$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/043d1512-8ce7-3d02-9d65-bc113e9aea63.roa File: 043d1512-8ce7-3d02-9d65-bc113e9aea63.roa (raw, json) Hash identifier: xBGcivIgwuucwpL72mdaJgBSQVeWgATRy+03IlAZbg0= Subject key identifier: BC:88:25:4F:93:A5:BF:60:E6:FD:F1:22:81:62:CC:81:AF:84:5F:9F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7C8C5EE7A38780A57C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/043d1512-8ce7-3d02-9d65-bc113e9aea63.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.177.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:7c:8c:5e:e7:a3:87:80:a5:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=0168feff-0fcc-4df8-99a0-ed50afa01b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0b:5d:48:64:d6:27:c9:90:98:cc:5b:e6:d5: 80:26:5c:03:b0:ed:d9:27:72:4e:ac:bc:44:af:59: 57:55:68:34:4b:ff:b2:15:97:85:c2:b1:19:b1:52: 49:07:ed:37:80:c5:12:6c:97:82:aa:72:af:bb:f0: aa:9a:13:de:16:6c:09:b2:ab:95:a6:6a:45:68:cb: 7c:cd:2e:74:8c:7f:0d:d9:01:25:ae:ae:17:03:d4: 61:bb:2f:96:75:2d:9b:af:56:ce:17:af:d1:a6:71: bb:bd:96:7f:fe:a6:d0:a5:cb:94:92:9d:3a:77:80: 77:89:c8:f3:8e:ee:53:6a:13:d2:94:78:02:76:82: 25:50:f4:56:bd:fd:2e:9b:a6:2f:99:5b:9c:40:79: 77:b8:05:ba:6a:cb:03:17:e3:7a:eb:61:b1:96:e1: 20:c8:11:b4:ba:c1:04:ab:95:cf:2e:27:91:ee:f0: fe:67:45:43:9c:6c:8b:99:03:bd:ff:5a:e9:54:5b: 62:4f:05:7c:3f:e2:4a:82:bf:7a:0c:5c:7f:5e:8c: 61:73:26:7a:c1:c4:7e:18:c6:e9:ad:30:e9:4a:d1: ae:ad:46:37:28:78:43:c6:6e:47:b9:ee:b9:d0:72: 1d:c7:3f:e5:49:ce:bd:be:1c:67:e3:6c:65:52:99: 8a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:88:25:4F:93:A5:BF:60:E6:FD:F1:22:81:62:CC:81:AF:84:5F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/043d1512-8ce7-3d02-9d65-bc113e9aea63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.177.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:20:cf:83:e5:a7:7b:13:2b:a7:a8:24:02:c8:dd:ec:15:7c: 67:a6:38:b1:93:f4:8b:e4:41:1b:72:b4:e0:8a:3e:68:6f:8f: 28:0e:63:f2:1c:d7:aa:d5:9f:9c:2b:40:84:ba:ab:8f:c4:5e: 49:eb:98:9d:e8:43:ed:66:c1:e3:7b:ff:47:fd:6c:19:38:2d: a4:54:98:67:a3:28:19:51:d7:02:f0:6c:bc:fb:79:12:43:8c: ef:0f:bd:77:25:49:cf:0a:82:d1:e4:5c:a4:5d:5b:57:ab:df: f6:ee:84:66:5d:c5:ca:bb:93:b9:65:f4:c2:d0:ee:8c:0a:5e: ad:2b:2e:f1:d6:f0:46:5e:d6:5e:a7:93:55:a4:da:e4:64:e1: 22:d5:2d:85:aa:0e:4a:0a:8c:e9:c2:fa:70:f4:b8:f6:9a:aa: 72:bb:6b:4c:7c:af:b8:3a:80:78:56:72:29:38:30:d0:e7:bf: 68:2a:ee:45:ac:a1:b1:69:c6:6f:13:69:be:f1:2a:66:32:7d: cc:64:ed:ba:2e:8d:2e:d1:b6:8c:99:83:5b:17:ff:55:05:42: ba:74:df:44:b9:c9:e1:de:12:7a:db:49:c5:7a:90:7c:68:79: c2:87:f0:a5:dd:83:36:91:a8:00:22:bc:97:75:f0:14:4c:79: 73:4f:9d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHyMXuejh4ClfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MDE2OGZlZmYtMGZjYy00ZGY4LTk5YTAtZWQ1MGFmYTAxYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QtdSGTWJ8mQmMxb5tWAJlwDsO3ZJ3JOrLxE r1lXVWg0S/+yFZeFwrEZsVJJB+03gMUSbJeCqnKvu/CqmhPeFmwJsquVpmpFaMt8 zS50jH8N2QElrq4XA9Rhuy+WdS2br1bOF6/RpnG7vZZ//qbQpcuUkp06d4B3icjz ju5TahPSlHgCdoIlUPRWvf0um6YvmVucQHl3uAW6assDF+N662GxluEgyBG0usEE q5XPLieR7vD+Z0VDnGyLmQO9/1rpVFtiTwV8P+JKgr96DFx/XoxhcyZ6wcR+GMbp rTDpStGurUY3KHhDxm5Hue650HIdxz/lSc69vhxn42xlUpmKIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyIJU+Tpb9g5v3xIoFizIGvhF+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDQzZDE1MTItOGNlNy0z ZDAyLTlkNjUtYmMxMTNlOWFlYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrGjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUgz4Plp3sTK6eoJALI3ewVfGemOLGT9IvkQRtytOCKPmhvjygOY/Ic 16rVn5wrQIS6q4/EXknrmJ3oQ+1mweN7/0f9bBk4LaRUmGejKBlR1wLwbLz7eRJD jO8PvXclSc8KgtHkXKRdW1er3/buhGZdxcq7k7ll9MLQ7owKXq0rLvHW8EZe1l6n k1Wk2uRk4SLVLYWqDkoKjOnC+nD0uPaaqnK7a0x8r7g6gHhWcik4MNDnv2gq7kWs obFpxm8Tab7xKmYyfcxk7boujS7RtoyZg1sX/1UFQrp030S5yeHeEnrbScV6kHxo ecKH8KXdgzaRqAAivJd18BRMeXNPnTA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:35 2025 by rpki-client