$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a71cd2d-bcb8-3ecc-b44d-ba1c3e31c216.roa File: 2a71cd2d-bcb8-3ecc-b44d-ba1c3e31c216.roa (raw, json) Hash identifier: MsfE3bmpw09VJ5/HzsN3CGv+Wldd/DmNlgwK77L5JkE= Subject key identifier: C2:D8:2E:DB:55:7E:04:CE:81:93:4D:B1:55:60:A1:59:3A:0F:26:CD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F1FC07FF8E0919486C0280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a71cd2d-bcb8-3ecc-b44d-ba1c3e31c216.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.68.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f1:fc:07:ff:8e:09:19:48:6c:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=25a7bfe9-b491-4089-9c6d-14dd98508568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:08:2c:42:0c:53:b3:af:39:c8:4f:7d:0e:be: f5:da:d0:0d:58:7c:bc:80:4a:f3:b8:78:b0:50:a6: 45:49:e9:aa:72:66:b4:c5:36:26:87:9d:a5:b5:73: 1f:91:f5:97:f1:71:e3:02:97:40:0b:7c:ca:13:dc: 94:31:35:9e:06:48:8d:03:5a:04:a2:41:37:a0:4c: af:69:15:a2:b3:9c:d6:e3:8a:37:4a:b2:23:02:a9: e5:e0:97:b1:21:1b:71:f4:51:98:ee:5c:3b:24:38: 18:3d:27:f9:46:c1:c2:48:be:80:3f:01:33:25:8f: a5:90:57:b6:a9:c6:24:4d:e4:8f:24:44:60:4c:9d: 1e:61:4d:9e:74:87:c6:c4:dc:82:0a:d6:c7:0f:54: f4:38:1a:be:59:bb:0c:b1:37:85:7a:52:11:84:da: dc:55:75:65:df:0a:4f:45:d4:e7:15:8d:0d:61:84: 33:83:ed:34:0b:00:7c:50:af:90:80:15:92:42:99: 5a:53:d0:9f:12:57:58:80:09:f4:2e:fb:29:6b:5b: 63:12:1b:a3:d9:4a:c4:e0:94:4b:4a:c5:7e:d3:e7: 98:5a:7e:b0:66:35:1d:2c:fc:e5:b8:45:51:8e:45: 8a:0f:73:3a:08:a7:06:fd:48:cc:e1:17:e7:22:6b: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D8:2E:DB:55:7E:04:CE:81:93:4D:B1:55:60:A1:59:3A:0F:26:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a71cd2d-bcb8-3ecc-b44d-ba1c3e31c216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2a:15:10:08:93:b6:e3:f9:a9:96:41:c4:e7:57:63:16:24: ad:53:24:12:8b:60:7f:05:e7:38:1a:57:2a:3a:55:fb:cd:d0: 0d:dd:61:43:05:fc:9e:79:92:89:dd:39:56:b5:bd:53:ee:99: a5:f2:0a:e0:fa:06:bc:ec:67:77:a0:7d:ef:e5:1c:4e:d2:be: 5b:21:02:f5:09:82:73:32:8b:d8:33:91:f7:99:88:8d:59:e5: aa:65:e1:7c:4e:f5:88:31:c6:99:b8:a2:ad:84:6d:80:8e:aa: a6:38:8f:56:41:eb:65:84:f4:46:8c:a1:ad:9a:4f:49:c0:f5: fe:21:8b:65:54:c9:10:64:df:ce:9b:f4:0d:95:62:35:75:cf: 3d:e1:b0:f0:d1:af:da:4d:8b:b9:d7:1e:67:9b:52:8a:e5:36: 09:e9:e0:e7:05:97:a9:a8:5f:16:4a:e0:53:f1:56:3c:32:09: c7:27:7e:08:4a:ac:ea:bd:31:b3:2c:77:6e:b9:96:e1:b7:77: b4:a8:eb:d1:ad:79:38:b1:6e:3b:c4:7d:0e:30:c7:7a:f3:e1: 6a:c8:1d:cf:42:1a:24:30:f0:09:09:e7:ba:99:b0:b5:09:0b: a0:34:19:bd:09:4c:17:9f:15:2a:d8:0a:e9:5a:a1:29:62:bf: e0:b6:60:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28fwH/44JGUhsAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjVhN2JmZTktYjQ5MS00MDg5LTljNmQtMTRkZDk4NTA4NTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQgsQgxTs685yE99Dr712tANWHy8gErzuHiw UKZFSemqcma0xTYmh52ltXMfkfWX8XHjApdAC3zKE9yUMTWeBkiNA1oEokE3oEyv aRWis5zW44o3SrIjAqnl4JexIRtx9FGY7lw7JDgYPSf5RsHCSL6APwEzJY+lkFe2 qcYkTeSPJERgTJ0eYU2edIfGxNyCCtbHD1T0OBq+WbsMsTeFelIRhNrcVXVl3wpP RdTnFY0NYYQzg+00CwB8UK+QgBWSQplaU9CfEldYgAn0Lvspa1tjEhuj2UrE4JRL SsV+0+eYWn6wZjUdLPzluEVRjkWKD3M6CKcG/UjM4RfnImvIzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLYLttVfgTOgZNNsVVgoVk6DybNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmE3MWNkMmQtYmNiOC0z ZWNjLWI0NGQtYmExYzNlMzFjMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkRGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAqFRAIk7bj+amWQcTnV2MWJK1TJBKLYH8F5zgaVyo6VfvN0A3dYUMF /J55kondOVa1vVPumaXyCuD6BrzsZ3egfe/lHE7SvlshAvUJgnMyi9gzkfeZiI1Z 5apl4XxO9Ygxxpm4oq2EbYCOqqY4j1ZB62WE9EaMoa2aT0nA9f4hi2VUyRBk386b 9A2VYjV1zz3hsPDRr9pNi7nXHmebUorlNgnp4OcFl6moXxZK4FPxVjwyCccnfghK rOq9MbMsd265luG3d7So69GteTixbjvEfQ4wx3rz4WrIHc9CGiQw8AkJ57qZsLUJ C6A0Gb0JTBefFSrYCulaoSliv+C2YFE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:02 2025 by rpki-client