$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07afebdd-8071-35f2-97f4-fdb820ba1b9d.roa File: 07afebdd-8071-35f2-97f4-fdb820ba1b9d.roa (raw, json) Hash identifier: VIZH5keLMbMLE+k8wOtGYwPlnblZNkPy3FnsK7X3CTU= Subject key identifier: EE:0F:50:B2:8A:46:30:C8:43:51:C7:41:96:2D:95:73:58:50:C6:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2067084D1A22799829923ED0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07afebdd-8071-35f2-97f4-fdb820ba1b9d.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:08:4d:1a:22:79:98:29:92:3e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=c93dd855-b243-40be-a148-c299eeba1bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:23:09:ac:ac:ba:1e:76:d1:80:a4:c5:41: 45:79:7a:5b:bd:15:bb:7b:e5:ad:37:b8:41:e8:27: 12:d4:93:cb:04:a2:32:33:1d:d7:3b:94:1e:a1:97: 77:77:f1:89:79:34:bc:4b:42:f8:55:6b:7c:3c:37: 17:70:a2:0c:63:62:a3:95:2f:85:f3:d7:22:6b:31: d7:96:9e:0d:83:c4:da:4e:da:93:88:21:60:9b:a7: 78:6c:3f:19:93:e7:96:b1:87:60:35:66:6e:9d:f9: a8:ea:a3:53:e2:75:c2:e0:fa:ce:d7:6f:58:17:65: 05:94:54:1b:a6:17:b4:c7:34:ea:46:00:17:e0:fd: 0c:b1:ae:ff:d5:e3:77:ba:0e:a5:69:fd:13:c8:85: 47:9d:2d:57:5c:b8:94:ad:8b:c3:fc:48:39:bc:c6: c8:70:18:aa:70:39:54:c6:5b:6c:a2:90:09:aa:3c: d8:e4:bd:ca:1f:26:6a:4c:25:82:00:2b:c5:93:9c: bc:f6:e6:f7:55:70:fe:04:54:3c:b3:cc:cb:30:1e: 47:99:73:d1:20:c8:f3:d7:57:14:77:68:6f:b8:10: d2:c3:12:6a:89:01:d0:17:f1:83:73:a0:09:81:85: b4:cf:84:26:38:e8:4a:32:d7:0a:cb:0d:28:09:87: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0F:50:B2:8A:46:30:C8:43:51:C7:41:96:2D:95:73:58:50:C6:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07afebdd-8071-35f2-97f4-fdb820ba1b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4d:f1:3c:8d:42:5f:5c:99:d1:93:e8:f2:01:db:3f:4e:78: a6:e3:47:1a:64:41:46:e4:f3:db:89:ae:dd:4e:25:f1:dc:07: d0:a1:ae:75:ce:0f:11:07:cd:86:5d:5b:b9:da:c4:15:bd:aa: 87:0e:92:fb:f2:ef:b7:2b:bb:bb:1b:6c:2a:d5:24:06:9e:ac: 6b:a0:58:9e:5c:6c:64:55:33:87:99:7d:a1:92:28:3c:2a:73: ee:27:6d:5d:da:f7:87:40:1a:0e:8b:e3:d1:55:42:62:53:4d: 19:c4:7b:61:9e:b5:e0:19:5e:c4:65:b9:13:04:88:1d:af:fb: 82:a6:16:49:f7:b1:e0:d7:1e:cc:03:07:6a:0f:cb:27:85:9d: 64:f8:52:8a:85:85:2a:7a:54:9e:bc:9c:41:fe:5e:89:69:88: dd:0c:59:3e:8d:20:d8:70:57:0b:7b:21:44:f0:50:17:c3:4d: 70:62:90:13:e8:b3:64:a8:24:58:70:3e:43:dd:9f:fd:01:cf: 8b:83:c4:7b:07:48:e8:17:5a:cd:41:48:2b:48:7f:9f:4d:5d: 22:ee:23:ee:9a:6f:e6:71:84:26:d6:e8:10:81:01:8f:dc:fc: 38:23:6e:dc:0f:2e:71:a3:66:41:10:73:92:cd:32:af:9f:d1: a5:c8:81:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwhNGiJ5mCmSPtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YzkzZGQ4NTUtYjI0My00MGJlLWExNDgtYzI5OWVlYmExYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqQjCaysuh520YCkxUFFeXpbvRW7e+WtN7hB 6CcS1JPLBKIyMx3XO5QeoZd3d/GJeTS8S0L4VWt8PDcXcKIMY2KjlS+F89ciazHX lp4Ng8TaTtqTiCFgm6d4bD8Zk+eWsYdgNWZunfmo6qNT4nXC4PrO129YF2UFlFQb phe0xzTqRgAX4P0Msa7/1eN3ug6laf0TyIVHnS1XXLiUrYvD/Eg5vMbIcBiqcDlU xltsopAJqjzY5L3KHyZqTCWCACvFk5y89ub3VXD+BFQ8s8zLMB5HmXPRIMjz11cU d2hvuBDSwxJqiQHQF/GDc6AJgYW0z4QmOOhKMtcKyw0oCYeJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4PULKKRjDIQ1HHQZYtlXNYUMbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDdhZmViZGQtODA3MS0z NWYyLTk3ZjQtZmRiODIwYmExYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBN8TyNQl9cmdGT6PIB2z9OeKbjRxpkQUbk89uJrt1OJfHcB9ChrnXO DxEHzYZdW7naxBW9qocOkvvy77cru7sbbCrVJAaerGugWJ5cbGRVM4eZfaGSKDwq c+4nbV3a94dAGg6L49FVQmJTTRnEe2GeteAZXsRluRMEiB2v+4KmFkn3seDXHswD B2oPyyeFnWT4UoqFhSp6VJ68nEH+XolpiN0MWT6NINhwVwt7IUTwUBfDTXBikBPo s2SoJFhwPkPdn/0Bz4uDxHsHSOgXWs1BSCtIf59NXSLuI+6ab+ZxhCbW6BCBAY/c /DgjbtwPLnGjZkEQc5LNMq+f0aXIgVE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:39 2025 by rpki-client