$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d27650cd-0adc-3814-aa99-9684950b953e.roa File: d27650cd-0adc-3814-aa99-9684950b953e.roa (raw, json) Hash identifier: x5xYA2e7jVaPv1dZEb88k81P6iD8GXGWai4ld1eK480= Subject key identifier: 0B:82:B3:49:00:5D:1A:F8:C6:8C:92:6D:29:25:89:EF:EC:AB:AD:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA66218452A93A80B7C8720 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d27650cd-0adc-3814-aa99-9684950b953e.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.165.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:62:18:45:2a:93:a8:0b:7c:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=4ce2496c-57e8-4592-bccc-d119e29ecb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:b3:2f:23:b9:5b:d9:98:95:fc:04:67:25: 38:f6:54:51:cc:e6:21:2a:d8:5d:f7:04:07:94:53: 9d:cd:4d:94:09:84:4c:cd:7d:9e:b5:12:64:b1:b5: f4:2c:96:c0:be:1b:f5:7d:4e:c7:75:8b:2b:ba:94: 0b:24:35:24:ff:c8:38:b3:29:51:cb:2c:1b:f2:60: 38:c0:47:b7:46:c4:e6:1e:87:c4:46:35:4e:eb:a8: e8:ae:ee:65:cd:ba:9d:ae:cc:a2:08:82:2e:37:00: f4:aa:26:c7:ce:5c:bd:79:ac:48:7a:bf:56:b5:b3: e8:c1:e3:97:f0:90:b4:79:07:37:c9:f9:84:bf:89: de:d4:cb:46:1f:b4:51:9e:f9:dc:5b:07:09:38:e1: 03:80:35:ab:27:ca:6a:45:ad:4b:43:ae:1e:a8:94: 42:ec:94:80:cc:ec:21:7c:35:bc:0f:26:00:c7:e2: bc:5b:5b:1c:39:95:e2:19:2b:d6:9f:fb:ba:18:14: a2:8e:96:fb:56:80:9e:fe:d9:de:3f:d9:23:ce:fd: 5d:5f:89:ca:a1:88:bb:3d:e5:a2:2a:fa:eb:93:a4: fc:bb:d4:ae:22:65:8d:9a:53:53:0c:8f:66:d1:5a: b1:a4:7b:bd:8d:ae:bd:34:ba:c7:54:83:ba:25:b8: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:82:B3:49:00:5D:1A:F8:C6:8C:92:6D:29:25:89:EF:EC:AB:AD:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d27650cd-0adc-3814-aa99-9684950b953e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:93:b8:47:3a:16:fe:3c:b9:fb:34:fe:95:61:53:37:d0:ac: 19:bc:dc:2a:78:0a:12:38:0d:4a:dc:5e:e4:38:89:a2:33:cd: 2f:f4:e9:9b:0b:81:49:de:cf:b0:4d:33:1d:d5:d7:ae:ad:ef: 94:0f:e7:19:67:e5:aa:5c:88:52:f0:2b:d8:4a:4f:59:ae:b6: 2a:77:d4:e3:db:c3:7d:5b:ec:25:5d:3c:d3:96:c5:bc:13:0f: 4a:ca:93:e5:88:41:83:f4:b1:fe:4f:3c:a1:3d:c0:1b:c4:dc: ce:de:f0:df:d5:c1:ed:2f:a9:78:2c:f1:17:52:60:1e:ae:44: 60:71:14:3d:d3:35:a9:74:0b:13:39:bc:5b:2b:f2:85:82:8a: 7d:1e:71:0e:58:b9:33:7b:fa:7c:53:83:0b:4f:29:b1:db:31: 63:c0:45:0c:0d:20:94:8e:28:b3:37:0b:75:31:d1:99:40:fd: 83:44:d5:52:64:00:06:8f:fa:cc:c2:bb:94:9f:9c:6f:85:3d: ca:39:00:15:99:03:05:d7:6a:d4:27:c8:a1:f9:ef:38:cb:a2: 28:5f:f1:2e:33:50:82:67:39:43:b8:ea:fe:ab:f1:f7:49:a1: 7e:cf:55:5b:2d:7b:2d:ca:94:7f:f2:29:c2:7e:e6:7e:6c:d5: ff:d6:7d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmIYRSqTqAt8hyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NGNlMjQ5NmMtNTdlOC00NTkyLWJjY2MtZDExOWUyOWVjYjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFmzLyO5W9mYlfwEZyU49lRRzOYhKthd9wQH lFOdzU2UCYRMzX2etRJksbX0LJbAvhv1fU7HdYsrupQLJDUk/8g4sylRyywb8mA4 wEe3RsTmHofERjVO66joru5lzbqdrsyiCIIuNwD0qibHzly9eaxIer9WtbPoweOX 8JC0eQc3yfmEv4ne1MtGH7RRnvncWwcJOOEDgDWrJ8pqRa1LQ64eqJRC7JSAzOwh fDW8DyYAx+K8W1scOZXiGSvWn/u6GBSijpb7VoCe/tneP9kjzv1dX4nKoYi7PeWi Kvrrk6T8u9SuImWNmlNTDI9m0VqxpHu9ja69NLrHVIO6JbjujQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuCs0kAXRr4xoySbSklie/sq61hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDI3NjUwY2QtMGFkYy0z ODE0LWFhOTktOTY4NDk1MGI5NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+TuEc6Fv48ufs0/pVhUzfQrBm83Cp4ChI4DUrcXuQ4iaIzzS/06ZsL gUnez7BNMx3V166t75QP5xln5apciFLwK9hKT1mutip31OPbw31b7CVdPNOWxbwT D0rKk+WIQYP0sf5PPKE9wBvE3M7e8N/Vwe0vqXgs8RdSYB6uRGBxFD3TNal0CxM5 vFsr8oWCin0ecQ5YuTN7+nxTgwtPKbHbMWPARQwNIJSOKLM3C3Ux0ZlA/YNE1VJk AAaP+szCu5SfnG+FPco5ABWZAwXXatQnyKH57zjLoihf8S4zUIJnOUO46v6r8fdJ oX7PVVstey3KlH/yKcJ+5n5s1f/WfUE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:57:46 2025 by rpki-client