$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/659409c5-cef9-3a49-8d51-d75f84ecf7b2.roa File: 659409c5-cef9-3a49-8d51-d75f84ecf7b2.roa (raw, json) Hash identifier: vQmuTxMfw0KUvgJkfSpUveSu0ihOuLy/YTx8cCAhaDA= Subject key identifier: 97:7A:74:29:C1:60:A4:FB:04:81:9A:E7:90:84:9B:1F:84:95:9E:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA662F8296DABA7D6EB16A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/659409c5-cef9-3a49-8d51-d75f84ecf7b2.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.168.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:62:f8:29:6d:ab:a7:d6:eb:16:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=5103b208-6608-4573-a99a-9637474e8a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:72:ff:68:b9:df:bd:9c:65:83:55:78:03:01: 60:2a:da:cd:9f:b0:c2:c9:28:67:f5:80:1d:9f:04: cf:77:a1:44:81:85:10:c1:17:68:bc:c3:9b:24:5d: 5a:66:cb:c2:ed:dd:ec:f0:eb:4e:c0:45:95:51:b4: 82:15:ba:7b:2f:0d:b6:e3:76:82:45:37:60:25:11: 76:42:a7:d6:bf:d0:20:14:b3:83:a1:ee:dc:8c:df: 92:ad:7f:7c:b2:d6:66:a8:93:08:1f:4b:99:f8:a5: 2b:25:f5:b6:30:b4:30:28:f9:32:9a:4d:2d:2b:e6: 2a:e5:6b:0c:db:1c:fa:1f:3d:28:68:31:11:84:8c: ec:9e:47:40:fd:ad:49:b0:55:5e:bd:28:58:5d:b2: 4f:b6:5f:67:8d:d6:13:8d:0f:9c:c1:9a:e9:23:31: d2:9d:ad:69:7c:e4:40:04:fc:46:4e:c3:e7:27:6a: f9:b0:0e:74:e0:2f:a2:0d:37:30:4c:88:ce:82:9b: 7d:5e:5d:9f:67:76:fe:ce:15:fb:65:8d:76:da:df: 5c:e0:92:41:bb:59:1d:d3:54:1a:32:5b:b7:5a:c2: 1f:7a:8c:c9:d8:25:50:c8:d8:af:d1:3a:c1:34:ec: b6:3d:2e:cd:9b:45:ba:c0:a5:4d:5f:7b:4f:49:d0: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7A:74:29:C1:60:A4:FB:04:81:9A:E7:90:84:9B:1F:84:95:9E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/659409c5-cef9-3a49-8d51-d75f84ecf7b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.168.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:90:d1:a5:9b:24:66:5f:14:82:86:8c:90:e4:b5:f1:42:fe: cc:7d:6c:3e:d9:69:10:97:19:62:04:4a:32:76:d3:cf:c9:81: ff:5c:c5:85:21:80:bd:fb:22:fa:86:76:c9:2d:12:9a:1d:7d: 76:40:09:46:85:16:78:b5:04:aa:86:43:e3:5d:46:4a:71:c2: 06:0d:3e:46:d1:0b:fc:ec:38:3e:4a:5a:a7:00:23:c6:d0:34: 28:0c:81:8b:51:03:f7:d8:38:93:fe:4b:8d:f5:ec:57:9a:fb: 2f:28:72:7b:9c:3a:5f:a0:bf:66:10:6f:a0:d2:15:25:3d:ce: bf:03:60:d5:8c:1a:6e:6a:ab:60:06:7d:36:18:71:1a:c6:e5: 59:d9:fc:a5:21:c9:08:f4:65:f0:5b:20:b1:7b:ce:7d:6e:4d: 4b:39:40:a5:cf:e0:c3:b9:d0:03:85:b3:31:95:22:ab:55:39: 9e:a5:5a:ac:1c:aa:a3:41:57:42:df:98:1d:cd:ef:2d:d5:16: 45:01:45:2e:5e:54:14:b1:75:e6:f6:0d:c7:15:f3:60:ed:f8: 7a:93:1a:64:da:36:3e:8b:f2:1e:ee:33:3e:1c:5d:1b:7b:07: 20:aa:d3:57:5c:a6:4c:34:63:82:dc:fe:52:54:de:f7:6c:ae: 70:f5:c7:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmL4KW2rp9brFqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NTEwM2IyMDgtNjYwOC00NTczLWE5OWEtOTYzNzQ3NGU4YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3L/aLnfvZxlg1V4AwFgKtrNn7DCyShn9YAd nwTPd6FEgYUQwRdovMObJF1aZsvC7d3s8OtOwEWVUbSCFbp7Lw2243aCRTdgJRF2 QqfWv9AgFLODoe7cjN+SrX98stZmqJMIH0uZ+KUrJfW2MLQwKPkymk0tK+Yq5WsM 2xz6Hz0oaDERhIzsnkdA/a1JsFVevShYXbJPtl9njdYTjQ+cwZrpIzHSna1pfORA BPxGTsPnJ2r5sA504C+iDTcwTIjOgpt9Xl2fZ3b+zhX7ZY122t9c4JJBu1kd01Qa Mlu3WsIfeozJ2CVQyNiv0TrBNOy2PS7Nm0W6wKVNX3tPSdDJDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd6dCnBYKT7BIGa55CEmx+ElZ6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjU5NDA5YzUtY2VmOS0z YTQ5LThkNTEtZDc1Zjg0ZWNmN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqhOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuQ0aWbJGZfFIKGjJDktfFC/sx9bD7ZaRCXGWIESjJ208/Jgf9cxYUh gL37IvqGdsktEpodfXZACUaFFni1BKqGQ+NdRkpxwgYNPkbRC/zsOD5KWqcAI8bQ NCgMgYtRA/fYOJP+S4317Fea+y8ocnucOl+gv2YQb6DSFSU9zr8DYNWMGm5qq2AG fTYYcRrG5VnZ/KUhyQj0ZfBbILF7zn1uTUs5QKXP4MO50AOFszGVIqtVOZ6lWqwc qqNBV0LfmB3N7y3VFkUBRS5eVBSxdeb2DccV82Dt+HqTGmTaNj6L8h7uMz4cXRt7 ByCq01dcpkw0Y4Lc/lJU3vdsrnD1x/Q= -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:10 2025 by rpki-client