$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ed0d68-9901-3e38-9719-9c45d7085223.roa File: 31ed0d68-9901-3e38-9719-9c45d7085223.roa (raw, json) Hash identifier: uEKcRCGoRHLwKBE4Ps0fxp5H9b+CVQ0LMptHph09Q30= Subject key identifier: CF:BB:50:D9:5B:25:23:37:C3:1A:75:A5:BE:08:D1:3C:2B:3C:1D:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671AFA6E300371A1745810 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ed0d68-9901-3e38-9719-9c45d7085223.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1a:fa:6e:30:03:71:a1:74:58:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=3d26649e-b3a4-4dff-afdd-ce0d2973191e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:93:77:ec:91:9e:20:10:c9:5d:f1:eb:b2:e1: db:4a:6d:0f:c7:c0:40:36:13:3c:e2:ad:93:76:f1: 6f:d6:15:f4:ef:df:7d:bf:3a:00:72:b9:1e:a2:1c: 15:e4:ab:6d:c9:a5:c0:b0:0a:e5:b6:db:63:48:ed: 4d:fe:92:81:ee:97:ed:73:f4:83:c2:35:3c:22:50: f2:6d:83:71:51:ec:03:4b:3e:35:cd:a9:49:5a:67: e3:e8:ac:24:96:76:e9:81:9b:41:38:d5:80:63:1d: d4:9a:c9:11:77:75:47:2d:49:2c:20:8d:3e:c2:6a: 38:a5:6c:f4:1b:4f:d4:78:87:1e:b6:80:26:56:c0: 92:bf:4c:17:97:ca:1f:4e:1d:7e:70:eb:64:2e:41: b4:b2:51:5e:e2:bd:45:7f:e8:5f:1a:2b:03:e9:91: 7b:7f:3b:6b:2b:cf:5d:ca:12:aa:eb:73:41:21:20: c8:c9:85:fb:55:2b:cf:8b:f9:49:60:d5:d5:85:40: 72:fc:72:ff:cf:80:90:e0:4b:16:a2:b5:a2:6e:38: 51:d6:f2:ae:78:05:02:d5:0e:66:1d:a7:a5:28:65: ac:3b:ca:f4:82:ce:0e:b5:72:ab:b7:c4:60:d6:96: 85:07:57:c4:06:37:6d:a0:94:43:2a:db:2d:a8:bc: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BB:50:D9:5B:25:23:37:C3:1A:75:A5:BE:08:D1:3C:2B:3C:1D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ed0d68-9901-3e38-9719-9c45d7085223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:be:ed:ce:ed:dd:7e:c3:63:be:97:47:3f:e4:41:e7:0a:3d: 1a:04:a8:e6:b3:65:0f:b4:87:90:a6:77:af:12:15:a1:9c:72: 9f:7e:cd:42:f9:d8:82:e8:2b:09:b8:fa:11:ee:cf:d9:63:51: 23:23:27:f3:26:e0:95:28:ad:1b:0d:04:bd:6d:55:00:2e:02: 35:a7:78:d2:b9:2e:02:0e:ae:bd:97:48:9f:7b:b9:54:13:3d: be:13:f3:a0:65:09:b5:cd:bf:ff:ca:a8:43:86:5a:30:09:da: 2c:84:2e:4f:c8:f4:63:44:ae:06:0d:63:92:6a:6e:fd:99:9a: ef:dc:03:25:f5:b3:63:55:05:06:43:50:a7:5d:0e:e3:76:5e: 8d:32:fd:f9:22:f5:5b:92:38:5c:18:0b:62:48:d2:e4:12:b5: 98:2f:4a:71:e4:e4:6b:8f:6a:75:17:8d:77:19:2d:8c:93:91: b8:23:51:66:ab:c5:45:48:a4:9c:94:9a:65:15:f0:f4:ff:83: af:4e:78:e9:7b:8c:62:48:d3:12:9b:72:7f:58:e4:53:a4:c0: 6f:64:fd:cc:54:ae:89:95:c8:78:f3:7a:60:e3:46:38:de:d3: 23:1b:3b:8d:6f:9f:29:49:79:72:20:0f:80:12:92:f9:50:af: 2f:9d:16:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxr6bjADcaF0WBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk M2QyNjY0OWUtYjNhNC00ZGZmLWFmZGQtY2UwZDI5NzMxOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5N37JGeIBDJXfHrsuHbSm0Px8BANhM84q2T dvFv1hX07999vzoAcrkeohwV5KttyaXAsArltttjSO1N/pKB7pftc/SDwjU8IlDy bYNxUewDSz41zalJWmfj6KwklnbpgZtBONWAYx3UmskRd3VHLUksII0+wmo4pWz0 G0/UeIcetoAmVsCSv0wXl8ofTh1+cOtkLkG0slFe4r1Ff+hfGisD6ZF7fztrK89d yhKq63NBISDIyYX7VSvPi/lJYNXVhUBy/HL/z4CQ4EsWorWibjhR1vKueAUC1Q5m HaelKGWsO8r0gs4OtXKrt8Rg1paFB1fEBjdtoJRDKtstqLzLUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+7UNlbJSM3wxp1pb4I0TwrPB2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzFlZDBkNjgtOTkwMS0z ZTM4LTk3MTktOWM0NWQ3MDg1MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa+7c7t3X7DY76XRz/kQecKPRoEqOazZQ+0h5Cmd68SFaGccp9+zUL5 2ILoKwm4+hHuz9ljUSMjJ/Mm4JUorRsNBL1tVQAuAjWneNK5LgIOrr2XSJ97uVQT Pb4T86BlCbXNv//KqEOGWjAJ2iyELk/I9GNErgYNY5Jqbv2Zmu/cAyX1s2NVBQZD UKddDuN2Xo0y/fki9VuSOFwYC2JI0uQStZgvSnHk5GuPanUXjXcZLYyTkbgjUWar xUVIpJyUmmUV8PT/g69OeOl7jGJI0xKbcn9Y5FOkwG9k/cxUromVyHjzemDjRjje 0yMbO41vnylJeXIgD4ASkvlQry+dFis= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:50 2025 by rpki-client