$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c56d0796-16f6-3c81-8124-23de10699cb6.roa File: c56d0796-16f6-3c81-8124-23de10699cb6.roa (raw, json) Hash identifier: z+Jy0ImPR9jOd2XyHxk9UyGI0qwh143qL52zv5Uzwlo= Subject key identifier: AB:4B:19:A9:8D:B2:48:0E:22:86:CA:D0:69:C4:4B:C9:F3:9D:61:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AD7D12B9C1CDCC8A02D972340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c56d0796-16f6-3c81-8124-23de10699cb6.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:2b:9c:1c:dc:c8:a0:2d:97:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=89e5ddb3-1191-4829-b803-6178a2a9b5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:01:92:ac:c3:d7:1e:39:cc:c2:5f:73:27:1c: 4c:20:b3:84:13:47:c0:6e:17:ac:1a:6e:34:5e:15: b8:f9:14:e7:5a:2a:0f:91:4b:d1:d9:d7:5d:d3:21: 73:f8:0b:f4:37:ba:a1:f0:1c:e7:d6:27:92:58:d1: 4f:dc:01:a1:a7:c9:af:69:d5:cc:47:42:83:ea:a5: db:e8:82:cc:f2:a1:80:99:15:69:09:89:24:1f:b7: ad:25:7c:69:15:74:d3:a7:9d:77:66:76:88:5c:1c: 69:c0:50:23:56:cb:55:77:c0:29:2b:ba:e9:c8:f1: f1:44:60:53:b2:79:5b:b0:66:1d:67:fd:96:67:b5: cb:c6:3b:7a:0e:79:92:07:f3:ea:89:9e:42:08:f2: 99:49:3b:ff:5f:72:78:fb:9a:da:1d:d9:32:f4:dc: 09:0d:65:30:dd:7c:ce:28:c5:92:9d:a0:52:64:3e: 16:60:eb:64:be:1d:90:89:62:12:16:4d:14:7e:63: f3:0c:89:10:37:c5:cc:41:27:51:61:8c:6a:a3:47: ee:9d:98:1d:74:64:b3:a4:cd:c6:8d:cd:75:7c:2c: 95:59:5a:56:9f:02:b3:85:15:9b:7f:b2:fc:2d:85: 5c:23:5d:f8:73:2b:d9:c4:d9:db:34:46:ef:5e:d0: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:19:A9:8D:B2:48:0E:22:86:CA:D0:69:C4:4B:C9:F3:9D:61:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c56d0796-16f6-3c81-8124-23de10699cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.168.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:5e:a0:58:48:5b:3c:9a:11:6f:d0:5c:57:b8:af:38:68:fc: 4f:84:1d:04:26:dc:4f:ad:5e:9c:ac:8c:d1:c9:f8:25:4e:ad: 30:aa:a7:9c:83:af:db:b5:cd:9f:8b:df:2e:3b:ab:6a:41:8a: 64:eb:3c:ef:8d:44:fc:2d:2f:1a:1f:5c:47:cd:22:cd:b6:c7: 3d:0b:68:d7:e5:f6:ab:ba:a8:c2:9a:37:21:6d:7e:cf:18:88: 91:25:83:69:43:18:5d:eb:65:52:b7:19:ae:45:36:7f:82:b7: b0:8f:56:6e:ba:1b:3f:1d:f9:c3:a8:63:c4:75:b8:b7:f6:0e: b6:7c:ef:4c:0c:ac:c0:51:a4:9b:6a:02:e4:1f:8d:e6:94:e3: 47:93:fa:09:8f:e7:81:dd:72:fc:8e:29:54:e3:95:7b:b7:52: 56:f4:39:12:23:9a:b3:bd:09:36:a9:fd:aa:a2:61:54:0b:ca: 7c:1e:d0:8b:c8:97:6f:fa:a4:4a:9d:89:99:62:55:04:ad:38: a0:5b:d9:9a:3c:cc:36:38:3d:b3:9b:51:6a:40:2f:87:28:8e: 25:87:ab:0c:ce:fe:22:04:51:41:13:00:de:f4:9e:ad:b4:55: 77:2d:ca:8b:f8:02:02:23:de:a9:27:3b:e0:56:d9:a0:d7:c2: 9e:34:c8:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SucHNzIoC2XI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ODllNWRkYjMtMTE5MS00ODI5LWI4MDMtNjE3OGEyYTliNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQGSrMPXHjnMwl9zJxxMILOEE0fAbhesGm40 XhW4+RTnWioPkUvR2ddd0yFz+Av0N7qh8Bzn1ieSWNFP3AGhp8mvadXMR0KD6qXb 6ILM8qGAmRVpCYkkH7etJXxpFXTTp513ZnaIXBxpwFAjVstVd8ApK7rpyPHxRGBT snlbsGYdZ/2WZ7XLxjt6DnmSB/PqiZ5CCPKZSTv/X3J4+5raHdky9NwJDWUw3XzO KMWSnaBSZD4WYOtkvh2QiWISFk0UfmPzDIkQN8XMQSdRYYxqo0funZgddGSzpM3G jc11fCyVWVpWnwKzhRWbf7L8LYVcI134cyvZxNnbNEbvXtBjrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtLGamNskgOIobK0GnES8nznWF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzU2ZDA3OTYtMTZmNi0z YzgxLTgxMjQtMjNkZTEwNjk5Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJeoFhIWzyaEW/QXFe4rzho/E+EHQQm3E+tXpysjNHJ+CVOrTCqp5yD r9u1zZ+L3y47q2pBimTrPO+NRPwtLxofXEfNIs22xz0LaNfl9qu6qMKaNyFtfs8Y iJElg2lDGF3rZVK3Ga5FNn+Ct7CPVm66Gz8d+cOoY8R1uLf2DrZ870wMrMBRpJtq AuQfjeaU40eT+gmP54HdcvyOKVTjlXu3Ulb0ORIjmrO9CTap/aqiYVQLynwe0IvI l2/6pEqdiZliVQStOKBb2Zo8zDY4PbObUWpAL4cojiWHqwzO/iIEUUETAN70nq20 VXctyov4AgIj3qknO+BW2aDXwp40yDE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:18 2025 by rpki-client