$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3867adae-3a5f-3a9b-b86f-4eedc8ef0880.roa File: 3867adae-3a5f-3a9b-b86f-4eedc8ef0880.roa (raw, json) Hash identifier: XaO1lp17ChMksSUQbTEBHRjjUHSBVQ2arDPfKBV7T58= Subject key identifier: CA:3F:3C:4E:C0:C2:49:38:74:61:73:2F:25:AE:7E:72:E3:BF:F5:22 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C6BFE3370E07F32CEB600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3867adae-3a5f-3a9b-b86f-4eedc8ef0880.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.172.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:6b:fe:33:70:e0:7f:32:ce:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=d93ff425-9b25-4b32-875e-7d0a624a9e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:64:db:83:36:9b:6a:e1:c8:0d:36:3a:98: 9d:9c:8f:7b:cf:2b:7f:6d:a3:83:5f:5b:d4:85:a9: c3:fc:5c:a5:96:56:16:55:4d:37:d2:36:87:6a:f2: 46:bb:8a:3e:8d:8b:b9:de:95:02:f3:a6:50:cf:d3: 8f:0c:b5:90:f8:c9:b7:12:f2:c0:bd:8d:ad:f4:0f: 12:ac:e1:5d:3b:a7:59:a3:02:91:98:06:71:75:cd: 54:9a:d1:78:e7:60:de:b4:c0:2e:78:23:75:62:5b: 79:ff:bc:3d:3e:84:91:87:72:20:30:18:d6:52:44: c9:f7:d8:ee:43:47:66:ca:d9:8a:88:db:57:04:b3: a4:64:d5:fc:cd:3a:8d:a0:50:cf:37:e9:40:9a:3a: 29:83:5a:ad:8e:c9:c0:75:c4:21:b8:99:8c:7a:99: 40:ba:bf:e5:12:4a:58:75:a7:b7:30:7a:94:ce:6f: 8c:51:e7:28:36:c3:f5:6b:1f:24:a8:ac:91:cf:e7: 52:71:8b:d6:d0:b1:d1:13:e6:ce:40:b9:73:72:58: 6e:cb:3b:2e:7a:67:36:62:1d:06:1b:b3:f6:fc:a1: 37:69:2c:47:01:66:62:f8:b9:28:2c:13:f7:20:69: 1d:42:d5:95:80:ff:62:49:7a:20:da:48:59:ea:02: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3F:3C:4E:C0:C2:49:38:74:61:73:2F:25:AE:7E:72:E3:BF:F5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3867adae-3a5f-3a9b-b86f-4eedc8ef0880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:67:ba:af:7e:00:81:e0:ba:00:05:53:9d:61:ba:8f:42:7a: 6a:95:19:cf:d6:16:eb:a5:8d:2d:f4:0f:d6:5b:da:ab:06:46: ef:26:25:49:57:17:69:53:86:42:56:31:16:24:48:20:b9:98: 8d:50:ad:a1:ca:89:0c:48:5d:c5:0b:e8:16:34:ea:78:5a:31: 8f:5c:a6:dd:cd:c3:81:a4:20:37:e2:50:33:c5:9b:7a:04:a4: 24:38:58:b0:ee:ba:7c:02:c1:90:76:41:8b:a9:b4:38:92:79: f3:0c:48:78:cd:32:a9:08:3a:7b:0f:12:47:1d:90:a4:b9:16: 0c:21:2a:74:10:ce:64:78:fe:e4:e1:03:66:a1:8f:3d:4f:0d: 35:70:0a:58:02:b9:0e:9e:00:d9:86:16:12:3a:ec:f8:15:05: 5e:c3:af:b9:ef:df:05:6f:5d:05:28:87:1a:eb:a2:33:d9:9f: 21:4d:fa:44:08:78:de:43:bb:32:dd:54:fc:0c:5a:21:86:d2: 3d:27:bc:8f:cb:26:af:18:91:17:47:7f:3b:81:0d:ab:01:40: 9c:5a:45:43:c7:ea:60:dd:77:ad:6e:88:c9:25:0a:b0:91:e5: e0:b3:84:1b:e8:30:47:90:3b:42:fb:9f:d1:85:f7:ab:b3:c5: d1:f3:b7:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGv+M3DgfzLOtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDkzZmY0MjUtOWIyNS00YjMyLTg3NWUtN2QwYTYyNGE5ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C5k24M2m2rhyA02OpidnI97zyt/baODX1vU hanD/FylllYWVU030jaHavJGu4o+jYu53pUC86ZQz9OPDLWQ+Mm3EvLAvY2t9A8S rOFdO6dZowKRmAZxdc1UmtF452DetMAueCN1Ylt5/7w9PoSRh3IgMBjWUkTJ99ju Q0dmytmKiNtXBLOkZNX8zTqNoFDPN+lAmjopg1qtjsnAdcQhuJmMeplAur/lEkpY dae3MHqUzm+MUecoNsP1ax8kqKyRz+dScYvW0LHRE+bOQLlzclhuyzsuemc2Yh0G G7P2/KE3aSxHAWZi+LkoLBP3IGkdQtWVgP9iSXog2khZ6gLPKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo/PE7Awkk4dGFzLyWufnLjv/UiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg2N2FkYWUtM2E1Zi0z YTliLWI4NmYtNGVlZGM4ZWYwODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqxCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxnuq9+AIHgugAFU51huo9CemqVGc/WFuuljS30D9Zb2qsGRu8mJUlX F2lThkJWMRYkSCC5mI1QraHKiQxIXcUL6BY06nhaMY9cpt3Nw4GkIDfiUDPFm3oE pCQ4WLDuunwCwZB2QYuptDiSefMMSHjNMqkIOnsPEkcdkKS5FgwhKnQQzmR4/uTh A2ahjz1PDTVwClgCuQ6eANmGFhI67PgVBV7Dr7nv3wVvXQUohxrrojPZnyFN+kQI eN5DuzLdVPwMWiGG0j0nvI/LJq8YkRdHfzuBDasBQJxaRUPH6mDdd61uiMklCrCR 5eCzhBvoMEeQO0L7n9GF96uzxdHztwA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:02 2025 by rpki-client