$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389a8fce-25d8-3f02-8614-05b079e13076.roa File: 389a8fce-25d8-3f02-8614-05b079e13076.roa (raw, json) Hash identifier: f+POHVghaf8/BKElvmfPYwguYZlIJWRYoNuQ42VXQT4= Subject key identifier: 20:81:AA:3F:1B:D1:2D:54:C2:89:8E:00:00:A8:CD:D9:69:14:4A:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21D6783FA1FF7244A4980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389a8fce-25d8-3f02-8614-05b079e13076.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.181.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1d:67:83:fa:1f:f7:24:4a:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=02de6462-b495-45f7-9411-93869b3fd5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:c8:d7:03:3d:8d:8d:8f:6f:92:76:2f:be: ae:bc:42:6c:21:aa:19:b5:97:43:92:e7:53:79:82: a5:ff:49:fe:f3:df:4e:66:64:62:9d:69:d6:5c:fb: e0:bb:c8:a5:de:0c:6f:72:f6:c2:a6:6b:6b:d0:b1: 07:69:e9:3b:f1:8e:28:85:eb:c2:d7:10:9c:c9:62: e4:27:4d:93:fd:ff:51:3b:4d:f9:61:ef:17:75:74: 18:22:10:69:4d:22:a0:01:d4:77:c6:34:f4:5f:e1: 73:12:1c:f3:e0:18:73:d6:53:05:c2:b4:85:7f:fc: 38:52:93:96:17:55:06:19:27:bc:81:eb:fd:2b:49: 61:5d:fd:1a:4e:57:9d:f8:0e:4c:11:24:45:db:88: 4f:59:e0:2e:3e:d0:2d:45:0f:b7:8f:98:c6:34:ce: 95:99:cd:c0:cc:39:c8:c8:50:2f:b0:29:3c:46:c9: 38:e9:dd:76:c0:92:ad:55:96:2a:90:7a:3d:25:96: fd:f5:81:32:d5:e4:9d:a9:67:3e:78:00:67:96:9d: 2e:de:14:16:e6:01:9b:7f:58:49:45:7a:f6:78:9f: 7e:28:cc:7a:9b:e3:47:75:b4:ab:df:c4:52:48:b7: 19:4d:a8:56:67:98:13:d2:29:f0:ea:dd:48:e7:2b: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:81:AA:3F:1B:D1:2D:54:C2:89:8E:00:00:A8:CD:D9:69:14:4A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389a8fce-25d8-3f02-8614-05b079e13076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6f:f7:ef:99:9c:5d:12:dc:79:a5:5d:36:82:63:3d:c7:37: 8f:3e:81:c6:6f:ab:9f:82:5a:3f:e2:bd:a3:0a:b0:18:0b:9f: 73:c5:51:62:1c:66:52:cb:06:31:6e:35:68:49:27:57:6a:17: 58:98:47:9b:f8:ce:a9:81:cb:2a:9a:dd:0d:39:e8:39:d3:df: dd:27:2d:05:88:1d:af:d3:f5:42:74:61:91:92:88:3c:12:5e: 49:a4:18:6a:3b:40:c0:66:7e:0c:b6:f9:12:96:84:97:e1:39: 3e:13:4f:92:6d:85:99:43:ac:4e:9c:29:51:6c:84:b7:4a:9f: 8c:d1:c3:cd:87:21:51:c9:41:dc:50:a5:93:61:20:94:82:ed: a5:1b:a0:e2:de:22:2f:16:09:d9:72:8c:ed:de:d9:eb:e6:2c: 04:3b:9a:e1:d6:a7:e0:f0:72:e6:b1:b1:b6:41:20:0d:93:4d: 26:90:d1:c4:7c:fa:b7:13:88:90:b9:1a:87:e9:53:0e:f4:fd: 8d:33:8c:92:da:0f:24:95:41:47:f7:4e:10:8f:7f:0a:89:21: d1:fa:b8:8d:17:7d:79:48:41:21:a0:6e:4f:f7:bf:d6:03:6e: fb:7d:71:3b:00:35:02:a4:f7:5b:7b:d0:67:ed:f0:32:f2:10: 82:17:d7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28h1ng/of9yRKSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDJkZTY0NjItYjQ5NS00NWY3LTk0MTEtOTM4NjliM2ZkNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOLI1wM9jY2Pb5J2L76uvEJsIaoZtZdDkudT eYKl/0n+899OZmRinWnWXPvgu8il3gxvcvbCpmtr0LEHaek78Y4ohevC1xCcyWLk J02T/f9RO035Ye8XdXQYIhBpTSKgAdR3xjT0X+FzEhzz4Bhz1lMFwrSFf/w4UpOW F1UGGSe8gev9K0lhXf0aTled+A5MESRF24hPWeAuPtAtRQ+3j5jGNM6Vmc3AzDnI yFAvsCk8Rsk46d12wJKtVZYqkHo9JZb99YEy1eSdqWc+eABnlp0u3hQW5gGbf1hJ RXr2eJ9+KMx6m+NHdbSr38RSSLcZTahWZ5gT0inw6t1I5yvZywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCBqj8b0S1UwomOAACozdlpFEqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg5YThmY2UtMjVkOC0z ZjAyLTg2MTQtMDViMDc5ZTEzMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhv9++ZnF0S3HmlXTaCYz3HN48+gcZvq5+CWj/ivaMKsBgLn3PFUWIc ZlLLBjFuNWhJJ1dqF1iYR5v4zqmByyqa3Q056DnT390nLQWIHa/T9UJ0YZGSiDwS XkmkGGo7QMBmfgy2+RKWhJfhOT4TT5JthZlDrE6cKVFshLdKn4zRw82HIVHJQdxQ pZNhIJSC7aUboOLeIi8WCdlyjO3e2evmLAQ7muHWp+DwcuaxsbZBIA2TTSaQ0cR8 +rcTiJC5GofpUw70/Y0zjJLaDySVQUf3ThCPfwqJIdH6uI0XfXlIQSGgbk/3v9YD bvt9cTsANQKk91t70Gft8DLyEIIX1/M= -----END CERTIFICATE-----Generated at Wed Oct 15 23:46:49 2025 by rpki-client