$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4084f464-2ceb-37d8-8e41-49511dffd9ab.roa File: 4084f464-2ceb-37d8-8e41-49511dffd9ab.roa (raw, json) Hash identifier: SWX3eSRFK+WnhDfw2RF/ttDMnoHS0kuu/iEDzlWVD80= Subject key identifier: 9A:58:25:39:5B:08:FE:27:21:A7:73:C1:15:8D:9A:C7:14:41:39:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671B31BFE3AF482263A080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4084f464-2ceb-37d8-8e41-49511dffd9ab.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1b:31:bf:e3:af:48:22:63:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=0b6066d4-4f5c-4374-880a-ceb2c9b00b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:9f:ca:05:20:88:d2:b6:7e:aa:0d:dd:18: a5:59:31:9a:20:f4:6c:9a:01:3c:ec:a0:36:39:30: f1:fa:c5:f7:f1:eb:f8:8b:a4:87:bb:fe:2a:f8:81: 93:91:24:9b:41:e7:64:da:49:f1:a0:59:ea:35:d9: 4e:75:c8:11:41:05:00:57:3b:fe:b2:7c:5c:cb:e2: 7a:1a:c4:f3:a3:76:51:68:25:aa:94:b0:3f:7c:bd: 34:0c:20:7a:76:b9:42:c3:60:9d:1b:28:c4:4a:f1: 67:38:dd:42:c1:dc:92:f3:e4:63:72:72:b3:d6:66: ec:18:82:1d:e2:41:0c:66:8c:36:94:6c:69:2f:49: 91:67:70:24:e5:df:25:65:c7:8d:b3:2b:ed:05:ab: af:d9:a3:c0:0d:0d:95:5a:6e:13:ff:30:1b:8a:35: 75:1a:9c:3d:0e:05:6f:93:86:bc:da:a4:d6:0b:6e: 57:3f:9c:c6:24:9d:04:23:e1:c2:7d:8c:8a:c8:ae: 15:38:67:f6:3d:fc:0f:c6:b5:4c:c8:ff:f6:e6:5a: 9e:f8:d4:88:65:1c:d7:04:68:fd:62:f9:f1:f1:b9: 00:f8:5a:21:95:d0:45:4e:c0:5e:41:3a:73:91:8c: 52:44:94:2f:5e:82:1c:22:f2:bf:92:11:1d:14:1b: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:58:25:39:5B:08:FE:27:21:A7:73:C1:15:8D:9A:C7:14:41:39:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4084f464-2ceb-37d8-8e41-49511dffd9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:7f:7e:99:96:da:8c:ec:e2:b3:d3:c6:42:fe:3b:de:f6:5d: 28:a6:e1:f4:d7:be:71:0a:ed:5a:32:3b:5e:84:10:e0:87:06: 90:de:7d:52:ed:df:d5:f0:52:7a:a8:ed:b2:2f:25:6f:20:86: d4:93:af:0c:eb:70:d0:b4:56:80:c8:d1:c2:30:7f:74:33:0c: 53:82:05:35:a1:e7:f7:d1:1b:fd:39:35:1c:57:a0:35:f7:34: 56:de:46:b9:69:dd:c1:93:a6:58:51:39:75:5d:e0:5e:5b:9f: 5b:0b:81:15:ad:e7:ea:8e:90:4e:dd:8c:aa:9c:1a:c0:d9:76: a4:bd:b4:cd:f6:85:ce:30:0a:98:8c:1a:7b:f7:af:2d:6a:b3: a9:a3:4c:2b:09:41:64:92:b1:16:0c:51:3a:ce:6e:48:48:22: d8:38:c9:0c:58:b0:54:57:6b:a1:04:4d:29:25:c8:7e:29:d4: 74:ef:d6:c4:9d:1f:79:1d:bd:34:fb:12:ae:5d:63:db:09:7b: 2a:58:22:63:42:45:c8:03:30:36:51:80:a4:42:4d:34:95:f5: 92:72:48:df:89:8d:49:ee:c0:93:37:b6:55:2f:72:4d:5a:13: 30:36:b4:9d:99:b1:c5:fe:d8:3b:8a:83:cd:5f:b3:44:e8:29: e8:54:27:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxsxv+OvSCJjoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MGI2MDY2ZDQtNGY1Yy00Mzc0LTg4MGEtY2ViMmM5YjAwYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluufygUgiNK2fqoN3RilWTGaIPRsmgE87KA2 OTDx+sX38ev4i6SHu/4q+IGTkSSbQedk2knxoFnqNdlOdcgRQQUAVzv+snxcy+J6 GsTzo3ZRaCWqlLA/fL00DCB6drlCw2CdGyjESvFnON1CwdyS8+RjcnKz1mbsGIId 4kEMZow2lGxpL0mRZ3Ak5d8lZceNsyvtBauv2aPADQ2VWm4T/zAbijV1Gpw9DgVv k4a82qTWC25XP5zGJJ0EI+HCfYyKyK4VOGf2PfwPxrVMyP/25lqe+NSIZRzXBGj9 Yvnx8bkA+FohldBFTsBeQTpzkYxSRJQvXoIcIvK/khEdFBuZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpYJTlbCP4nIadzwRWNmscUQTmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDA4NGY0NjQtMmNlYi0z N2Q4LThlNDEtNDk1MTFkZmZkOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx/fpmW2ozs4rPTxkL+O972XSim4fTXvnEK7VoyO16EEOCHBpDefVLt 39XwUnqo7bIvJW8ghtSTrwzrcNC0VoDI0cIwf3QzDFOCBTWh5/fRG/05NRxXoDX3 NFbeRrlp3cGTplhROXVd4F5bn1sLgRWt5+qOkE7djKqcGsDZdqS9tM32hc4wCpiM Gnv3ry1qs6mjTCsJQWSSsRYMUTrObkhIItg4yQxYsFRXa6EETSklyH4p1HTv1sSd H3kdvTT7Eq5dY9sJeypYImNCRcgDMDZRgKRCTTSV9ZJySN+JjUnuwJM3tlUvck1a EzA2tJ2ZscX+2DuKg81fs0ToKehUJ3k= -----END CERTIFICATE-----Generated at Wed Oct 15 23:46:43 2025 by rpki-client