$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/499aa5bf-1b78-30fb-9cc6-654f68632119.roa File: 499aa5bf-1b78-30fb-9cc6-654f68632119.roa (raw, json) Hash identifier: IMm2rk4HdlJtKocxrdGuw8hjUL5lOZNQ6fKWs48IE8c= Subject key identifier: 24:41:9D:8C:FF:6F:40:5A:34:85:E3:38:99:C5:9E:E5:4A:48:1C:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670F31AF0D0F017071B300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/499aa5bf-1b78-30fb-9cc6-654f68632119.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0f:31:af:0d:0f:01:70:71:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=c84748ac-0352-447f-9c8b-6a31a76073d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:41:35:78:38:e2:15:a8:f7:f5:35:fa:7c: 99:79:26:6f:b4:87:41:79:74:3b:66:4e:4b:be:23: ac:7d:54:aa:2a:3c:f8:c1:47:3c:71:12:c9:7d:e7: cb:94:d1:f0:45:ad:6e:bc:93:47:da:f8:08:e3:3f: 92:25:4a:2c:97:91:2f:68:d5:3a:9f:28:e6:d1:b0: be:d2:7d:5e:fd:23:c0:3f:12:3a:e1:05:44:63:3f: 26:ef:e9:5b:7f:d2:40:0d:be:11:1d:88:ac:24:8d: 34:e9:11:e8:ee:85:dc:b8:b1:9a:09:6a:a6:22:6f: fc:59:d3:98:98:65:27:bc:b2:79:e6:6a:95:1e:03: d6:c4:16:8a:f8:da:60:dc:f7:72:f8:26:4b:8e:53: dc:c6:b5:cd:5b:4e:6c:9a:55:39:14:e6:33:fc:eb: 5c:f1:a2:d7:29:0d:7d:ba:6e:54:05:89:43:3c:89: 61:f5:86:e3:33:b9:52:2b:a1:82:8f:c2:5b:9a:e3: 1e:9d:a6:16:4a:ad:b9:1d:bc:1a:f3:b0:ec:f5:79: 46:f4:98:9c:d7:09:01:cf:e0:d4:99:e3:1e:e2:ad: 93:56:8e:20:5f:40:e7:4f:0a:32:ba:c8:5c:01:86: c0:a0:1c:a5:24:41:69:8a:ef:4b:88:03:63:48:39: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:41:9D:8C:FF:6F:40:5A:34:85:E3:38:99:C5:9E:E5:4A:48:1C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/499aa5bf-1b78-30fb-9cc6-654f68632119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:76:45:fe:ef:45:60:9b:92:0c:97:33:18:78:f3:a1:d7:53: 21:ef:b3:7f:5e:b6:62:68:4e:61:70:f2:a1:2a:c2:17:aa:b4: 2d:f5:ad:78:de:58:40:f5:68:b5:f1:e6:bc:9c:7b:ba:9b:7b: 34:f7:7f:6d:ad:2d:e1:3d:af:2d:c0:81:f5:0d:f6:20:4e:c6: 7b:7e:dd:e8:5b:5a:2e:fd:0f:c0:a4:8d:f0:e3:db:16:f5:57: 16:24:b1:45:92:51:0c:a3:c1:00:dc:75:2e:71:13:ed:d6:6d: 13:7c:09:52:30:cc:65:92:6d:e5:12:c5:17:eb:fa:2a:d2:bc: ab:5b:a3:68:28:7a:bf:ff:f8:dd:75:cd:f1:96:3f:80:11:6c: fe:fb:0e:40:5f:24:be:a0:ed:2d:94:1c:bd:ba:56:57:37:cd: 5a:d2:7f:8a:62:37:dc:e8:18:14:68:b4:db:53:cd:c8:6d:12: 33:83:90:f9:c9:95:d8:83:fa:88:a5:12:ce:0b:44:4b:8b:91: 1d:a4:e5:5b:66:ea:9d:d0:fd:ce:e9:25:16:01:cd:78:40:42: 39:2d:b0:ff:99:a6:c4:42:ec:8d:fd:ee:db:b6:28:de:a7:ff: 19:57:4a:38:e6:6f:ad:e4:d9:8f:ba:f3:2a:96:e3:73:5f:47: fc:b4:30:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZw8xrw0PAXBxswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk Yzg0NzQ4YWMtMDM1Mi00NDdmLTljOGItNmEzMWE3NjA3M2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UdBNXg44hWo9/U1+nyZeSZvtIdBeXQ7Zk5L viOsfVSqKjz4wUc8cRLJfefLlNHwRa1uvJNH2vgI4z+SJUosl5EvaNU6nyjm0bC+ 0n1e/SPAPxI64QVEYz8m7+lbf9JADb4RHYisJI006RHo7oXcuLGaCWqmIm/8WdOY mGUnvLJ55mqVHgPWxBaK+Npg3Pdy+CZLjlPcxrXNW05smlU5FOYz/Otc8aLXKQ19 um5UBYlDPIlh9YbjM7lSK6GCj8JbmuMenaYWSq25Hbwa87Ds9XlG9Jic1wkBz+DU meMe4q2TVo4gX0DnTwoyushcAYbAoBylJEFpiu9LiANjSDke7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRBnYz/b0BaNIXjOJnFnuVKSByHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDk5YWE1YmYtMWI3OC0z MGZiLTljYzYtNjU0ZjY4NjMyMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx2Rf7vRWCbkgyXMxh486HXUyHvs39etmJoTmFw8qEqwheqtC31rXje WED1aLXx5ryce7qbezT3f22tLeE9ry3AgfUN9iBOxnt+3ehbWi79D8CkjfDj2xb1 VxYksUWSUQyjwQDcdS5xE+3WbRN8CVIwzGWSbeUSxRfr+irSvKtbo2goer//+N11 zfGWP4ARbP77DkBfJL6g7S2UHL26Vlc3zVrSf4piN9zoGBRotNtTzchtEjODkPnJ ldiD+oilEs4LREuLkR2k5Vtm6p3Q/c7pJRYBzXhAQjktsP+ZpsRC7I397tu2KN6n /xlXSjjmb63k2Y+68yqW43NfR/y0MAU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:56 2025 by rpki-client