$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d4e380e-fac1-329e-8e5c-6664e82556e2.roa File: 1d4e380e-fac1-329e-8e5c-6664e82556e2.roa (raw, json) Hash identifier: 2cQ1LTSttddNVZb9SWfSNDEryUpWqnd/3i9sfLu5yZs= Subject key identifier: 63:0B:9F:B4:51:E0:50:B6:DD:17:31:CE:1D:B5:A1:EF:11:10:82:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206703B2139822A1CA253500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d4e380e-fac1-329e-8e5c-6664e82556e2.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:03:b2:13:98:22:a1:ca:25:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=97f2498e-05c7-4ed7-8417-7f76ab521918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:29:14:87:9b:d4:d7:0c:53:e8:7a:37:2b:8b: 80:cc:a5:5a:df:45:4b:e9:55:88:90:44:67:85:a3: 06:61:94:3e:f6:9c:7c:f0:f5:77:27:07:5f:16:c2: 6a:75:ba:da:a5:b5:29:9e:bc:7c:a7:e4:4e:16:f3: b1:d8:4c:c1:35:ab:5d:63:a2:5b:f6:65:b0:94:04: ad:b7:03:d8:69:0a:9a:74:44:e7:64:a2:a6:3d:f8: 6f:e4:fe:21:4d:a8:2b:f9:94:3a:d0:a7:de:ce:64: 17:fd:8e:14:d2:5a:6b:79:d7:1a:34:76:c7:19:f1: 42:ef:1d:67:9b:6f:5e:17:5b:d7:87:0c:7e:ce:50: bd:e6:d3:8e:77:4f:91:2a:99:83:d4:5e:08:0c:8a: 69:f3:22:e7:c2:4f:f7:61:5a:18:44:e0:07:f9:11: 01:c0:75:07:26:c2:8e:ec:f5:5c:d7:d0:1e:ad:cd: 45:29:f3:62:80:6d:dc:37:02:d8:7b:e6:a8:cf:b4: 4f:0e:85:bb:35:ba:ea:28:87:2a:ec:5d:73:3e:b2: 00:31:03:c0:3b:b4:d4:c6:30:90:42:3c:91:dc:da: 43:7a:eb:16:b2:ce:52:2e:c9:80:30:d2:76:61:c6: 3a:2c:3f:68:73:df:1a:21:b5:4f:98:05:ea:41:80: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0B:9F:B4:51:E0:50:B6:DD:17:31:CE:1D:B5:A1:EF:11:10:82:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d4e380e-fac1-329e-8e5c-6664e82556e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:96:6c:26:13:56:96:10:c8:60:21:3a:9d:f2:36:db:e9:c0: 38:d4:e2:f3:5b:5e:a8:9d:48:0f:65:53:39:9c:90:ed:eb:96: 1f:35:22:81:96:83:32:03:14:93:ea:84:10:7c:38:47:73:68: f1:83:0f:5f:0b:87:0e:3d:57:dd:3e:88:0f:27:49:82:61:87: e7:ad:2e:50:1e:43:c0:f5:ae:4f:cd:ba:1b:d4:33:7a:f6:63: 63:0d:3d:12:dc:69:a5:85:77:0e:74:d8:03:ce:93:f5:e4:e4: 1a:db:9c:0c:63:f8:f1:78:37:af:2b:91:4d:be:cb:5a:88:8a: cf:fe:f3:12:bd:e1:1b:76:7c:b1:3e:30:cf:5e:b3:d5:c9:eb: 54:91:a5:38:76:a6:45:45:2d:16:82:7a:4f:ea:d4:04:fb:50: 4f:26:f4:92:5c:50:56:9f:42:67:ec:64:c2:2f:4f:78:dc:d0: 70:d8:33:f8:1b:d4:74:59:8c:1a:56:48:51:76:07:bc:e0:0c: a0:43:78:c6:9c:e0:8a:82:31:45:81:48:b7:df:a7:c8:9e:29: 10:4c:5a:f7:4f:c6:79:74:20:a5:5f:65:5e:7a:75:cd:38:33: 5d:8b:a0:2d:11:bb:fc:8f:a9:1b:65:32:2f:0c:18:d4:8f:4a: 21:20:18:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwOyE5giocolNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OTdmMjQ5OGUtMDVjNy00ZWQ3LTg0MTctN2Y3NmFiNTIxOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSkUh5vU1wxT6Ho3K4uAzKVa30VL6VWIkERn haMGYZQ+9px88PV3JwdfFsJqdbrapbUpnrx8p+ROFvOx2EzBNatdY6Jb9mWwlASt twPYaQqadETnZKKmPfhv5P4hTagr+ZQ60KfezmQX/Y4U0lpredcaNHbHGfFC7x1n m29eF1vXhwx+zlC95tOOd0+RKpmD1F4IDIpp8yLnwk/3YVoYROAH+REBwHUHJsKO 7PVc19Aerc1FKfNigG3cNwLYe+aoz7RPDoW7NbrqKIcq7F1zPrIAMQPAO7TUxjCQ QjyR3NpDeusWss5SLsmAMNJ2YcY6LD9oc98aIbVPmAXqQYC5IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMLn7RR4FC23Rcxzh21oe8REILaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQ0ZTM4MGUtZmFjMS0z MjllLThlNWMtNjY2NGU4MjU1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCWbCYTVpYQyGAhOp3yNtvpwDjU4vNbXqidSA9lUzmckO3rlh81IoGW gzIDFJPqhBB8OEdzaPGDD18Lhw49V90+iA8nSYJhh+etLlAeQ8D1rk/NuhvUM3r2 Y2MNPRLcaaWFdw502APOk/Xk5BrbnAxj+PF4N68rkU2+y1qIis/+8xK94Rt2fLE+ MM9es9XJ61SRpTh2pkVFLRaCek/q1AT7UE8m9JJcUFafQmfsZMIvT3jc0HDYM/gb 1HRZjBpWSFF2B7zgDKBDeMac4IqCMUWBSLffp8ieKRBMWvdPxnl0IKVfZV56dc04 M12LoC0Ru/yPqRtlMi8MGNSPSiEgGNg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:12 2025 by rpki-client