$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/072a1d3f-8f82-30c0-b80c-e3830c0b0f40.roa File: 072a1d3f-8f82-30c0-b80c-e3830c0b0f40.roa (raw, json) Hash identifier: GfpueoeX2FcQ1qOBC+3RqktIJIzMLb9sZ+BkgpFltYE= Subject key identifier: B6:F4:2B:CA:89:38:18:D8:F5:D8:72:8A:3A:70:22:10:13:51:2E:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670F438EC277A4AD716380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/072a1d3f-8f82-30c0-b80c-e3830c0b0f40.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0f:43:8e:c2:77:a4:ad:71:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=51ca67a8-7c10-4674-8151-b843aa26a602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2b:d6:06:66:dd:8f:76:dd:fe:17:46:a9:50: c8:06:3e:26:8f:c3:08:d1:96:77:ed:9b:12:43:16: ca:71:de:e6:0c:a0:d7:2f:f6:d5:64:33:84:e8:35: 85:87:61:a0:ce:e6:20:1d:c5:77:f7:21:2d:b6:89: 39:60:59:40:47:d7:7d:53:3d:65:b4:d6:8d:1a:c2: b4:72:02:23:67:e0:ff:38:77:69:62:04:19:9f:d6: 5a:2d:4d:aa:c9:ec:1c:1c:2a:c3:5d:b2:a3:bf:81: 2a:d9:0e:cd:b3:9e:cc:26:bf:db:00:1e:52:0a:89: fc:a0:f6:2f:65:0a:31:c7:3e:32:11:13:9e:a0:b7: 1f:4b:41:9b:9f:22:ef:fe:2a:c6:d3:46:42:55:27: cf:07:01:dc:53:81:90:2b:62:38:4a:12:1c:f8:5d: 24:bd:4e:a6:cf:70:32:e7:1c:9d:63:28:40:d6:81: 41:c7:53:39:5f:c2:f2:e4:39:eb:1f:35:3b:37:60: 55:a1:13:1f:e3:b4:c9:aa:88:c5:f8:8e:8c:6d:ba: 3d:60:ff:5d:3e:11:1f:7d:53:2c:24:ea:72:1d:52: 8c:d3:e9:cf:78:4e:ac:53:55:41:85:c7:96:82:1e: c4:b4:65:26:c7:f6:22:e6:ad:08:df:4d:5f:a3:da: 01:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F4:2B:CA:89:38:18:D8:F5:D8:72:8A:3A:70:22:10:13:51:2E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/072a1d3f-8f82-30c0-b80c-e3830c0b0f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6a:fc:93:f3:14:c7:27:73:fa:3c:d6:bd:66:b3:e1:3c:13: ab:32:b8:ee:3a:fb:c3:b0:c8:d6:37:77:26:34:c3:d0:14:6d: ed:99:46:4c:7a:17:d9:e2:1f:14:8b:82:69:8d:a9:70:f3:77: 2f:89:b6:37:48:aa:50:9f:03:14:85:e1:4e:18:8d:c8:47:a4: ea:32:3d:49:9d:d2:1f:e2:7b:68:b1:11:65:c3:bd:97:6e:cc: 9a:e5:26:e1:46:1e:e7:1d:68:5f:bf:ea:d0:ba:7f:75:26:b1: 5b:0c:94:b6:de:2a:0a:fb:ff:5a:49:9b:e0:3c:31:b5:ab:31: 50:27:5b:b3:04:e6:4c:cb:69:f8:29:73:75:73:de:5c:d8:2c: f4:ad:a1:00:5c:e8:a8:18:c4:5c:e3:2e:f4:ce:d3:f1:7f:33: 37:dd:f8:02:88:9b:a8:c2:21:05:64:ab:0a:ec:70:57:bd:6a: 45:b4:a3:41:27:49:d6:63:af:d1:86:a5:6e:53:48:e4:62:3e: 40:18:5d:02:75:d2:a6:1b:9a:5a:35:6e:23:a0:15:38:6f:2d: b6:69:fb:d7:15:08:41:d3:a8:bb:97:3c:17:91:83:c7:1b:19: 3c:85:4f:39:3d:76:25:d0:61:8f:8b:f5:eb:14:93:f3:dd:1c: 28:d5:cc:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZw9DjsJ3pK1xY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NTFjYTY3YTgtN2MxMC00Njc0LTgxNTEtYjg0M2FhMjZhNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSvWBmbdj3bd/hdGqVDIBj4mj8MI0ZZ37ZsS QxbKcd7mDKDXL/bVZDOE6DWFh2GgzuYgHcV39yEttok5YFlAR9d9Uz1ltNaNGsK0 cgIjZ+D/OHdpYgQZn9ZaLU2qyewcHCrDXbKjv4Eq2Q7Ns57MJr/bAB5SCon8oPYv ZQoxxz4yEROeoLcfS0GbnyLv/irG00ZCVSfPBwHcU4GQK2I4ShIc+F0kvU6mz3Ay 5xydYyhA1oFBx1M5X8Ly5DnrHzU7N2BVoRMf47TJqojF+I6Mbbo9YP9dPhEffVMs JOpyHVKM0+nPeE6sU1VBhceWgh7EtGUmx/Yi5q0I301fo9oBDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb0K8qJOBjY9dhyijpwIhATUS4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDcyYTFkM2YtOGY4Mi0z MGMwLWI4MGMtZTM4MzBjMGIwZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdq/JPzFMcnc/o81r1ms+E8E6syuO46+8OwyNY3dyY0w9AUbe2ZRkx6 F9niHxSLgmmNqXDzdy+JtjdIqlCfAxSF4U4YjchHpOoyPUmd0h/ie2ixEWXDvZdu zJrlJuFGHucdaF+/6tC6f3UmsVsMlLbeKgr7/1pJm+A8MbWrMVAnW7ME5kzLafgp c3Vz3lzYLPStoQBc6KgYxFzjLvTO0/F/Mzfd+AKIm6jCIQVkqwrscFe9akW0o0En SdZjr9GGpW5TSORiPkAYXQJ10qYbmlo1biOgFThvLbZp+9cVCEHTqLuXPBeRg8cb GTyFTzk9diXQYY+L9esUk/PdHCjVzLY= -----END CERTIFICATE-----Generated at Thu Oct 16 01:54:14 2025 by rpki-client