$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4126115d-47e7-3a2e-81ea-18d01aa21764.roa File: 4126115d-47e7-3a2e-81ea-18d01aa21764.roa (raw, json) Hash identifier: 08+Ev2OPZa5p8T+qfF8feh9p8XPSwer0bnVjPMOaH0I= Subject key identifier: 83:31:C2:30:DD:D0:AA:2B:29:07:9A:86:0B:3B:1A:E7:72:EC:24:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F018B522AF342BEBE9A9460 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4126115d-47e7-3a2e-81ea-18d01aa21764.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.180.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:8b:52:2a:f3:42:be:be:9a:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=eaae76f0-f5f2-4923-be8f-96284bc89bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:e4:e3:be:c4:aa:9c:aa:b8:01:5e:7a:1f: 1a:37:ff:05:41:ad:98:f2:5a:14:7d:43:3c:ed:09: 9a:d6:56:93:60:48:b5:df:b2:49:ed:a0:1b:1e:89: 9d:38:87:76:6b:9f:10:33:05:02:72:38:06:85:52: 05:73:c0:7c:14:15:1a:18:48:ca:b3:66:3c:bd:ae: f8:9e:fd:cc:29:44:d6:4a:ab:12:45:b8:48:e2:ee: f9:1a:88:7c:5a:02:03:42:e8:0e:a1:72:c1:37:29: 7b:89:a3:90:3d:4a:ce:5e:42:70:d3:f8:7b:70:65: 1c:a8:d6:4a:d3:9b:e0:65:6e:6f:1b:c3:b3:5f:a6: 85:8d:62:13:4d:0a:7b:11:fe:ea:50:fc:54:99:d0: 15:2c:5d:0a:de:78:16:4b:bc:ae:e8:93:01:c4:53: df:65:da:83:6f:93:e2:f5:fc:94:41:12:f4:db:b4: 16:34:93:c2:26:ea:89:bb:a3:03:30:f6:7e:5a:89: d4:07:14:99:bf:00:f1:6c:81:09:c1:65:d4:46:1a: 0f:cb:ec:2a:e0:84:bb:ac:75:d2:dc:e4:27:85:40: af:b5:6e:89:5d:e5:49:bf:ca:d1:86:1d:36:55:96: f7:5c:18:be:b1:15:bc:39:fc:8d:47:e9:5d:fc:8e: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:31:C2:30:DD:D0:AA:2B:29:07:9A:86:0B:3B:1A:E7:72:EC:24:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4126115d-47e7-3a2e-81ea-18d01aa21764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a6:e1:46:7e:c3:81:eb:1f:61:6c:83:b1:b4:f1:f8:1c:7e: d1:d0:33:24:ba:1d:bb:a6:a3:d4:80:c7:18:81:17:4d:70:71: 90:5e:02:55:aa:fb:6f:8d:f3:62:87:f5:2a:1a:4c:6b:ea:2b: 94:22:08:e7:f4:2a:30:76:86:e6:d5:1b:c4:d8:1b:9e:0c:b6: ae:95:26:75:33:e5:60:9a:1a:cf:dd:4c:53:3b:93:aa:96:83: 6e:b7:16:16:1d:22:34:5d:ff:61:3b:68:eb:ec:37:e4:bb:3b: 23:03:bc:69:e8:93:88:f1:42:6b:9c:01:ed:31:04:d5:3d:ee: ff:fb:68:90:a5:bc:5e:3d:7d:4c:6a:c8:27:c5:7d:64:7f:ff: e4:35:9d:9d:c7:51:04:8b:57:c1:e9:63:57:2b:b1:96:cc:31: bf:d4:cc:77:ad:62:1a:67:20:32:9a:7e:14:cf:13:17:56:e5: 7a:62:4f:36:09:96:6e:f8:29:e0:b1:1f:8a:da:13:27:c5:a7: 46:dc:61:dc:54:75:d3:92:87:7e:cb:09:2d:b1:a3:b8:f5:0c: b0:73:f7:3f:f0:ae:ff:b7:a8:e6:66:61:b7:b0:99:69:cf:b1: a6:0e:6c:0f:87:00:9b:4e:f1:23:bf:c9:f1:6b:54:32:95:1e: 91:d6:8a:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAYtSKvNCvr6alGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWFhZTc2ZjAtZjVmMi00OTIzLWJlOGYtOTYyODRiYzg5YmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9nk477EqpyquAFeeh8aN/8FQa2Y8loUfUM8 7Qma1laTYEi137JJ7aAbHomdOId2a58QMwUCcjgGhVIFc8B8FBUaGEjKs2Y8va74 nv3MKUTWSqsSRbhI4u75Goh8WgIDQugOoXLBNyl7iaOQPUrOXkJw0/h7cGUcqNZK 05vgZW5vG8OzX6aFjWITTQp7Ef7qUPxUmdAVLF0K3ngWS7yu6JMBxFPfZdqDb5Pi 9fyUQRL027QWNJPCJuqJu6MDMPZ+WonUBxSZvwDxbIEJwWXURhoPy+wq4IS7rHXS 3OQnhUCvtW6JXeVJv8rRhh02VZb3XBi+sRW8OfyNR+ld/I719wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMxwjDd0KorKQeahgs7Gudy7CRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDEyNjExNWQtNDdlNy0z YTJlLTgxZWEtMThkMDFhYTIxNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmm4UZ+w4HrH2Fsg7G08fgcftHQMyS6Hbumo9SAxxiBF01wcZBeAlWq +2+N82KH9SoaTGvqK5QiCOf0KjB2hubVG8TYG54Mtq6VJnUz5WCaGs/dTFM7k6qW g263FhYdIjRd/2E7aOvsN+S7OyMDvGnok4jxQmucAe0xBNU97v/7aJClvF49fUxq yCfFfWR//+Q1nZ3HUQSLV8HpY1crsZbMMb/UzHetYhpnIDKafhTPExdW5XpiTzYJ lm74KeCxH4raEyfFp0bcYdxUddOSh37LCS2xo7j1DLBz9z/wrv+3qOZmYbewmWnP saYObA+HAJtO8SO/yfFrVDKVHpHWigc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:36 2025 by rpki-client