$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c42c35a-4038-3bf3-b3e0-1d1353f33cc8.roa File: 0c42c35a-4038-3bf3-b3e0-1d1353f33cc8.roa (raw, json) Hash identifier: g/mJOcLWbMfrsZl0OH08J2cWY3BTZaxoGOdw8Zizp6U= Subject key identifier: F7:D5:4C:92:CB:D9:89:2B:85:A7:77:7D:FB:62:9E:5C:60:04:7C:1E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F205697A9EB4C2EF990988 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c42c35a-4038-3bf3-b3e0-1d1353f33cc8.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.161.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:05:69:7a:9e:b4:c2:ef:99:09:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c83e17b8-d4fb-4de5-bed3-b54a6aa254e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2d:bf:01:10:e0:37:62:a0:d5:cf:50:a2:ff: 51:8e:a1:58:ee:ea:d5:d7:57:51:8d:a4:a3:05:38: d2:ed:c1:fc:6e:f6:23:61:92:2a:5a:e7:e5:6f:1c: 82:a4:52:f2:e4:d6:3e:e8:35:06:b4:5d:15:a3:54: 23:2e:07:03:b2:6a:29:93:5d:d9:89:89:8f:5d:38: af:3e:06:93:dc:d7:ae:55:06:a2:9b:72:e5:2a:4d: 6f:af:be:dd:c0:be:c0:c9:2d:21:02:47:3d:63:98: a1:f0:10:eb:90:53:59:db:0c:52:da:84:bb:0b:28: 93:1a:9f:c4:d1:6e:cd:1d:86:6e:94:2a:7c:83:b2: 22:dc:0f:85:aa:1b:bd:79:7d:81:99:e1:60:f4:68: 81:8e:06:fa:bb:8b:82:b8:66:84:d8:34:df:f1:30: e1:22:0c:9f:9c:0e:7b:c1:78:e7:e0:6c:8c:9b:76: 80:2e:09:07:75:1b:3e:ec:fd:3a:d5:86:dd:82:e7: e5:0e:9c:30:4a:8d:a0:7a:2f:cf:bd:4f:f7:36:1e: 06:ff:7a:5c:b6:aa:75:19:37:ef:b8:85:ba:0c:8b: c7:d4:27:b5:38:0f:1d:ff:5d:bf:54:f9:09:d2:1d: 15:d3:7b:49:8e:22:a4:f8:c6:08:1b:57:c5:1c:81: f3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D5:4C:92:CB:D9:89:2B:85:A7:77:7D:FB:62:9E:5C:60:04:7C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c42c35a-4038-3bf3-b3e0-1d1353f33cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:68:bd:af:82:4c:62:5f:0a:c2:74:cc:a3:ab:3a:f3:ba:54: e4:ff:27:ef:c3:9f:08:e8:10:89:ce:09:3d:1d:c6:b6:6d:b4: 3e:b3:60:51:a6:0a:fa:9a:3b:10:2d:36:58:6f:51:7c:e4:f7: b7:ce:bb:25:33:59:6d:1f:0a:8e:56:82:c8:3c:55:7e:b3:f1: 41:7e:ab:59:b1:ad:02:1d:06:68:81:ea:e3:4e:25:ad:93:ca: b4:8d:b2:f2:3a:86:b8:0a:e5:83:38:67:82:30:74:58:05:5f: b2:25:cf:79:c9:93:2f:de:3f:e4:b4:c4:5b:01:7e:56:0c:33: 0b:bb:51:75:07:69:ff:2b:e3:00:61:67:af:b8:2e:19:d4:80: b0:c5:fb:3a:a4:1f:bf:ae:02:d7:e1:74:ee:0c:4e:ba:0f:63: 12:ba:6a:02:fa:8d:b5:2d:c7:a7:be:8f:26:18:03:48:5f:a9: 3e:ea:e5:e8:48:ac:f8:0a:d7:b5:a0:96:bc:02:9b:8e:12:1f: 37:07:64:15:46:a4:b7:2b:fa:73:78:2a:b9:3a:d6:e8:08:7f: d3:46:84:1a:b2:74:c4:73:6e:49:5b:37:7a:a0:1b:8b:51:bb: bc:af:e7:fd:91:3a:fa:aa:f5:61:80:e3:52:c2:3b:5b:25:c7: 48:10:8b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gVpep60wu+ZCYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzgzZTE3YjgtZDRmYi00ZGU1LWJlZDMtYjU0YTZhYTI1NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny2/ARDgN2Kg1c9Qov9RjqFY7urV11dRjaSj BTjS7cH8bvYjYZIqWuflbxyCpFLy5NY+6DUGtF0Vo1QjLgcDsmopk13ZiYmPXTiv PgaT3NeuVQaim3LlKk1vr77dwL7AyS0hAkc9Y5ih8BDrkFNZ2wxS2oS7CyiTGp/E 0W7NHYZulCp8g7Ii3A+Fqhu9eX2BmeFg9GiBjgb6u4uCuGaE2DTf8TDhIgyfnA57 wXjn4GyMm3aALgkHdRs+7P061YbdguflDpwwSo2gei/PvU/3Nh4G/3pctqp1GTfv uIW6DIvH1Ce1OA8d/12/VPkJ0h0V03tJjiKk+MYIG1fFHIHzUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfVTJLL2Ykrhad3fftinlxgBHweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGM0MmMzNWEtNDAzOC0z YmYzLWIzZTAtMWQxMzUzZjMzY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNova+CTGJfCsJ0zKOrOvO6VOT/J+/DnwjoEInOCT0dxrZttD6zYFGm CvqaOxAtNlhvUXzk97fOuyUzWW0fCo5Wgsg8VX6z8UF+q1mxrQIdBmiB6uNOJa2T yrSNsvI6hrgK5YM4Z4IwdFgFX7Ilz3nJky/eP+S0xFsBflYMMwu7UXUHaf8r4wBh Z6+4LhnUgLDF+zqkH7+uAtfhdO4MTroPYxK6agL6jbUtx6e+jyYYA0hfqT7q5ehI rPgK17WglrwCm44SHzcHZBVGpLcr+nN4Krk61ugIf9NGhBqydMRzbklbN3qgG4tR u7yv5/2ROvqq9WGA41LCO1slx0gQizQ= -----END CERTIFICATE-----Generated at Thu Oct 16 01:37:19 2025 by rpki-client