$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa97c3d-3754-3e18-ad66-0856ce43a922.roa File: 2aa97c3d-3754-3e18-ad66-0856ce43a922.roa (raw, json) Hash identifier: Objc0KWTFphytf19JvKMvh8fvwLX2B0ueQE3T1xEkTo= Subject key identifier: C5:FD:F8:81:1C:E8:E7:0C:72:D5:51:31:B9:46:9C:16:D5:87:FD:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671AD6A99DC6AC02583000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa97c3d-3754-3e18-ad66-0856ce43a922.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1a:d6:a9:9d:c6:ac:02:58:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=8797d3e3-c82d-4476-b8b5-34e402c63b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:89:a8:cb:d0:27:15:09:0d:96:e3:74:eb: ab:ab:b5:10:49:67:67:de:67:c6:07:ec:e0:81:36: fe:6f:12:09:0e:c8:fc:a7:d6:14:bb:7d:b5:9c:e3: 88:f9:32:4d:86:9d:96:f3:6b:03:34:36:e1:70:24: 08:cf:52:4d:bb:5d:e0:0a:1b:1f:81:80:51:ce:4b: f7:e7:75:0e:f7:3b:bb:08:82:1b:c1:e1:aa:8d:9e: 9a:89:14:e0:b3:77:f9:e0:e8:8a:47:2d:11:d4:a7: 88:45:b9:db:d0:c0:80:34:01:03:9f:ff:98:22:74: 2d:06:a9:04:5e:2a:86:8c:ad:a0:04:4c:5e:2e:3a: ae:d6:e9:b1:65:83:fb:af:c8:fd:ea:ba:4e:87:95: 30:d7:92:0c:9e:24:b2:a4:e0:64:07:70:6c:a5:e1: a8:58:d3:95:a4:67:38:0a:fd:9a:0e:ca:cd:8f:d6: 59:df:a1:96:c3:f7:7d:63:68:62:b9:b6:1d:29:63: d6:67:47:08:4a:b0:a8:c9:b5:e6:c4:8a:ea:ce:aa: 4a:d9:54:3c:20:a0:bb:02:33:b0:1a:a0:4b:ca:48: 50:e3:dc:ae:75:76:e1:48:2d:59:c7:19:dd:95:c5: 5c:12:1a:55:44:e7:a1:e6:e5:1d:1a:8e:89:c7:d2: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FD:F8:81:1C:E8:E7:0C:72:D5:51:31:B9:46:9C:16:D5:87:FD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa97c3d-3754-3e18-ad66-0856ce43a922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:32:45:9f:07:cd:2e:cd:6c:72:fc:ca:1a:eb:ea:c6:75:7d: 0f:4a:c9:f8:7f:ec:fc:50:63:fd:64:b3:6a:4e:a7:6f:54:b8: 3a:fb:89:0c:9c:0e:a4:97:19:4a:6c:35:56:f5:29:f9:2d:6e: 0d:c9:39:13:fd:db:81:f2:8c:f3:e5:63:87:6a:1a:6f:74:62: 47:fa:b0:67:10:6f:33:a9:da:38:f8:0f:5e:e4:dd:1f:0a:34: 24:cd:e6:5f:c3:a6:da:e7:2e:f6:77:ff:8d:90:ef:3a:98:30: 91:d4:37:ca:16:95:b4:51:e2:f6:4c:43:eb:c7:e8:52:5b:0e: 6c:8a:df:ee:1f:db:01:92:88:ea:fd:08:2a:4f:be:c5:7f:89: 87:eb:4f:a8:30:91:12:92:12:90:19:db:bd:6c:df:c2:6a:f7: 1f:be:e9:e6:f7:db:d0:e3:2a:11:4c:ea:bc:56:dc:ee:f0:f6: 42:8a:7c:66:00:84:03:cb:af:a6:21:02:cc:13:a5:96:17:67: ed:40:9e:6e:90:c0:f3:db:f5:7c:a9:29:84:3c:ee:c6:e4:d3: 56:c8:35:43:5a:0a:fa:24:1e:15:aa:fa:fc:7b:d8:e1:78:9b: 96:5d:38:97:7d:b0:33:f1:58:2f:34:21:04:d5:04:82:a5:da: 82:7a:72:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxrWqZ3GrAJYMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ODc5N2QzZTMtYzgyZC00NDc2LWI4YjUtMzRlNDAyYzYzYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF6JqMvQJxUJDZbjdOurq7UQSWdn3mfGB+zg gTb+bxIJDsj8p9YUu321nOOI+TJNhp2W82sDNDbhcCQIz1JNu13gChsfgYBRzkv3 53UO9zu7CIIbweGqjZ6aiRTgs3f54OiKRy0R1KeIRbnb0MCANAEDn/+YInQtBqkE XiqGjK2gBExeLjqu1umxZYP7r8j96rpOh5Uw15IMniSypOBkB3BspeGoWNOVpGc4 Cv2aDsrNj9ZZ36GWw/d9Y2hiubYdKWPWZ0cISrCoybXmxIrqzqpK2VQ8IKC7AjOw GqBLykhQ49yudXbhSC1ZxxndlcVcEhpVROeh5uUdGo6Jx9LaVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX9+IEc6OcMctVRMblGnBbVh/1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFhOTdjM2QtMzc1NC0z ZTE4LWFkNjYtMDg1NmNlNDNhOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkyRZ8HzS7NbHL8yhrr6sZ1fQ9Kyfh/7PxQY/1ks2pOp29UuDr7iQyc DqSXGUpsNVb1Kfktbg3JORP924HyjPPlY4dqGm90Ykf6sGcQbzOp2jj4D17k3R8K NCTN5l/DptrnLvZ3/42Q7zqYMJHUN8oWlbRR4vZMQ+vH6FJbDmyK3+4f2wGSiOr9 CCpPvsV/iYfrT6gwkRKSEpAZ271s38Jq9x++6eb329DjKhFM6rxW3O7w9kKKfGYA hAPLr6YhAswTpZYXZ+1Anm6QwPPb9XypKYQ87sbk01bINUNaCvokHhWq+vx72OF4 m5ZdOJd9sDPxWC80IQTVBIKl2oJ6cgA= -----END CERTIFICATE-----Generated at Thu Oct 16 04:56:41 2025 by rpki-client