$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bd8d13d-204c-3142-8fca-c4133f86b87e.roa File: 0bd8d13d-204c-3142-8fca-c4133f86b87e.roa (raw, json) Hash identifier: ma7kA/gsxvLcAMv0lUL3+VGuxY9/W4mlnBzN4IPy/08= Subject key identifier: 6F:2B:DC:AB:90:9B:B3:04:1C:2C:96:DA:58:B5:39:46:23:5F:28:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2853295693660B34BDB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bd8d13d-204c-3142-8fca-c4133f86b87e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.161.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:85:32:95:69:36:60:b3:4b:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=588e2206-4aee-4c66-be6a-690e1ed43015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a0:22:b1:69:ce:e2:05:6a:f2:02:04:f4:30: 66:82:d1:c8:09:f0:e1:10:69:f2:b6:1d:07:c3:97: 9b:52:f3:a3:4f:90:db:10:78:ac:be:c9:7c:c1:b7: a4:61:72:84:a1:40:a6:5c:c9:f3:35:10:22:29:d6: ae:0a:b3:0d:3e:ed:91:cc:11:0f:ca:12:8f:c2:ed: 09:c3:93:e1:bd:28:c1:f4:fa:f0:72:a8:31:ea:65: b0:b4:10:32:be:03:54:f8:26:59:e6:f2:97:d3:9d: b6:09:78:6d:9d:03:ef:5b:9b:4f:fa:e6:8b:50:63: fa:72:87:f3:9f:e5:ee:99:72:fd:13:12:36:c7:79: 26:db:7d:f3:ad:96:f3:91:a3:ff:d7:6d:af:42:cd: 8b:e2:7d:c9:5a:17:b2:c9:57:a3:ae:9b:f5:34:b0: ba:0f:30:5f:67:65:8a:c2:e2:8b:01:a4:81:3a:c6: da:f0:01:81:9a:75:bd:b9:e3:84:4f:db:31:f5:1a: af:17:7d:6f:44:07:96:c2:af:76:d8:99:9b:c5:8e: d4:6c:62:3f:fa:92:8a:10:fb:6d:f8:ba:00:c7:ff: c2:4e:d9:5e:08:ee:4e:7f:a6:7c:40:69:e3:d2:3f: 83:1a:53:4a:bf:a9:5e:81:8f:6e:f7:a9:23:37:10: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2B:DC:AB:90:9B:B3:04:1C:2C:96:DA:58:B5:39:46:23:5F:28:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bd8d13d-204c-3142-8fca-c4133f86b87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d9:9f:20:1d:dc:9d:13:33:7e:b3:01:68:db:23:61:88:00: 70:3c:51:69:8b:fd:73:f0:77:11:7c:29:4e:ab:d8:7b:7b:b8: 04:55:b5:a7:0d:be:21:a8:c6:c2:c2:e8:1d:5e:72:7d:06:07: 02:66:e2:4c:8c:74:30:38:4d:cc:70:af:ba:c9:ff:dd:b0:84: ea:e5:31:f2:be:19:6f:1b:96:57:2d:ee:32:b6:4a:bf:e6:62: 92:94:ee:5f:14:fd:7c:5d:7d:22:44:fe:93:32:a0:89:97:d8: ba:14:13:d0:72:2c:ad:d6:42:2d:fa:1e:0e:7f:c6:32:44:66: 54:aa:e4:d1:e9:f9:ba:a3:15:10:58:7a:d4:26:83:a8:ed:bd: 26:b1:1b:59:5d:30:5c:a5:8b:6a:92:8f:a6:00:b1:14:df:6c: 98:04:91:df:51:bf:f7:a0:0a:11:32:e6:24:62:dc:1c:b9:9b: fb:96:e5:b8:67:4d:aa:34:b4:a7:92:33:9e:f4:75:73:a5:fa: 41:20:43:82:ab:2f:41:7c:7b:b1:07:25:14:39:12:7f:0b:90: 80:44:1a:81:da:02:cc:db:02:82:3b:fa:e6:04:7f:c7:9a:82: f9:45:ad:97:4f:4e:e1:ad:79:92:85:6c:61:84:73:61:00:a5: 0b:4c:70:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oUylWk2YLNL24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTg4ZTIyMDYtNGFlZS00YzY2LWJlNmEtNjkwZTFlZDQzMDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qAisWnO4gVq8gIE9DBmgtHICfDhEGnyth0H w5ebUvOjT5DbEHisvsl8wbekYXKEoUCmXMnzNRAiKdauCrMNPu2RzBEPyhKPwu0J w5PhvSjB9Prwcqgx6mWwtBAyvgNU+CZZ5vKX0522CXhtnQPvW5tP+uaLUGP6cofz n+XumXL9ExI2x3km233zrZbzkaP/122vQs2L4n3JWheyyVejrpv1NLC6DzBfZ2WK wuKLAaSBOsba8AGBmnW9ueOET9sx9RqvF31vRAeWwq922JmbxY7UbGI/+pKKEPtt +LoAx//CTtleCO5Of6Z8QGnj0j+DGlNKv6legY9u96kjNxD7OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8r3KuQm7MEHCyW2li1OUYjXyjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGJkOGQxM2QtMjA0Yy0z MTQyLThmY2EtYzQxMzNmODZiODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrZnyAd3J0TM36zAWjbI2GIAHA8UWmL/XPwdxF8KU6r2Ht7uARVtacN viGoxsLC6B1ecn0GBwJm4kyMdDA4Tcxwr7rJ/92whOrlMfK+GW8bllct7jK2Sr/m YpKU7l8U/XxdfSJE/pMyoImX2LoUE9ByLK3WQi36Hg5/xjJEZlSq5NHp+bqjFRBY etQmg6jtvSaxG1ldMFyli2qSj6YAsRTfbJgEkd9Rv/egChEy5iRi3By5m/uW5bhn Tao0tKeSM570dXOl+kEgQ4KrL0F8e7EHJRQ5En8LkIBEGoHaAszbAoI7+uYEf8ea gvlFrZdPTuGteZKFbGGEc2EApQtMcO8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:46 2025 by rpki-client