$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23898270-eb25-35b5-97b6-3acfee4e93e7.roa File: 23898270-eb25-35b5-97b6-3acfee4e93e7.roa (raw, json) Hash identifier: aDTk0fLP9bV0xWUidEwQwAFbAy3ouXT2OgOSqECYOmA= Subject key identifier: 91:49:42:29:90:CB:97:BD:8C:07:35:50:38:C0:E5:52:E7:40:96:8B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2E5C5FE9D419D4F086013980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23898270-eb25-35b5-97b6-3acfee4e93e7.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.163.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:5f:e9:d4:19:d4:f0:86:01:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=93a6ff3f-0a35-46df-bff0-c0da6190ec89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:08:5b:e2:f1:38:e9:83:13:0b:a2:ad:fb: c5:63:2b:07:62:0d:9d:9e:dc:af:3a:e2:8c:a7:1c: 50:dc:d3:31:61:6e:3f:86:c4:98:8b:c4:56:f0:43: 6a:54:ec:8e:bc:36:7a:65:e2:2d:d6:f3:a4:50:71: e9:9c:fb:c2:9e:6e:fa:f6:03:2d:58:ac:75:bc:65: 9c:ff:7b:15:10:e6:5b:b5:3f:79:6f:a9:fe:95:6c: ca:76:c8:4b:fe:d8:b1:f5:47:6f:97:9c:19:8d:44: 1a:c6:1e:01:47:56:f9:cb:7f:c2:e2:92:31:78:cf: 65:2e:ff:72:9f:8c:a6:c4:bc:e8:ff:3a:c1:80:ae: da:d3:bb:94:80:fc:a6:b0:15:a5:21:25:a7:d4:56: d4:a2:df:c9:ad:e4:a0:02:9f:0f:e0:5b:4f:a1:99: 3b:da:ca:58:1b:f2:a4:0c:1d:b3:85:62:cf:48:0f: 14:7f:29:40:d5:38:0d:65:30:cd:79:d9:f6:de:e0: 2c:07:d1:04:f7:99:94:02:e0:ab:b1:da:d6:46:38: 63:7f:e7:2f:6f:84:85:56:09:1b:59:1c:8d:52:b8: 98:1f:bd:a1:7b:99:e2:42:a0:82:f5:2a:68:a6:19: cb:35:1e:74:86:9b:0f:6f:06:37:87:83:c7:b1:a0: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:49:42:29:90:CB:97:BD:8C:07:35:50:38:C0:E5:52:E7:40:96:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23898270-eb25-35b5-97b6-3acfee4e93e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.163.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:aa:f1:f5:18:5d:b1:59:3b:67:21:fa:37:98:03:91:14:70: b2:84:33:a3:c0:34:6e:05:df:cc:b2:34:4a:81:a7:61:39:ff: 05:59:9d:70:5d:82:97:e8:e4:ba:79:5d:86:38:61:84:f2:81: 80:3d:8f:01:25:b8:79:18:6d:9e:8c:96:8f:6d:aa:43:28:fd: 34:7c:c5:c9:e4:94:b3:8f:83:ab:dc:34:70:ef:ad:97:ca:cb: 9c:be:80:79:51:65:c3:ef:45:71:14:f2:57:e8:dd:d6:59:a8: bb:24:cb:b7:2a:c4:3a:8b:ee:37:d5:31:39:d4:7f:0d:ae:38: 26:d0:d3:a1:61:fb:10:e0:af:84:96:66:d3:67:c2:b8:20:7f: 51:f2:c4:80:c6:b9:64:0c:e1:2e:90:a0:13:8d:27:89:03:f5: 18:92:dd:dc:71:54:cf:d5:41:09:db:56:65:ad:fd:ed:02:a9: d4:2e:a6:3a:16:3a:35:33:a4:ba:9b:d6:d1:79:0c:9a:0f:3c: 9c:e4:3c:5b:14:6b:3b:b3:a1:8d:de:df:3c:ba:7a:a0:7a:0a: 3e:d2:b3:ea:45:42:8a:d2:db:c1:7a:ae:b7:5e:03:03:29:14: 3c:18:43:39:fc:7f:a7:04:d4:f3:79:b5:be:88:42:dd:aa:ad: bd:b1:27:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXF/p1BnU8IYBOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk OTNhNmZmM2YtMGEzNS00NmRmLWJmZjAtYzBkYTYxOTBlYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAIIW+LxOOmDEwuirfvFYysHYg2dntyvOuKM pxxQ3NMxYW4/hsSYi8RW8ENqVOyOvDZ6ZeIt1vOkUHHpnPvCnm769gMtWKx1vGWc /3sVEOZbtT95b6n+lWzKdshL/tix9Udvl5wZjUQaxh4BR1b5y3/C4pIxeM9lLv9y n4ymxLzo/zrBgK7a07uUgPymsBWlISWn1FbUot/JreSgAp8P4FtPoZk72spYG/Kk DB2zhWLPSA8UfylA1TgNZTDNedn23uAsB9EE95mUAuCrsdrWRjhjf+cvb4SFVgkb WRyNUriYH72he5niQqCC9SpophnLNR50hpsPbwY3h4PHsaA6JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFJQimQy5e9jAc1UDjA5VLnQJaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjM4OTgyNzAtZWIyNS0z NWI1LTk3YjYtM2FjZmVlNGU5M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGq8fUYXbFZO2ch+jeYA5EUcLKEM6PANG4F38yyNEqBp2E5/wVZnXBd gpfo5Lp5XYY4YYTygYA9jwEluHkYbZ6Mlo9tqkMo/TR8xcnklLOPg6vcNHDvrZfK y5y+gHlRZcPvRXEU8lfo3dZZqLsky7cqxDqL7jfVMTnUfw2uOCbQ06Fh+xDgr4SW ZtNnwrggf1HyxIDGuWQM4S6QoBONJ4kD9RiS3dxxVM/VQQnbVmWt/e0CqdQupjoW OjUzpLqb1tF5DJoPPJzkPFsUazuzoY3e3zy6eqB6Cj7Ss+pFQorS28F6rrdeAwMp FDwYQzn8f6cE1PN5tb6IQt2qrb2xJ18= -----END CERTIFICATE-----Generated at Thu Oct 16 01:46:57 2025 by rpki-client