$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11a9db30-e4d1-3b05-b4d2-ee06e0b7ba34.roa File: 11a9db30-e4d1-3b05-b4d2-ee06e0b7ba34.roa (raw, json) Hash identifier: EXR/xUgDoTqPKH7b7CN2Ggw9Z3PI1ynYMv4LGGmcQN8= Subject key identifier: 09:8C:36:C3:32:93:D0:14:8C:9E:51:16:28:EB:86:07:EB:A5:7B:83 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206707F0F259999D3208AB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11a9db30-e4d1-3b05-b4d2-ee06e0b7ba34.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:07:f0:f2:59:99:9d:32:08:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=ff27112e-1e2a-4779-958d-693842014551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:3a:8a:c0:e7:41:54:a7:66:44:1a:64:1e: b6:df:14:b3:03:b0:ed:72:bf:44:9e:ae:41:33:b3: b4:9a:49:49:fb:c6:a8:3c:33:9b:e0:b2:d2:c2:e1: b3:04:3f:c2:2b:f0:26:41:8d:3c:a2:dc:c0:5a:0e: d1:59:02:89:9c:01:17:25:bb:50:d6:99:6b:f3:39: 03:ba:f9:de:a5:6d:e7:7f:cf:f8:9e:69:de:33:21: 1c:ea:da:dc:71:ac:30:2b:d4:4e:f6:56:fc:8e:2f: da:0f:1f:fb:4c:cd:b9:04:9e:6c:ae:15:17:7a:ea: 49:03:fe:05:4a:a9:0e:c4:cd:51:05:a7:a8:75:f7: b3:7b:7e:20:a7:ab:d1:6c:4c:7f:3a:db:3d:16:de: 80:c6:02:e0:41:8c:60:00:ed:2a:85:3d:d0:26:40: aa:76:50:e9:3c:cb:a7:06:9c:dd:86:5c:ec:ea:d1: fb:b9:2b:be:53:7a:b3:ec:93:b4:b9:cc:9f:61:6f: f4:90:bc:20:c9:fe:db:b1:26:1f:b0:6b:a9:6a:4d: de:5b:1b:6d:5c:7c:a2:e5:11:26:fb:05:83:97:fb: fd:a9:93:1b:f8:37:55:07:b6:f2:54:ba:73:38:b6: 56:9b:46:6c:b8:75:34:5e:f4:6d:e6:0c:9f:f6:4b: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8C:36:C3:32:93:D0:14:8C:9E:51:16:28:EB:86:07:EB:A5:7B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11a9db30-e4d1-3b05-b4d2-ee06e0b7ba34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f2:3e:22:36:b5:d7:7c:90:f2:b0:b0:8f:33:1e:1e:28:9d: 23:87:41:9a:44:5b:af:f4:d6:0a:b0:b4:89:f6:52:3b:4c:0b: 11:6d:e2:04:8a:0f:29:36:c6:8a:03:c1:79:ae:35:e5:44:88: f0:20:53:0b:73:da:12:8c:11:40:3f:78:58:31:c6:b1:bb:9d: 1b:11:37:90:03:68:b6:d2:aa:c4:17:6a:31:72:10:5c:ed:62: 0f:5d:4b:ae:a1:5a:3b:a5:2a:b3:40:c8:a5:a0:b5:3b:a3:51: 1e:da:58:a1:23:6e:e3:2b:4c:9b:d5:d5:24:28:4f:cd:52:40: c8:ff:ae:33:12:2e:fe:e9:51:ce:be:98:c2:ae:f3:c7:c6:93: f4:7e:a6:72:ab:ed:a2:45:21:4b:d8:fd:22:4c:54:a0:ca:62: 49:d6:0f:12:d5:f6:9b:7b:b0:9b:f3:11:59:9b:c0:60:f9:d9: 35:09:fd:0a:b0:0d:89:3b:a4:38:6c:97:26:ac:5a:fd:66:2d: 3d:a3:a1:32:c1:8b:97:5e:09:45:bd:e9:01:96:fc:4b:ac:88: 60:15:85:8b:32:48:5a:83:9b:69:c9:0d:a9:eb:1f:d0:4d:05: 5a:06:4f:77:46:bf:09:17:f0:94:26:49:d9:5e:c3:df:7b:92: 11:7e:8e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwfw8lmZnTIIqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmYyNzExMmUtMWUyYS00Nzc5LTk1OGQtNjkzODQyMDE0NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuww6isDnQVSnZkQaZB623xSzA7Dtcr9Enq5B M7O0mklJ+8aoPDOb4LLSwuGzBD/CK/AmQY08otzAWg7RWQKJnAEXJbtQ1plr8zkD uvnepW3nf8/4nmneMyEc6trccawwK9RO9lb8ji/aDx/7TM25BJ5srhUXeupJA/4F SqkOxM1RBaeodfeze34gp6vRbEx/Ots9Ft6AxgLgQYxgAO0qhT3QJkCqdlDpPMun Bpzdhlzs6tH7uSu+U3qz7JO0ucyfYW/0kLwgyf7bsSYfsGupak3eWxttXHyi5REm +wWDl/v9qZMb+DdVB7byVLpzOLZWm0ZsuHU0XvRt5gyf9ks1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmMNsMyk9AUjJ5RFijrhgfrpXuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTFhOWRiMzAtZTRkMS0z YjA1LWI0ZDItZWUwNmUwYjdiYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDyPiI2tdd8kPKwsI8zHh4onSOHQZpEW6/01gqwtIn2UjtMCxFt4gSK Dyk2xooDwXmuNeVEiPAgUwtz2hKMEUA/eFgxxrG7nRsRN5ADaLbSqsQXajFyEFzt Yg9dS66hWjulKrNAyKWgtTujUR7aWKEjbuMrTJvV1SQoT81SQMj/rjMSLv7pUc6+ mMKu88fGk/R+pnKr7aJFIUvY/SJMVKDKYknWDxLV9pt7sJvzEVmbwGD52TUJ/Qqw DYk7pDhslyasWv1mLT2joTLBi5deCUW96QGW/EusiGAVhYsySFqDm2nJDanrH9BN BVoGT3dGvwkX8JQmSdlew997khF+jnk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:33:09 2025 by rpki-client