$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c4d409a-a85f-3e0b-90aa-351d922d588d.roa File: 2c4d409a-a85f-3e0b-90aa-351d922d588d.roa (raw, json) Hash identifier: bK+laCnXtN7jkLOTzjVu55YgcPRYY82qgKI81CxmGyk= Subject key identifier: A0:A8:5E:0F:16:6C:7A:35:A9:6B:E7:3B:8B:EB:20:C8:04:31:24:7E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28DFE7A995EBCD30CE6C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c4d409a-a85f-3e0b-90aa-351d922d588d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.160.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8d:fe:7a:99:5e:bc:d3:0c:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=18ce62d9-159a-4775-b436-233eac763a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:bb:ca:39:52:17:40:d7:ca:aa:db:f3:53: 6a:52:e8:f2:68:87:04:b8:d9:33:71:38:1c:a3:a7: 98:1b:8e:7e:59:f0:45:9f:43:15:bd:ad:c4:87:30: 5e:d1:e7:be:08:3b:66:18:1c:ed:f2:26:5d:6b:90: 65:94:66:9e:d8:d4:b5:90:ff:85:fe:76:a1:b6:79: 95:68:53:db:35:70:fc:c1:c3:39:b5:18:16:4f:1c: 24:2c:69:16:ca:e9:15:1f:9f:20:a0:e8:38:b7:6b: 70:00:4c:bc:e2:c4:8b:43:dc:e7:36:ca:e6:ef:16: c0:ec:4e:5a:25:69:9e:af:06:3d:f9:75:79:5c:e9: ff:ea:3a:05:5a:68:f1:91:1b:d5:58:d1:83:e5:cf: 2f:9b:53:dd:1a:cc:9e:04:e3:e5:37:ad:fc:5a:99: 96:75:19:ee:b7:3f:2b:a6:57:79:26:c1:05:42:f7: 1c:26:ad:8a:b7:37:82:de:37:f3:1e:55:e0:52:91: 0e:04:83:dd:d1:0d:a4:a8:78:21:31:bc:e8:e5:10: 73:bf:6f:59:cc:da:c8:b0:a6:b7:1f:09:97:23:cf: 2d:9d:59:b7:b0:c7:c0:bd:31:23:c3:ba:b7:39:62: a3:6d:42:c5:2f:33:d9:98:6b:f2:86:ba:63:ea:77: 44:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A8:5E:0F:16:6C:7A:35:A9:6B:E7:3B:8B:EB:20:C8:04:31:24:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c4d409a-a85f-3e0b-90aa-351d922d588d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:80:03:d1:3a:64:ab:de:0b:f1:7c:ef:55:76:ff:16:c2:4a: 34:b4:a1:d7:5c:d9:36:4e:93:d4:31:5e:67:2b:de:59:3d:c2: 97:06:48:db:6c:ba:1f:65:c2:95:63:db:cc:15:56:2e:74:15: f0:b9:c2:b1:a9:34:54:79:98:8b:9c:6e:4b:c6:04:47:f9:f0: 75:a4:2b:8c:26:5f:7d:f1:bf:8e:b4:0f:ea:93:25:05:78:68: 91:96:36:8e:53:73:4b:20:26:1e:d5:14:e3:9c:20:b7:ba:81: b9:95:58:4c:12:c1:37:38:1f:92:83:9b:d2:9e:55:c1:8b:ba: 9b:b5:45:bc:ac:3f:93:92:82:8a:0c:65:70:b6:81:6c:fa:c1: 40:47:69:26:c6:32:2c:c4:57:31:10:ea:af:33:19:dd:dc:30: 0e:f7:f1:3a:fb:9f:21:40:47:53:c2:38:e3:a0:1e:33:d2:d6: 86:fb:16:5f:fa:c1:c5:79:46:2b:74:e4:c0:4b:a4:72:00:aa: f8:ec:a6:6b:48:08:f5:74:66:f2:57:a5:74:25:6e:ea:3a:21: 67:62:5a:57:bc:56:20:5c:2b:14:bd:d6:ab:07:ff:c3:8d:5c: dd:34:39:6e:6a:ff:c7:fe:11:2c:40:76:e7:bb:d9:f1:2d:2e: 79:e4:2c:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28o3+eplevNMM5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MThjZTYyZDktMTU5YS00Nzc1LWI0MzYtMjMzZWFjNzYzYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ta7yjlSF0DXyqrb81NqUujyaIcEuNkzcTgc o6eYG45+WfBFn0MVva3EhzBe0ee+CDtmGBzt8iZda5BllGae2NS1kP+F/nahtnmV aFPbNXD8wcM5tRgWTxwkLGkWyukVH58goOg4t2twAEy84sSLQ9znNsrm7xbA7E5a JWmerwY9+XV5XOn/6joFWmjxkRvVWNGD5c8vm1PdGsyeBOPlN638WpmWdRnutz8r pld5JsEFQvccJq2KtzeC3jfzHlXgUpEOBIPd0Q2kqHghMbzo5RBzv29ZzNrIsKa3 HwmXI88tnVm3sMfAvTEjw7q3OWKjbULFLzPZmGvyhrpj6ndELQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCoXg8WbHo1qWvnO4vrIMgEMSR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmM0ZDQwOWEtYTg1Zi0z ZTBiLTkwYWEtMzUxZDkyMmQ1ODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGAA9E6ZKveC/F871V2/xbCSjS0oddc2TZOk9QxXmcr3lk9wpcGSNts uh9lwpVj28wVVi50FfC5wrGpNFR5mIucbkvGBEf58HWkK4wmX33xv460D+qTJQV4 aJGWNo5Tc0sgJh7VFOOcILe6gbmVWEwSwTc4H5KDm9KeVcGLupu1RbysP5OSgooM ZXC2gWz6wUBHaSbGMizEVzEQ6q8zGd3cMA738Tr7nyFAR1PCOOOgHjPS1ob7Fl/6 wcV5Rit05MBLpHIAqvjspmtICPV0ZvJXpXQlbuo6IWdiWle8ViBcKxS91qsH/8ON XN00OW5q/8f+ESxAdue72fEtLnnkLHA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:07 2025 by rpki-client