$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38ddfcc0-0dd8-355a-b84a-5f1b6bb8ce4c.roa File: 38ddfcc0-0dd8-355a-b84a-5f1b6bb8ce4c.roa (raw, json) Hash identifier: 35SWp0UyNhxJ/Jtfko3rbsNybSGqLZEMxQsMfDKv6fE= Subject key identifier: 6C:11:35:5B:20:10:FD:7B:BE:50:EE:97:D0:DA:33:01:87:FB:58:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2189EE0C860EF473D4860 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38ddfcc0-0dd8-355a-b84a-5f1b6bb8ce4c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.174.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:18:9e:e0:c8:60:ef:47:3d:48:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a51d0a4d-5b1e-420e-b393-c3ebb952c376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:a1:86:cb:68:92:9a:56:3f:3c:bc:7a:a4: a0:a9:c1:87:d5:0e:68:1e:9f:4d:98:d2:c1:e7:9a: 3e:71:7a:79:e7:b1:41:ae:34:b2:a8:b6:b5:21:3a: eb:3d:f9:0d:0e:42:bb:14:6b:03:61:79:c6:47:6a: 48:9a:69:18:84:ce:d5:4d:af:07:86:c4:79:48:a3: 79:72:5e:df:0a:b2:f1:eb:f5:25:be:e3:d2:ed:13: 8f:10:1d:fe:ee:34:4b:7b:23:01:c2:27:28:c1:31: de:b0:40:13:5c:a1:13:dd:e9:48:34:2f:c1:11:98: a5:21:de:48:23:8a:fa:9f:06:53:74:3c:f1:25:db: 22:1d:9e:01:6b:3a:bc:4a:c1:0a:9f:27:c5:46:47: 21:55:27:ec:4f:b7:ce:81:29:5f:11:a0:04:2d:a0: 92:04:d0:cb:70:6e:78:34:36:ae:2e:4a:14:22:6c: da:fe:d8:8d:96:df:c2:34:0f:2f:bf:bd:2e:0c:b3: a3:76:bb:6d:74:c8:a4:2f:a8:a8:a0:66:29:d8:b4: b2:e7:f5:bd:2d:54:4c:60:fa:75:18:f3:ee:c8:7a: ca:0d:24:ac:1d:d5:61:f0:72:7c:a3:4a:39:9c:c2: 52:fe:04:13:7d:0d:fd:a9:2b:43:73:41:b4:0c:f4: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:11:35:5B:20:10:FD:7B:BE:50:EE:97:D0:DA:33:01:87:FB:58:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38ddfcc0-0dd8-355a-b84a-5f1b6bb8ce4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:93:a3:1c:7c:c2:f6:c2:07:9f:28:59:ef:05:5c:71:2d:5d: 2e:c4:fc:7a:a1:c4:b0:8b:69:3e:4d:d6:29:47:8a:62:ca:5c: 2d:d7:1c:ca:2d:52:79:a7:7e:73:b9:ff:58:19:09:83:4b:e0: 42:fc:a1:fa:1f:b8:1e:33:a0:da:9e:81:98:03:a0:0b:02:6e: f3:2e:05:c3:14:fa:52:36:80:2a:cb:ec:ef:08:e0:62:3e:1e: be:48:7d:16:a3:26:97:19:ae:26:68:27:8d:45:e2:75:38:60: b7:f1:d6:84:27:86:1c:f6:b5:00:1f:36:aa:a9:40:ba:30:1a: 1d:9a:f9:10:72:27:f8:32:ff:31:f7:a3:9b:40:32:e2:69:b7: 38:ed:e0:0c:3f:9e:2f:40:e4:b2:c7:c4:9a:d5:0c:ea:66:dc: 3f:06:e7:9b:b5:66:6b:d9:74:4b:b1:90:3c:74:9f:bc:21:d5: 76:ea:0e:ee:9f:86:33:63:5d:9f:6f:f8:f1:1d:e8:9d:aa:0a: 97:63:bf:4d:73:b2:8f:ac:e9:b3:7b:21:8f:a7:ba:0d:46:b3: 82:5d:8d:01:c1:b5:8c:8e:2f:02:de:e7:7d:3c:f8:b3:15:61: 13:e7:b6:9b:a6:e7:94:b2:fa:31:43:f3:8d:be:f3:84:c2:a8: be:5d:eb:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hie4Mhg70c9SGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTUxZDBhNGQtNWIxZS00MjBlLWIzOTMtYzNlYmI5NTJjMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMuhhstokppWPzy8eqSgqcGH1Q5oHp9NmNLB 55o+cXp557FBrjSyqLa1ITrrPfkNDkK7FGsDYXnGR2pImmkYhM7VTa8HhsR5SKN5 cl7fCrLx6/UlvuPS7ROPEB3+7jRLeyMBwicowTHesEATXKET3elINC/BEZilId5I I4r6nwZTdDzxJdsiHZ4Bazq8SsEKnyfFRkchVSfsT7fOgSlfEaAELaCSBNDLcG54 NDauLkoUImza/tiNlt/CNA8vv70uDLOjdrttdMikL6iooGYp2LSy5/W9LVRMYPp1 GPPuyHrKDSSsHdVh8HJ8o0o5nMJS/gQTfQ39qStDc0G0DPQtgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwRNVsgEP17vlDul9DaMwGH+1gjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhkZGZjYzAtMGRkOC0z NTVhLWI4NGEtNWYxYjZiYjhjZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWToxx8wvbCB58oWe8FXHEtXS7E/HqhxLCLaT5N1ilHimLKXC3XHMot UnmnfnO5/1gZCYNL4EL8ofofuB4zoNqegZgDoAsCbvMuBcMU+lI2gCrL7O8I4GI+ Hr5IfRajJpcZriZoJ41F4nU4YLfx1oQnhhz2tQAfNqqpQLowGh2a+RByJ/gy/zH3 o5tAMuJptzjt4Aw/ni9A5LLHxJrVDOpm3D8G55u1ZmvZdEuxkDx0n7wh1XbqDu6f hjNjXZ9v+PEd6J2qCpdjv01zso+s6bN7IY+nug1Gs4JdjQHBtYyOLwLe5308+LMV YRPntpum55Sy+jFD842+84TCqL5d60c= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:14 2025 by rpki-client