$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb71b347-40c2-37bf-87fd-2057c206cec6.roa File: bb71b347-40c2-37bf-87fd-2057c206cec6.roa (raw, json) Hash identifier: IxYP1VY0XxWDoH8fGgtGtaScTrTO+oeKY9O+1gkG0ds= Subject key identifier: D0:24:D1:3A:BA:F8:F8:E3:F7:8F:F0:AC:CD:95:E4:33:30:C5:E6:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ADA9BBE1726DBF4A4DCDA8380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb71b347-40c2-37bf-87fd-2057c206cec6.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.174.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:be:17:26:db:f4:a4:dc:da:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=f573556f-3d84-4ff1-9a39-1f5b396ecba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:c4:6e:9a:10:3e:61:a2:46:ea:51:1d:a7: ee:03:84:72:33:7e:27:6b:0c:e8:5b:f5:7a:47:cb: 1a:28:58:dc:32:f3:20:81:dc:f2:9b:9d:00:9e:b5: 2c:56:e7:3a:8a:b5:12:a1:87:8f:1f:5c:c2:6a:1f: 1b:ee:ff:1a:fc:88:dc:45:7d:47:04:2f:4d:8a:16: 6d:49:3d:5a:eb:5f:71:25:f7:5e:64:d4:ae:92:82: a2:2d:bc:be:4a:3b:5e:be:6b:a7:c6:07:b8:ce:41: ae:f6:f9:ff:81:e6:a7:e1:3b:37:f1:4b:e0:1c:0e: 7b:1d:e4:46:08:e7:fe:90:f5:94:b8:f0:04:0c:cf: a1:36:74:c2:32:e4:a6:bf:71:17:68:af:a4:98:27: d5:cc:72:d4:fa:9c:60:a0:d6:ab:68:b1:6b:63:6a: 0d:a7:3a:9e:95:ca:30:9b:9b:d3:c2:12:e9:99:3b: 60:4e:88:cf:0b:d9:58:6a:2d:2f:25:47:59:51:a9: 77:4d:72:71:e3:bf:31:bd:fd:bc:54:79:2a:da:d6: 07:ba:66:10:e8:a6:c4:03:24:fe:ab:05:57:c2:f7: 0c:85:11:8f:66:87:ce:d1:f9:57:cf:00:a0:93:3a: 43:e9:cb:f6:6a:ba:a2:2d:db:0a:ad:dd:a2:f9:16: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:24:D1:3A:BA:F8:F8:E3:F7:8F:F0:AC:CD:95:E4:33:30:C5:E6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb71b347-40c2-37bf-87fd-2057c206cec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c4:45:26:14:21:7f:39:ce:ec:70:c0:12:bc:07:0d:1b:9b: 6a:61:f2:e8:74:64:15:45:d3:5b:33:db:b4:ce:9b:5e:f2:1b: 10:4a:01:83:0a:1e:41:8b:ee:77:3c:b2:a7:52:26:12:39:86: c3:5f:01:4a:e8:dc:35:8d:9a:a4:14:69:66:51:14:ac:15:8c: 25:f8:96:4f:55:cc:32:5b:1b:32:e4:00:3d:cc:45:98:32:ab: dc:3b:50:a0:16:15:7b:2a:37:3b:5a:4f:ff:0c:50:cb:bd:07: 3d:a8:bb:0f:15:7b:28:f0:4c:33:38:b8:ae:26:94:15:9c:b6: 9b:ce:64:95:46:82:3d:0c:2e:c4:17:db:76:25:ca:e9:4f:61: b1:d6:00:d8:4b:32:46:30:1f:da:5f:9c:8a:3a:9e:93:17:61: 14:39:e8:fe:a6:6f:f6:3e:fe:2d:bb:29:43:0f:19:98:ca:ae: 7b:de:29:64:d5:11:67:19:51:c4:5e:34:0a:52:2b:ff:81:b6: e8:b5:96:d5:fa:bb:a4:45:fd:04:5e:40:52:bd:c3:13:6f:a6: b6:58:96:8d:ef:2f:96:37:20:68:1f:96:61:4b:a8:48:6a:4d: 98:2d:40:fb:9d:55:33:e4:0b:a0:69:90:6c:e1:04:74:a4:07: da:90:3f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram74XJtv0pNzag4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZjU3MzU1NmYtM2Q4NC00ZmYxLTlhMzktMWY1YjM5NmVjYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAfEbpoQPmGiRupRHafuA4RyM34nawzoW/V6 R8saKFjcMvMggdzym50AnrUsVuc6irUSoYePH1zCah8b7v8a/IjcRX1HBC9NihZt ST1a619xJfdeZNSukoKiLby+Sjtevmunxge4zkGu9vn/gean4Ts38UvgHA57HeRG COf+kPWUuPAEDM+hNnTCMuSmv3EXaK+kmCfVzHLU+pxgoNaraLFrY2oNpzqelcow m5vTwhLpmTtgTojPC9lYai0vJUdZUal3TXJx478xvf28VHkq2tYHumYQ6KbEAyT+ qwVXwvcMhRGPZofO0flXzwCgkzpD6cv2arqiLdsKrd2i+RZ++QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAk0Tq6+Pjj94/wrM2V5DMwxeZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI3MWIzNDctNDBjMi0z N2JmLTg3ZmQtMjA1N2MyMDZjZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrERSYUIX85zuxwwBK8Bw0bm2ph8uh0ZBVF01sz27TOm17yGxBKAYMK HkGL7nc8sqdSJhI5hsNfAUro3DWNmqQUaWZRFKwVjCX4lk9VzDJbGzLkAD3MRZgy q9w7UKAWFXsqNztaT/8MUMu9Bz2ouw8VeyjwTDM4uK4mlBWctpvOZJVGgj0MLsQX 23YlyulPYbHWANhLMkYwH9pfnIo6npMXYRQ56P6mb/Y+/i27KUMPGZjKrnveKWTV EWcZUcReNApSK/+Btui1ltX6u6RF/QReQFK9wxNvprZYlo3vL5Y3IGgflmFLqEhq TZgtQPudVTPkC6BpkGzhBHSkB9qQP84= -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:45 2025 by rpki-client