$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dfa9eda-4a74-33a9-81ae-64c181840fd9.roa File: 3dfa9eda-4a74-33a9-81ae-64c181840fd9.roa (raw, json) Hash identifier: QAtpQyiL0AsK5P4oBEzRG2fxJapUCRF6Fm47dl8k24Q= Subject key identifier: FA:B2:C0:F7:6D:5C:66:C0:37:24:C0:A9:77:E9:29:69:97:4B:E0:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AD4722521FB849D792E796600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dfa9eda-4a74-33a9-81ae-64c181840fd9.roa Signing time: Tue 12 Aug 2025 08:02:07 +0000 ROA not before: Tue 12 Aug 2025 08:02:07 +0000 ROA not after: Mon 10 Nov 2025 09:02:07 +0000 asID: 22773 IP address blocks: 174.78.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d4:72:25:21:fb:84:9d:79:2e:79:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 12 08:02:07 2025 GMT Not After : Nov 10 09:02:07 2025 GMT Subject: CN=948e0746-9a9d-464e-8392-7394167d367f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:41:da:56:a0:70:08:9d:48:e7:72:e9:23:45: 04:68:32:1b:f5:91:d9:f2:c3:c1:08:57:a5:3a:6f: 7b:c8:60:7d:33:8f:b7:c3:56:67:20:bb:61:2b:75: cf:87:fc:8c:61:7e:67:ab:37:05:a6:9d:f9:12:d9: 01:02:ee:15:ba:53:df:57:5b:89:84:6c:b1:55:ed: 52:ec:01:00:bf:b6:94:43:32:02:f7:72:9a:e2:34: fa:a8:53:ef:77:8d:7b:00:7d:c3:3c:d2:91:58:22: 9a:c7:43:e5:c4:d2:52:36:c0:e7:db:e3:fa:69:7f: 49:f7:59:98:0c:6c:fa:fd:9b:b6:e4:81:2a:9f:94: f4:30:50:8a:46:db:25:09:90:bf:c9:6e:08:08:67: 12:f7:09:c3:d4:d9:a1:e2:e6:50:da:25:1e:a4:51: 93:43:71:99:fd:fa:5c:8d:1b:b6:1f:7a:70:0f:10: 03:f1:3a:9b:3d:7a:49:74:63:eb:e5:f2:64:fc:58: 99:b5:ae:b2:6c:1c:6c:4e:24:6b:39:6c:86:df:dc: 07:39:59:4e:b4:59:27:e9:23:eb:03:43:56:86:42: 13:a0:d7:43:69:4b:3a:48:ba:b7:b3:27:57:c1:83: a4:a8:76:16:27:85:26:12:b5:4d:fc:a7:1e:5d:a4: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B2:C0:F7:6D:5C:66:C0:37:24:C0:A9:77:E9:29:69:97:4B:E0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dfa9eda-4a74-33a9-81ae-64c181840fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.78.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b1:e0:2b:a2:67:83:39:3a:90:ad:d3:20:ce:b6:b1:5d:e3: c4:55:cc:54:6e:e2:1a:44:b1:33:70:97:a0:98:d2:db:bc:7d: ae:ca:91:e6:f0:f1:0e:61:b7:55:24:d9:50:55:b4:01:ba:cd: fe:41:a9:fb:01:11:32:dc:84:8c:bb:6d:bc:c3:04:be:4d:fd: 27:9f:90:55:b6:60:f7:20:c0:85:51:a0:45:4f:26:56:a1:73: 49:4e:f0:67:5f:cc:e1:30:55:e1:38:63:90:e2:ec:83:29:e1: 66:4b:7e:e7:47:d6:9a:c0:e1:57:e4:a8:26:bc:1e:b0:3f:e6: 78:36:9c:5c:27:30:ef:39:51:a4:0c:50:6d:f2:ed:9e:9f:ea: 85:72:87:49:70:96:61:88:12:e0:1c:18:24:32:73:91:d8:85: ef:69:26:c4:7a:ae:5a:e4:1b:cb:97:11:d8:a4:e1:36:b4:ff: 3d:b9:aa:12:8a:8d:3f:db:fd:82:4a:d2:f2:ca:fc:cb:ae:5a: 22:3a:78:e9:4c:e0:da:37:3b:66:10:7e:03:65:3a:7f:dd:29: 4b:aa:33:f5:41:da:be:93:90:77:f0:ba:9a:44:cd:41:50:cd: 8f:38:e1:44:50:dc:af:e6:98:0e:28:d8:5f:0c:0c:b6:e3:9b: 24:c0:0c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErUciUh+4SdeS55ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgxMjA4MDIwN1oXDTI1MTExMDA5MDIwN1owLzEtMCsGA1UEAxMk OTQ4ZTA3NDYtOWE5ZC00NjRlLTgzOTItNzM5NDE2N2QzNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UHaVqBwCJ1I53LpI0UEaDIb9ZHZ8sPBCFel Om97yGB9M4+3w1ZnILthK3XPh/yMYX5nqzcFpp35EtkBAu4VulPfV1uJhGyxVe1S 7AEAv7aUQzIC93Ka4jT6qFPvd417AH3DPNKRWCKax0PlxNJSNsDn2+P6aX9J91mY DGz6/Zu25IEqn5T0MFCKRtslCZC/yW4ICGcS9wnD1Nmh4uZQ2iUepFGTQ3GZ/fpc jRu2H3pwDxAD8TqbPXpJdGPr5fJk/FiZta6ybBxsTiRrOWyG39wHOVlOtFkn6SPr A0NWhkIToNdDaUs6SLq3sydXwYOkqHYWJ4UmErVN/KceXaSJSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqywPdtXGbANyTAqXfpKWmXS+BTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RmYTllZGEtNGE3NC0z M2E5LTgxYWUtNjRjMTgxODQwZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrk6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESx4CuiZ4M5OpCt0yDOtrFd48RVzFRu4hpEsTNwl6CY0tu8fa7Kkebw 8Q5ht1Uk2VBVtAG6zf5BqfsBETLchIy7bbzDBL5N/SefkFW2YPcgwIVRoEVPJlah c0lO8GdfzOEwVeE4Y5Di7IMp4WZLfudH1prA4VfkqCa8HrA/5ng2nFwnMO85UaQM UG3y7Z6f6oVyh0lwlmGIEuAcGCQyc5HYhe9pJsR6rlrkG8uXEdik4Ta0/z25qhKK jT/b/YJK0vLK/MuuWiI6eOlM4No3O2YQfgNlOn/dKUuqM/VB2r6TkHfwuppEzUFQ zY844URQ3K/mmA4o2F8MDLbjmyTADLg= -----END CERTIFICATE-----Generated at Sun Aug 24 03:01:01 2025 by rpki-client