$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fff83fe9-27ee-3738-a53b-0e402a3a26c9.roa File: fff83fe9-27ee-3738-a53b-0e402a3a26c9.roa (raw, json) Hash identifier: sDOCEv5oLYvqQNblnISABLrUo07H9rb5Ql+FFT07Nc0= Subject key identifier: 33:55:CB:50:EA:BB:F5:7D:FF:CB:6D:F6:13:B1:2D:69:CA:AD:4E:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963625E1C3CC1E2AB0A6EA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fff83fe9-27ee-3738-a53b-0e402a3a26c9.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.188.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:25:e1:c3:cc:1e:2a:b0:a6:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=acdaa629-6943-4f17-8dc5-88f938c0d9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:e6:e6:34:2a:a0:23:d3:62:02:76:54:92: e6:5a:ea:84:d1:1b:17:3b:3f:94:f7:8d:04:57:b3: 35:08:ff:1c:ff:78:76:f3:bf:f0:e9:61:23:9b:eb: c4:3b:79:ee:fa:69:36:84:40:85:96:c0:db:95:f6: ba:27:70:1f:9f:8b:cf:8a:c0:d3:ed:0e:58:f0:bf: 10:21:54:6d:0f:e8:5a:90:60:ef:76:b8:92:38:c7: 15:fe:62:e3:17:88:c8:1a:31:67:87:8c:97:5a:11: 69:93:a2:ea:af:bc:d5:1c:b1:a2:e7:83:9f:fa:c6: fe:6a:3c:75:9b:bb:fc:f5:fa:10:a8:b8:29:9a:61: ca:29:c2:7f:81:21:83:bc:6c:17:d0:c4:05:50:b1: a8:73:c8:e7:31:18:3d:6d:45:3d:69:5b:3e:5b:04: c9:b7:18:d5:ba:e6:22:e3:f3:ac:c2:30:65:86:fa: 13:3e:6e:9d:5f:08:36:70:e3:87:48:41:34:22:a7: 75:20:50:9e:3f:16:31:bd:c9:1b:b0:88:76:67:f5: ba:9b:ae:65:b1:22:fc:cb:14:86:26:62:83:f1:bd: 0c:f4:e3:e7:1d:11:7b:4a:d0:25:9b:8e:f3:4f:e6: 82:af:56:1d:bc:7d:71:68:95:6e:eb:eb:66:b4:70: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:55:CB:50:EA:BB:F5:7D:FF:CB:6D:F6:13:B1:2D:69:CA:AD:4E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fff83fe9-27ee-3738-a53b-0e402a3a26c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e5:fc:a8:d3:e7:12:ca:41:46:ab:2d:57:30:6d:7a:8c:93: a2:a5:01:b9:0f:cd:3e:f7:a4:88:62:a1:98:e0:48:46:ba:51: 26:cc:28:e1:cc:e1:c5:55:d5:03:73:ec:15:29:a3:eb:93:50: e1:9f:24:49:e2:84:2d:4e:b3:76:7d:87:74:37:fc:98:e1:39: 97:0a:cd:9e:d3:94:ab:2b:52:5e:e4:4e:0c:94:dd:0a:ad:87: 1e:8d:d5:d2:59:c1:ff:38:d8:84:78:31:45:ed:1d:f1:ff:64: fc:20:24:e9:a8:0d:38:b3:ae:db:03:99:0a:7f:c2:44:c3:14: 95:5b:c1:92:aa:f1:86:40:71:96:7b:7a:b7:a2:56:97:06:25: c1:b9:d9:76:de:50:a6:16:e4:1c:1d:67:de:40:2e:60:ea:8b: b5:5b:fe:2a:12:0c:36:83:14:2c:56:9b:3b:f3:7d:55:d8:49: 6c:f5:c1:e3:05:14:67:62:1d:9f:d2:4c:ea:90:99:f3:97:5c: 9f:69:c9:cb:70:e0:17:32:24:5d:24:c1:c1:b4:0e:8f:28:ba: a8:c0:e8:f2:29:f3:57:5c:7f:42:0c:d0:fb:c7:a5:7f:0d:44: 98:2f:0a:49:71:91:4c:f5:11:43:2b:2e:b7:d3:1b:98:d7:bb: d0:7e:ce:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiXhw8weKrCm6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YWNkYWE2MjktNjk0My00ZjE3LThkYzUtODhmOTM4YzBkOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnITm5jQqoCPTYgJ2VJLmWuqE0RsXOz+U940E V7M1CP8c/3h287/w6WEjm+vEO3nu+mk2hECFlsDblfa6J3Afn4vPisDT7Q5Y8L8Q IVRtD+hakGDvdriSOMcV/mLjF4jIGjFnh4yXWhFpk6Lqr7zVHLGi54Of+sb+ajx1 m7v89foQqLgpmmHKKcJ/gSGDvGwX0MQFULGoc8jnMRg9bUU9aVs+WwTJtxjVuuYi 4/OswjBlhvoTPm6dXwg2cOOHSEE0Iqd1IFCePxYxvckbsIh2Z/W6m65lsSL8yxSG JmKD8b0M9OPnHRF7StAlm47zT+aCr1YdvH1xaJVu6+tmtHCo6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNVy1Dqu/V9/8tt9hOxLWnKrU4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmZmODNmZTktMjdlZS0z NzM4LWE1M2ItMGU0MDJhM2EyNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRryIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnl/KjT5xLKQUarLVcwbXqMk6KlAbkPzT73pIhioZjgSEa6USbMKOHM 4cVV1QNz7BUpo+uTUOGfJEnihC1Os3Z9h3Q3/JjhOZcKzZ7TlKsrUl7kTgyU3Qqt hx6N1dJZwf842IR4MUXtHfH/ZPwgJOmoDTizrtsDmQp/wkTDFJVbwZKq8YZAcZZ7 ereiVpcGJcG52XbeUKYW5BwdZ95ALmDqi7Vb/ioSDDaDFCxWmzvzfVXYSWz1weMF FGdiHZ/STOqQmfOXXJ9pyctw4BcyJF0kwcG0Do8ouqjA6PIp81dcf0IM0PvHpX8N RJgvCklxkUz1EUMrLrfTG5jXu9B+zqY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:01 2025 by rpki-client