$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21e8f22d-24ee-357a-baba-b3f5f8a7457e.roa File: 21e8f22d-24ee-357a-baba-b3f5f8a7457e.roa (raw, json) Hash identifier: R5mIW1lPCMTjfkUD7aq5sVar0Yn3Kawi4pLeq8B5qiY= Subject key identifier: 21:B4:89:06:34:73:C0:66:B3:92:D4:4A:8E:6A:06:E6:E5:D0:50:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2870329183154F5FED840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21e8f22d-24ee-357a-baba-b3f5f8a7457e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.181.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:87:03:29:18:31:54:f5:fe:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ac381cca-1eb3-401f-b083-972cfade9c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:06:fd:70:a0:08:84:0f:13:e3:c7:19:12:44: a0:55:d4:e3:41:51:0f:94:d6:a1:4b:46:fe:0b:3e: 9e:99:fa:61:d4:40:4b:ce:cd:9d:d2:0a:4e:36:8d: af:2e:a3:40:a1:be:de:66:c3:ec:1e:2f:84:2d:0f: ad:89:69:35:bc:ee:fc:6b:52:19:8f:bf:19:91:60: 57:d2:af:79:0c:3a:72:ca:f9:a3:8a:a0:e7:65:09: b5:c8:61:77:4d:38:97:f2:32:ea:be:a8:83:04:1e: ee:b6:dc:ff:94:7e:02:9d:49:ec:18:bb:f7:31:85: d9:0a:ca:d0:eb:f2:ec:9b:f1:bd:61:b3:81:9f:c9: c5:66:83:de:17:d8:76:06:72:88:45:b4:b5:36:78: 89:cf:cf:b6:cf:2d:0a:17:e3:2e:5a:fc:b4:e5:60: 70:86:82:23:2e:25:e9:b3:2a:42:f1:36:95:62:f9: 2f:0a:af:6c:68:b5:4d:0a:d8:2c:98:7a:be:53:f5: ee:c2:97:1e:63:01:07:38:e5:dd:e8:22:2d:bf:15: 35:3d:4b:d8:84:1b:29:95:2b:90:6c:9c:03:33:88: 11:b4:34:e3:91:fa:95:75:8f:a9:88:8d:a1:7d:65: dd:14:38:da:12:ab:ed:3a:b4:ee:5f:e6:43:9c:a8: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B4:89:06:34:73:C0:66:B3:92:D4:4A:8E:6A:06:E6:E5:D0:50:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21e8f22d-24ee-357a-baba-b3f5f8a7457e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:11:46:b0:4a:49:0d:11:a2:f5:92:2c:54:98:d0:1e:50:82: 0b:92:9a:f5:19:26:2d:18:7c:d5:6f:ac:7f:a6:41:09:cb:25: da:55:cb:d5:64:7b:dd:e5:7b:63:4b:71:e8:80:17:2e:e9:47: 7e:d2:f9:56:3d:39:f4:29:b5:a9:d8:5a:99:00:93:62:65:11: 62:d5:7b:f6:51:f4:20:55:fa:dc:a4:3e:09:2e:db:bf:fc:6d: 8d:47:f6:23:47:af:cd:d6:a0:0e:ff:79:a9:d5:c1:1e:ab:94: d2:e9:4a:b0:9a:36:84:0f:86:be:23:19:a8:6d:a7:2e:83:ea: 14:8b:46:db:cf:57:09:cd:a7:32:93:c0:9e:c8:11:a8:40:08: 04:95:a9:9e:46:27:dc:df:74:ef:a5:b7:b9:ae:41:f0:3d:3f: 83:11:34:36:77:98:3d:58:11:1e:de:a7:1b:a1:76:24:d2:16: db:8d:19:7b:fd:d3:71:d4:67:e1:b4:e1:d1:42:e3:d1:64:ac: 36:82:ea:24:ed:1d:2f:37:d6:b4:a0:ba:ce:5d:0f:70:f9:3e: c8:ce:ec:76:b3:2b:a5:28:bd:86:02:d6:ce:bd:12:cd:3d:d3: 85:6f:20:c5:cd:24:5e:56:6a:97:62:67:f8:47:1f:73:86:8d: ba:c5:ae:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ocDKRgxVPX+2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YWMzODFjY2EtMWViMy00MDFmLWIwODMtOTcyY2ZhZGU5YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Qb9cKAIhA8T48cZEkSgVdTjQVEPlNahS0b+ Cz6emfph1EBLzs2d0gpONo2vLqNAob7eZsPsHi+ELQ+tiWk1vO78a1IZj78ZkWBX 0q95DDpyyvmjiqDnZQm1yGF3TTiX8jLqvqiDBB7uttz/lH4CnUnsGLv3MYXZCsrQ 6/Lsm/G9YbOBn8nFZoPeF9h2BnKIRbS1NniJz8+2zy0KF+MuWvy05WBwhoIjLiXp sypC8TaVYvkvCq9saLVNCtgsmHq+U/XuwpceYwEHOOXd6CItvxU1PUvYhBsplSuQ bJwDM4gRtDTjkfqVdY+piI2hfWXdFDjaEqvtOrTuX+ZDnKitjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG0iQY0c8Bms5LUSo5qBubl0FCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFlOGYyMmQtMjRlZS0z NTdhLWJhYmEtYjNmNWY4YTc0NTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIRRrBKSQ0RovWSLFSY0B5QgguSmvUZJi0YfNVvrH+mQQnLJdpVy9Vk e93le2NLceiAFy7pR37S+VY9OfQptanYWpkAk2JlEWLVe/ZR9CBV+tykPgku27/8 bY1H9iNHr83WoA7/eanVwR6rlNLpSrCaNoQPhr4jGahtpy6D6hSLRtvPVwnNpzKT wJ7IEahACASVqZ5GJ9zfdO+lt7muQfA9P4MRNDZ3mD1YER7epxuhdiTSFtuNGXv9 03HUZ+G04dFC49FkrDaC6iTtHS831rSgus5dD3D5PsjO7HazK6UovYYC1s69Es09 04VvIMXNJF5WapdiZ/hHH3OGjbrFrnY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:36 2025 by rpki-client