqa2ocLY 1Vmx7Dz+zgAOjehfTbK3X6J66afH8HNLIIvHOmApeHjlIGXYW5rG+fvgKPIxjIHH ib6qdzmudK8Za0y9wL9pMhWMcSPD/QQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:54 2025 by rpki-client