$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f06a1f-58f9-3e80-b6fd-0730845c2b70.roa File: a7f06a1f-58f9-3e80-b6fd-0730845c2b70.roa (raw, json) Hash identifier: RfFPVJOPtGxGna9eibpNf0cfUA80cpo/FDbU0oeTOnM= Subject key identifier: 86:26:6C:EF:E6:C5:CC:42:E2:FD:B1:46:E3:15:9B:BE:23:76:12:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AE9F67D62DBA3D181F49A1640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f06a1f-58f9-3e80-b6fd-0730845c2b70.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 62957 IP address blocks: 70.165.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:7d:62:db:a3:d1:81:f4:9a:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=a170c61b-407c-4eeb-8970-0f02b8cadc1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:db:b4:9a:bc:f8:da:46:e5:f8:e6:b9:be: de:e6:41:02:13:6a:9f:43:ff:5f:bf:cf:f8:f5:3e: 97:e9:7c:e2:0d:39:22:c1:78:89:3d:a0:f9:15:ca: b9:e4:b3:95:b0:4a:9e:77:cd:24:9e:36:23:43:a5: ab:08:78:e7:10:5b:8b:18:5c:bb:fa:64:70:c4:3a: 26:2b:8c:c0:c9:a2:c6:f7:93:83:9a:a7:07:36:0a: 5f:85:b6:8a:33:0c:44:7d:54:93:d2:b1:a1:21:95: d4:38:1d:78:bc:64:66:cf:3c:87:ea:9f:8b:53:1b: d3:b7:57:58:99:e3:22:44:d9:e2:32:70:29:61:0a: 13:d9:59:07:82:c6:95:ff:51:a1:bf:16:f4:19:5b: e7:54:21:0e:10:f3:78:cb:3e:72:1f:60:07:32:00: e0:33:da:f2:01:c7:ac:c9:7a:61:be:79:84:6c:40: ce:59:c5:c7:92:08:6b:f8:52:90:85:fe:a1:75:de: c6:0d:41:56:cc:cd:2d:9b:22:14:a6:69:66:3e:d0: 17:32:85:00:dc:56:14:79:af:c4:ee:d7:fd:d7:ac: d9:96:2e:03:65:22:e4:a5:30:3a:55:20:a5:da:11: 0a:fa:5e:01:41:16:17:fa:a9:f6:ae:52:e0:04:dc: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:26:6C:EF:E6:C5:CC:42:E2:FD:B1:46:E3:15:9B:BE:23:76:12:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f06a1f-58f9-3e80-b6fd-0730845c2b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ae:4c:54:78:3a:5d:a0:f4:6e:ce:0f:f1:6b:b0:99:53:26: 8e:56:f5:3c:ad:2f:f1:6c:19:31:88:1d:a9:d6:e5:b0:33:6c: f7:3c:95:e3:3d:90:a3:e3:b9:b1:72:23:0d:ec:23:2e:12:b3: d1:da:8b:3e:35:8b:b9:2d:78:db:79:2e:ba:2f:ea:ca:51:ac: a1:fb:82:d0:87:91:86:bb:61:6b:89:85:39:f7:b3:19:ad:39: 6b:5e:cf:5f:92:73:e4:5c:99:6d:26:4b:49:42:43:64:ae:45: db:68:05:ba:c0:b6:c0:18:cd:10:60:f3:55:7e:97:55:61:11: e3:e2:bd:eb:a2:4c:98:6e:88:86:f8:e8:1a:ae:b5:c2:e9:9a: a0:71:e7:4b:8b:6f:76:40:7a:70:83:41:5f:d2:07:ce:5f:b8: 5d:fc:eb:ee:94:dc:ac:de:22:b6:a6:84:dc:1c:99:a5:40:00: 0c:7e:4a:29:ed:90:ec:ce:13:a7:f6:63:e3:08:2f:e6:4c:87: ea:c5:c9:68:c1:c9:f3:1f:d2:b6:6c:3f:42:23:14:2c:30:3f: b0:ed:09:09:2e:bb:c7:9e:d2:e7:2c:e1:54:90:d5:c5:9d:ef: 25:c7:22:57:13:76:12:ed:90:0c:25:2c:42:03:14:9b:e2:d2: 27:3a:d6:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9n1i26PRgfSaFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YTE3MGM2MWItNDA3Yy00ZWViLTg5NzAtMGYwMmI4Y2FkYzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcLbtJq8+NpG5fjmub7e5kECE2qfQ/9fv8/4 9T6X6XziDTkiwXiJPaD5Fcq55LOVsEqed80knjYjQ6WrCHjnEFuLGFy7+mRwxDom K4zAyaLG95ODmqcHNgpfhbaKMwxEfVST0rGhIZXUOB14vGRmzzyH6p+LUxvTt1dY meMiRNniMnApYQoT2VkHgsaV/1Ghvxb0GVvnVCEOEPN4yz5yH2AHMgDgM9ryAces yXphvnmEbEDOWcXHkghr+FKQhf6hdd7GDUFWzM0tmyIUpmlmPtAXMoUA3FYUea/E 7tf916zZli4DZSLkpTA6VSCl2hEK+l4BQRYX+qn2rlLgBNxPMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYmbO/mxcxC4v2xRuMVm74jdhJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdmMDZhMWYtNThmOS0z ZTgwLWI2ZmQtMDczMDg0NWMyYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRqWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACquTFR4Ol2g9G7OD/FrsJlTJo5W9TytL/FsGTGIHanW5bAzbPc8leM9 kKPjubFyIw3sIy4Ss9Haiz41i7kteNt5Lrov6spRrKH7gtCHkYa7YWuJhTn3sxmt OWtez1+Sc+RcmW0mS0lCQ2SuRdtoBbrAtsAYzRBg81V+l1VhEePiveuiTJhuiIb4 6BqutcLpmqBx50uLb3ZAenCDQV/SB85fuF386+6U3KzeIramhNwcmaVAAAx+Sint kOzOE6f2Y+MIL+ZMh+rFyWjByfMf0rZsP0IjFCwwP7DtCQkuu8ee0ucs4VSQ1cWd 7yXHIlcTdhLtkAwlLEIDFJvi0ic61k4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:34:21 2025 by rpki-client