$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024361b1-5f21-3630-820f-7b9d4d345a1f.roa File: 024361b1-5f21-3630-820f-7b9d4d345a1f.roa (raw, json) Hash identifier: MlMeeV4Kj70cnQ4NwhBtGOZAZs85vUU6fMH+L+Aiz1E= Subject key identifier: 7F:41:55:A6:F4:2D:87:80:C9:35:26:92:2D:71:00:EB:DD:34:41:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C79DF271DAF2CF20D1100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024361b1-5f21-3630-820f-7b9d4d345a1f.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:79:df:27:1d:af:2c:f2:0d:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=ddb9c5b3-acb2-4c79-919e-d4324c469cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:28:15:3e:1d:5e:59:b1:f7:76:8e:3d:98: 1b:1f:a3:d8:f0:67:07:a3:93:6e:4e:59:a3:b3:43: 8b:e6:60:50:dd:b8:cd:d0:a9:97:45:a0:91:3d:85: 23:5c:68:76:e8:7b:68:f0:0e:df:84:8b:56:cf:ec: 56:18:c3:ff:34:83:7b:31:87:22:e4:29:f5:a6:9e: 71:28:55:c1:69:a5:69:f3:0e:1b:cd:18:b9:04:59: 41:ad:ba:24:40:d9:2d:c8:e7:d0:b1:c5:d4:e0:93: 93:2d:36:2b:d8:2b:a1:94:6c:5b:53:41:79:0e:bf: de:fd:68:86:71:20:4d:a2:49:c9:ff:22:a3:c9:fa: 72:31:50:8c:00:dc:e4:19:02:9b:f8:da:46:71:0b: e4:bd:99:42:52:f2:26:cc:0c:a7:4c:eb:4c:6c:6b: 4e:df:d6:af:94:de:1c:db:7f:92:aa:31:d7:c3:e0: 93:39:54:f1:3c:6f:d9:d5:ff:2b:e5:87:45:08:0b: 21:74:ac:e3:50:e3:33:7f:53:58:cf:a2:13:a9:1e: 34:80:ac:31:a8:2d:b4:6f:3d:8e:0c:4b:71:56:7e: 57:ea:12:43:22:3b:e1:5e:1d:c9:3d:a9:0e:d7:89: 64:98:9d:b2:4a:1e:ca:8f:83:8c:5e:d4:06:e9:81: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:55:A6:F4:2D:87:80:C9:35:26:92:2D:71:00:EB:DD:34:41:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024361b1-5f21-3630-820f-7b9d4d345a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:03:ee:10:fd:ea:3b:d8:d8:3b:25:69:58:12:cd:27:07:b7: 39:63:75:2b:84:df:1e:41:9b:91:89:85:5d:f9:9f:0c:db:ed: ba:60:ac:66:31:dd:c0:f3:95:f2:46:90:69:fd:fc:57:eb:04: 3d:2f:3f:62:70:b3:de:be:da:b2:48:e7:a5:45:2a:83:18:ad: f5:fc:54:d9:70:85:45:b6:69:aa:85:79:3a:2c:c0:1b:b1:4f: da:cf:4f:40:bf:f1:a3:9a:d8:b1:2d:a8:33:c9:88:3d:8d:f0: a5:93:aa:e4:03:42:0c:22:ab:14:12:87:5a:fe:09:25:08:b7: ab:d1:a3:67:46:ab:e5:c7:01:c7:d2:a2:a4:48:39:39:02:0d: e3:e5:9c:53:0c:1a:4d:66:9a:0f:9b:fb:28:4a:f4:5b:53:59: ac:2c:f0:f2:9d:ef:de:f8:04:7a:c4:da:b9:37:06:e6:79:71: e4:92:0b:db:a8:c1:69:1f:0b:5d:fc:0a:12:03:32:a7:d6:c7: 53:fe:12:62:ad:4a:7d:8f:ff:10:35:fb:01:24:d0:d5:94:65: a7:00:dd:28:23:5b:89:6b:51:8b:4f:4a:ef:7e:af:9f:46:85: 05:d2:7b:4b:0e:53:8a:39:f1:05:ee:e0:ee:a2:67:c0:96:2c: 68:1d:d8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHnfJx2vLPINEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZGRiOWM1YjMtYWNiMi00Yzc5LTkxOWUtZDQzMjRjNDY5Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8IoFT4dXlmx93aOPZgbH6PY8GcHo5NuTlmj s0OL5mBQ3bjN0KmXRaCRPYUjXGh26Hto8A7fhItWz+xWGMP/NIN7MYci5Cn1pp5x KFXBaaVp8w4bzRi5BFlBrbokQNktyOfQscXU4JOTLTYr2CuhlGxbU0F5Dr/e/WiG cSBNoknJ/yKjyfpyMVCMANzkGQKb+NpGcQvkvZlCUvImzAynTOtMbGtO39avlN4c 23+SqjHXw+CTOVTxPG/Z1f8r5YdFCAshdKzjUOMzf1NYz6ITqR40gKwxqC20bz2O DEtxVn5X6hJDIjvhXh3JPakO14lkmJ2ySh7Kj4OMXtQG6YHoCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9BVab0LYeAyTUmki1xAOvdNEEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI0MzYxYjEtNWYyMS0z NjMwLTgyMGYtN2I5ZDRkMzQ1YTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYD7hD96jvY2DslaVgSzScHtzljdSuE3x5Bm5GJhV35nwzb7bpgrGYx 3cDzlfJGkGn9/FfrBD0vP2Jws96+2rJI56VFKoMYrfX8VNlwhUW2aaqFeToswBux T9rPT0C/8aOa2LEtqDPJiD2N8KWTquQDQgwiqxQSh1r+CSUIt6vRo2dGq+XHAcfS oqRIOTkCDePlnFMMGk1mmg+b+yhK9FtTWaws8PKd7974BHrE2rk3BuZ5ceSSC9uo wWkfC138ChIDMqfWx1P+EmKtSn2P/xA1+wEk0NWUZacA3SgjW4lrUYtPSu9+r59G hQXSe0sOU4o58QXu4O6iZ8CWLGgd2Fg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:26 2025 by rpki-client