$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96a3f2de-1915-3b5d-8c14-ffa929c5d833.roa File: 96a3f2de-1915-3b5d-8c14-ffa929c5d833.roa (raw, json) Hash identifier: c0pUVBBJ/riZ+4XFXxdsmvzlShqGQ40TvFiOlzij6zw= Subject key identifier: C8:21:D9:6A:8E:76:0B:22:DC:F7:47:2F:17:21:00:C5:EB:5D:6B:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963626B304B129C079352B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96a3f2de-1915-3b5d-8c14-ffa929c5d833.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.188.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:26:b3:04:b1:29:c0:79:35:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ba790e72-bc32-4e9f-b54a-6b84f5bc23ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a8:82:db:9a:89:30:f0:25:2a:35:35:dd:00: 39:99:47:78:e2:6b:76:a6:56:e5:6d:8c:f7:73:23: f0:ec:40:e5:5c:66:f9:44:46:e9:69:24:ce:74:cc: da:40:25:ab:68:5d:78:27:99:af:22:43:d0:3f:97: 11:50:e3:73:cc:6c:25:2f:39:0e:9f:9c:80:4a:ee: ca:85:d9:84:2d:b3:85:f5:f0:e4:fe:2f:3d:af:62: ef:6f:6d:1d:ac:5d:2e:4e:da:e1:e6:b7:5e:08:0e: 28:8f:9a:59:ac:49:3e:b9:1a:dd:05:2c:d6:3e:ff: 88:9c:02:2d:96:71:ca:37:01:65:7b:e4:09:8d:98: 77:f5:dd:49:a4:8f:db:c4:65:3e:1e:97:93:4d:9b: 8e:a0:41:d5:df:dd:23:93:5b:e0:fd:cc:57:0a:ca: 97:19:64:c6:90:10:14:d5:30:7d:8b:ec:79:a3:61: 7c:66:e4:82:93:6a:24:4e:56:dd:31:53:d4:74:0e: f8:a4:ba:36:fa:26:42:fc:95:fe:ff:5c:48:47:4f: c3:80:bb:6c:da:2b:ab:31:d7:bb:d3:a5:59:bd:6e: 9f:40:8b:96:18:4c:90:a5:5f:a8:c7:fa:d5:c5:6c: 3f:f3:5f:59:4a:4f:5e:02:8c:0b:7f:fc:73:1c:49: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:21:D9:6A:8E:76:0B:22:DC:F7:47:2F:17:21:00:C5:EB:5D:6B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96a3f2de-1915-3b5d-8c14-ffa929c5d833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:62:fe:c1:a8:c7:03:2a:50:e6:90:f9:ca:fd:4a:a7:33:92: 10:0a:f1:36:03:92:99:7c:77:ed:c6:c9:80:66:38:3c:60:24: 27:e5:00:39:35:68:c7:58:0b:a3:2a:3d:27:08:ee:60:92:78: 0c:79:ce:a6:7e:c0:d0:26:89:10:71:61:53:3a:d0:af:2c:86: 5b:f7:ee:fc:1a:81:ee:dd:95:21:10:3d:f6:60:c6:5e:c7:76: df:96:2f:96:a2:6b:21:02:28:e1:05:e1:a1:b3:99:3f:f8:43: a0:24:f5:c6:88:51:ae:4a:52:46:31:42:85:15:77:4e:94:49: f0:b8:53:06:f0:d0:32:3d:99:70:88:76:7f:9a:b6:78:30:a2: 14:89:c3:e7:eb:97:e1:5a:2f:32:71:30:1c:1e:83:0a:84:ba: 40:4f:2e:4c:3c:06:e1:54:ae:03:6b:b9:5c:cd:0b:fa:ac:07: 3e:74:16:53:55:7b:da:22:8c:50:3f:ab:9c:3d:0f:eb:52:41: 02:0f:cf:53:04:09:fa:d1:0f:f0:4a:ae:1e:16:3e:71:53:6f: ed:72:fa:48:73:74:f5:e1:e3:0d:38:21:91:96:39:13:2f:72: 75:b0:5b:f6:2c:1b:2c:27:95:c7:77:46:77:09:66:23:32:f1: 5a:fd:e3:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiazBLEpwHk1K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmE3OTBlNzItYmMzMi00ZTlmLWI1NGEtNmI4NGY1YmMyM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6iC25qJMPAlKjU13QA5mUd44mt2plblbYz3 cyPw7EDlXGb5REbpaSTOdMzaQCWraF14J5mvIkPQP5cRUONzzGwlLzkOn5yASu7K hdmELbOF9fDk/i89r2Lvb20drF0uTtrh5rdeCA4oj5pZrEk+uRrdBSzWPv+InAIt lnHKNwFle+QJjZh39d1JpI/bxGU+HpeTTZuOoEHV390jk1vg/cxXCsqXGWTGkBAU 1TB9i+x5o2F8ZuSCk2okTlbdMVPUdA74pLo2+iZC/JX+/1xIR0/DgLts2iurMde7 06VZvW6fQIuWGEyQpV+ox/rVxWw/819ZSk9eAowLf/xzHEkdKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgh2WqOdgsi3PdHLxchAMXrXWu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTZhM2YyZGUtMTkxNS0z YjVkLThjMTQtZmZhOTI5YzVkODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRry8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxi/sGoxwMqUOaQ+cr9SqczkhAK8TYDkpl8d+3GyYBmODxgJCflADk1 aMdYC6MqPScI7mCSeAx5zqZ+wNAmiRBxYVM60K8shlv37vwage7dlSEQPfZgxl7H dt+WL5aiayECKOEF4aGzmT/4Q6Ak9caIUa5KUkYxQoUVd06USfC4Uwbw0DI9mXCI dn+atngwohSJw+frl+FaLzJxMBwegwqEukBPLkw8BuFUrgNruVzNC/qsBz50FlNV e9oijFA/q5w9D+tSQQIPz1MECfrRD/BKrh4WPnFTb+1y+khzdPXh4w04IZGWORMv cnWwW/YsGywnlcd3RncJZiMy8Vr9404= -----END CERTIFICATE-----Generated at Sun Aug 24 00:34:02 2025 by rpki-client