$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0acf49a1-69ee-3393-9588-bc46489a26d3.roa File: 0acf49a1-69ee-3393-9588-bc46489a26d3.roa (raw, json) Hash identifier: kgQgzMVNu7DdfzkHW+mKsBDWFM8DRk8JPY5vc7agqzE= Subject key identifier: 88:F6:3C:32:A7:6F:6F:00:07:25:3D:58:AC:69:3D:9C:CC:30:C6:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23B84B78E5C8460B6F980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0acf49a1-69ee-3393-9588-bc46489a26d3.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.181.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:3b:84:b7:8e:5c:84:60:b6:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=131ef668-f837-43af-88bd-22809a7d6fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:73:c2:4b:24:c6:98:ae:b2:cf:d7:f7:15:93: 9f:33:74:c4:c5:20:8a:2a:43:36:3d:85:15:62:48: 14:6c:a3:39:24:58:e4:3a:50:de:cd:df:b6:fc:3f: fe:51:e2:56:de:0b:54:68:3f:2e:99:93:88:45:75: 78:d8:b1:9f:e9:ee:63:a6:b7:b6:aa:03:d3:c9:47: 36:a7:f0:eb:55:b4:57:04:d2:e0:84:ce:f2:38:9f: 2e:ee:0e:01:7d:02:97:cc:b2:e3:6c:15:6c:78:1a: b6:89:f4:03:d3:20:c8:1e:5b:05:25:38:3a:0c:d3: 85:31:a7:48:8a:43:9c:e4:67:a9:04:ac:ed:69:8b: 02:b5:ba:da:48:bd:e9:00:59:80:ab:86:70:30:9d: 57:b8:59:29:e3:fc:04:c1:b5:23:26:c4:fc:37:eb: 8d:76:7d:d5:cc:d7:e4:08:85:67:bf:68:8b:96:bf: a8:de:f5:0e:73:64:6e:6b:14:2d:d8:40:f8:6f:13: 8e:3f:9a:6d:be:c5:8a:84:2d:63:4b:9c:df:da:88: 56:d8:48:da:03:52:9b:87:31:eb:c0:33:8b:0e:72: 8c:33:27:03:5a:2d:ff:f7:bc:88:57:8e:20:a4:e0: 77:e1:d0:86:40:0b:cd:98:c7:19:76:b4:14:f6:27: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F6:3C:32:A7:6F:6F:00:07:25:3D:58:AC:69:3D:9C:CC:30:C6:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0acf49a1-69ee-3393-9588-bc46489a26d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c8:df:70:92:a0:ac:e5:bd:cc:93:a0:4a:ce:04:96:4f:52: a9:9a:fa:db:52:bc:99:fe:6e:66:12:dc:9b:f0:ce:9c:29:b4: 2f:33:27:f1:ab:07:fd:a5:84:ed:5a:a0:d4:90:4e:11:a4:55: 65:48:e0:ff:7d:41:46:a2:e5:ff:42:a5:4a:05:b5:01:c1:7c: 54:df:77:2f:89:1e:6e:0c:9e:fb:2e:67:a1:e4:d7:87:bd:e0: ab:eb:5e:78:94:6c:d5:3c:40:a3:7b:2c:18:f0:f7:ae:51:82: 5d:8d:bd:09:dc:f7:76:06:c3:01:0a:ae:31:45:c3:58:10:78: 94:b9:17:31:63:76:1b:5a:df:d0:a3:1e:6d:fe:48:1c:ae:4a: 49:30:27:0b:41:ae:8c:fd:61:90:c1:36:0e:a6:c6:08:30:df: f8:24:41:10:50:b7:cf:c2:6e:64:09:6b:8e:72:b9:ba:aa:7f: b5:47:5e:ed:cf:59:ca:15:bd:7c:b2:56:1b:4b:6f:24:d6:f2: 2e:1c:2c:05:98:8c:e6:49:f3:8e:6f:b5:2d:71:5b:e2:89:f5: 5d:04:aa:99:c9:c9:eb:38:2c:0e:94:f6:64:00:28:a2:27:29: af:93:b5:e8:ea:ff:6e:96:a0:96:93:e6:ff:c3:49:8d:d8:c6: 1c:06:3a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28juEt45chGC2+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTMxZWY2NjgtZjgzNy00M2FmLTg4YmQtMjI4MDlhN2Q2ZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nPCSyTGmK6yz9f3FZOfM3TExSCKKkM2PYUV YkgUbKM5JFjkOlDezd+2/D/+UeJW3gtUaD8umZOIRXV42LGf6e5jpre2qgPTyUc2 p/DrVbRXBNLghM7yOJ8u7g4BfQKXzLLjbBVseBq2ifQD0yDIHlsFJTg6DNOFMadI ikOc5GepBKztaYsCtbraSL3pAFmAq4ZwMJ1XuFkp4/wEwbUjJsT8N+uNdn3VzNfk CIVnv2iLlr+o3vUOc2RuaxQt2ED4bxOOP5ptvsWKhC1jS5zf2ohW2EjaA1KbhzHr wDOLDnKMMycDWi3/97yIV44gpOB34dCGQAvNmMcZdrQU9idC0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj2PDKnb28AByU9WKxpPZzMMMbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGFjZjQ5YTEtNjllZS0z MzkzLTk1ODgtYmM0NjQ4OWEyNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjI33CSoKzlvcyToErOBJZPUqma+ttSvJn+bmYS3JvwzpwptC8zJ/Gr B/2lhO1aoNSQThGkVWVI4P99QUai5f9CpUoFtQHBfFTfdy+JHm4MnvsuZ6Hk14e9 4KvrXniUbNU8QKN7LBjw965Rgl2NvQnc93YGwwEKrjFFw1gQeJS5FzFjdhta39Cj Hm3+SByuSkkwJwtBroz9YZDBNg6mxggw3/gkQRBQt8/CbmQJa45yubqqf7VHXu3P WcoVvXyyVhtLbyTW8i4cLAWYjOZJ845vtS1xW+KJ9V0EqpnJyes4LA6U9mQAKKIn Ka+Ttejq/26WoJaT5v/DSY3YxhwGOiA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:42 2025 by rpki-client