$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/554b2145-a7c2-3cef-8d2b-7e0dc941c705.roa File: 554b2145-a7c2-3cef-8d2b-7e0dc941c705.roa (raw, json) Hash identifier: oTb10gfNuJdklB2fDiTol75fv5QIHIY2lT0S5wfP6Yo= Subject key identifier: 9B:E0:94:45:5E:62:6D:62:5B:2C:25:4A:D0:1B:AA:81:57:33:4A:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636454E04D9F470E425C480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/554b2145-a7c2-3cef-8d2b-7e0dc941c705.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.161.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:45:4e:04:d9:f4:70:e4:25:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a42d77d9-60e2-4c50-8769-8ad81fdc85a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:36:a4:a4:65:a4:44:20:27:b6:a1:a8:60: 5b:b2:87:23:dc:34:69:ae:1a:81:cd:12:3a:77:dd: 85:93:c7:8e:2b:33:72:79:63:8c:69:ee:51:99:47: b2:f5:e4:2d:b3:d0:f5:50:a1:15:2b:5b:ef:80:82: 6d:08:c0:47:0a:78:c5:5b:ec:28:b8:b3:48:4e:a3: fb:f2:bc:7d:ef:8c:21:02:96:01:fb:50:8e:2f:e2: 81:96:63:d6:fc:d5:92:07:a8:36:73:93:51:1d:00: 95:d9:33:cc:c9:9a:5f:09:55:68:59:5b:36:e8:c7: d3:a7:8b:5b:67:cf:13:2f:2d:49:e9:1e:81:1a:83: a5:9f:cc:69:11:f5:13:80:ec:0e:11:88:92:6e:8d: bf:f0:ca:cb:98:44:23:d1:90:2b:d5:e4:76:0a:8a: 34:cd:a9:f1:17:d8:18:9f:da:6a:02:7c:ea:78:48: 56:e1:5c:4f:f3:d8:ed:92:2b:24:d5:b4:fa:c2:87: 2f:24:0f:c4:4f:a5:76:0e:87:ff:14:71:23:e3:ae: 7a:87:9e:17:44:a2:80:be:e9:e9:11:93:97:1e:9b: ab:f6:c2:02:4f:54:92:22:c2:16:60:42:27:f5:ac: 4b:58:28:84:6f:ee:64:4d:05:9f:c7:8b:c7:8f:4b: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E0:94:45:5E:62:6D:62:5B:2C:25:4A:D0:1B:AA:81:57:33:4A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/554b2145-a7c2-3cef-8d2b-7e0dc941c705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b1:22:fd:08:94:83:7f:f6:f7:76:98:91:b9:3d:f0:ca:2f: 66:0d:ef:bf:d5:8b:ca:27:ec:4e:24:22:22:8d:6f:3b:a1:f6: 2a:4d:16:7a:8e:1a:d4:21:39:2c:43:aa:bd:98:41:34:ac:36: 84:21:f3:69:c9:25:f1:75:00:65:62:c1:83:f5:40:ed:11:b1: 8e:ee:f0:6b:2b:05:c1:23:0c:e6:a1:48:f4:7d:03:6c:b3:1c: a8:1d:ca:fd:dc:76:46:3b:82:c0:a1:dc:b4:a3:34:84:8c:ab: c8:9c:c2:2e:24:b7:6c:a5:f8:79:5a:1e:c1:c1:c4:1d:e8:eb: 99:82:ac:69:37:3d:b6:8a:9f:d8:2f:c9:d1:59:6e:cd:fa:12: e0:eb:f8:d7:92:93:8b:be:4f:0c:d7:4e:22:64:f6:d7:ad:24: ac:2f:53:48:ed:2a:fb:68:fd:1a:fa:d5:c7:e2:cd:93:47:f1: 3b:8c:f0:22:e1:89:f7:7e:1e:04:fb:43:35:87:5e:2c:19:03: 19:b6:02:23:7a:0b:b5:61:23:aa:d3:ac:4e:96:9d:3b:7f:e5: 59:50:46:55:38:14:7d:78:a3:8d:ae:0e:45:8c:1b:30:4e:5c: 23:1a:44:0f:fe:5e:cb:fc:89:20:1a:eb:e1:b4:55:0f:2d:fc: 34:9d:6f:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkVOBNn0cOQlxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTQyZDc3ZDktNjBlMi00YzUwLTg3NjktOGFkODFmZGM4NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR82pKRlpEQgJ7ahqGBbsocj3DRprhqBzRI6 d92Fk8eOKzNyeWOMae5RmUey9eQts9D1UKEVK1vvgIJtCMBHCnjFW+wouLNITqP7 8rx974whApYB+1COL+KBlmPW/NWSB6g2c5NRHQCV2TPMyZpfCVVoWVs26MfTp4tb Z88TLy1J6R6BGoOln8xpEfUTgOwOEYiSbo2/8MrLmEQj0ZAr1eR2Coo0zanxF9gY n9pqAnzqeEhW4VxP89jtkisk1bT6wocvJA/ET6V2Dof/FHEj4656h54XRKKAvunp EZOXHpur9sICT1SSIsIWYEIn9axLWCiEb+5kTQWfx4vHj0taIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvglEVeYm1iWywlStAbqoFXM0pkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTU0YjIxNDUtYTdjMi0z Y2VmLThkMmItN2UwZGM5NDFjNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKxIv0IlIN/9vd2mJG5PfDKL2YN77/Vi8on7E4kIiKNbzuh9ipNFnqO GtQhOSxDqr2YQTSsNoQh82nJJfF1AGViwYP1QO0RsY7u8GsrBcEjDOahSPR9A2yz HKgdyv3cdkY7gsCh3LSjNISMq8icwi4kt2yl+HlaHsHBxB3o65mCrGk3PbaKn9gv ydFZbs36EuDr+NeSk4u+TwzXTiJk9tetJKwvU0jtKvto/Rr61cfizZNH8TuM8CLh ifd+HgT7QzWHXiwZAxm2AiN6C7VhI6rTrE6WnTt/5VlQRlU4FH14o42uDkWMGzBO XCMaRA/+Xsv8iSAa6+G0VQ8t/DSdb5U= -----END CERTIFICATE-----Generated at Sat Aug 23 20:17:44 2025 by rpki-client