$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4bcc882-fce6-3ce7-b7c3-4712d8b71c22.roa File: d4bcc882-fce6-3ce7-b7c3-4712d8b71c22.roa (raw, json) Hash identifier: pUsDDMQbjbSLoQEdi+m95LMQ7Hqf6mcK3KyegIsm3q0= Subject key identifier: 21:1E:B7:04:AE:59:18:9D:CF:B2:62:28:80:20:4A:62:FB:A4:D3:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AE461453BC8859ABB18917480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4bcc882-fce6-3ce7-b7c3-4712d8b71c22.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.174.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:45:3b:c8:85:9a:bb:18:91:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=d95639da-4bc2-4880-bf52-7c9d3cd4ef9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:70:6a:9d:a9:4a:d0:81:e7:93:83:d2:a5: d3:41:ec:48:26:b7:b7:73:89:00:76:bc:ac:f5:13: 09:21:4d:fe:cc:2d:4f:e1:aa:79:38:eb:4c:01:59: 42:a6:1a:4f:ba:d6:ca:c6:d1:35:0b:3e:91:8f:13: 97:f2:7a:5f:c5:7e:48:b1:f5:cd:e8:e2:4e:a2:58: 4b:1f:75:f4:c9:f6:4e:7b:db:80:8f:d6:6e:87:ad: 6a:55:c5:ca:1d:28:55:2b:9e:7c:3c:a7:5b:1b:1b: e4:c7:f1:5b:5e:10:d8:2d:f7:64:ea:e9:27:9a:c0: 72:29:c9:80:35:94:a6:d0:c4:5c:d9:61:f6:09:55: 56:18:2d:3c:e1:f7:4e:5a:1c:29:7a:34:a8:9e:3d: f5:19:bf:1a:f2:fa:32:71:ed:91:bf:60:b7:1e:9d: e8:c8:54:b7:15:83:f4:c4:58:1a:70:3d:90:ba:d6: 49:eb:0f:a5:c6:8a:d7:b5:3a:c1:58:5f:51:35:8f: 89:99:e3:2a:20:3f:2e:80:f8:63:5a:9b:5e:9e:65: c3:16:69:98:32:87:5e:a1:75:f7:14:4d:54:a9:1d: db:e4:04:59:2a:48:a5:fb:f2:5e:2b:e4:1a:66:45: 53:50:bf:b7:68:e8:15:b8:6c:00:a9:4b:6a:60:10: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1E:B7:04:AE:59:18:9D:CF:B2:62:28:80:20:4A:62:FB:A4:D3:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4bcc882-fce6-3ce7-b7c3-4712d8b71c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:dd:13:d3:15:26:30:14:fc:93:75:69:57:3b:cb:7c:c5:1f: bd:75:91:d9:c5:e0:73:ce:47:1d:e2:2b:2e:e2:79:15:ef:05: c3:6f:f3:c3:04:d5:f0:2d:a5:f4:8d:63:57:6a:6c:29:ef:c1: 56:47:48:e1:62:01:22:d9:df:95:20:d4:f8:75:49:a4:84:e8: 11:91:43:b7:d4:af:17:e5:24:ba:61:19:19:8a:30:e1:85:30: 29:78:33:9b:b8:8c:46:c9:0e:99:e5:ce:42:2f:c7:2e:58:81: a7:81:43:43:10:bb:c5:42:e8:39:bb:cf:7b:2d:d3:8d:a7:3a: a0:d7:ef:44:db:3c:c5:6f:da:b2:0d:b9:62:ff:8b:73:e1:ec: ce:3b:09:f0:8e:d5:7e:78:56:92:01:04:e4:a6:16:96:2f:52: d4:ce:0e:ee:32:07:f4:8f:aa:fe:81:70:2f:4f:0f:49:c4:bd: 26:cd:a5:e8:60:13:53:ac:ee:ee:c1:86:de:94:eb:66:0d:cd: 92:08:0b:52:ac:5f:bf:ab:4e:f2:f5:fb:c7:13:08:f1:7d:1e: e5:fc:b0:90:22:6c:d0:cd:c4:c2:dd:dc:7a:9c:67:33:9d:22: a4:8d:f3:04:ad:1f:ad:d1:f2:02:a5:33:24:2c:e8:17:98:a3: 66:80:c3:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUU7yIWauxiRdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDk1NjM5ZGEtNGJjMi00ODgwLWJmNTItN2M5ZDNjZDRlZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZZwap2pStCB55OD0qXTQexIJre3c4kAdrys 9RMJIU3+zC1P4ap5OOtMAVlCphpPutbKxtE1Cz6RjxOX8npfxX5IsfXN6OJOolhL H3X0yfZOe9uAj9Zuh61qVcXKHShVK558PKdbGxvkx/FbXhDYLfdk6uknmsByKcmA NZSm0MRc2WH2CVVWGC084fdOWhwpejSonj31Gb8a8voyce2Rv2C3Hp3oyFS3FYP0 xFgacD2QutZJ6w+lxorXtTrBWF9RNY+JmeMqID8ugPhjWptenmXDFmmYModeoXX3 FE1UqR3b5ARZKkil+/JeK+QaZkVTUL+3aOgVuGwAqUtqYBCIAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEetwSuWRidz7JiKIAgSmL7pNPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDRiY2M4ODItZmNlNi0z Y2U3LWI3YzMtNDcxMmQ4YjcxYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXdE9MVJjAU/JN1aVc7y3zFH711kdnF4HPORx3iKy7ieRXvBcNv88ME 1fAtpfSNY1dqbCnvwVZHSOFiASLZ35Ug1Ph1SaSE6BGRQ7fUrxflJLphGRmKMOGF MCl4M5u4jEbJDpnlzkIvxy5YgaeBQ0MQu8VC6Dm7z3st042nOqDX70TbPMVv2rIN uWL/i3Ph7M47CfCO1X54VpIBBOSmFpYvUtTODu4yB/SPqv6BcC9PD0nEvSbNpehg E1Os7u7Bht6U62YNzZIIC1KsX7+rTvL1+8cTCPF9HuX8sJAibNDNxMLd3HqcZzOd IqSN8wStH63R8gKlMyQs6BeYo2aAw6I= -----END CERTIFICATE-----Generated at Sat Aug 23 13:22:41 2025 by rpki-client