$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4afce41a-e54d-300b-b281-344c49be2e84.roa File: 4afce41a-e54d-300b-b281-344c49be2e84.roa (raw, json) Hash identifier: ibSPyALqOri7DHc5bxrxWcGF1Z5at/ZGNxp0mHfivUI= Subject key identifier: 2B:FE:29:D9:3C:0A:E3:28:CD:42:C9:B0:89:62:36:2C:FF:59:12:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C72790A54502D3EDF8EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4afce41a-e54d-300b-b281-344c49be2e84.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.175.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:72:79:0a:54:50:2d:3e:df:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=7cd80b0a-2420-4c81-88e9-cc6643cd71c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:0a:a3:db:4c:13:df:73:66:31:0e:85:a0: cf:a0:7f:ee:4d:28:9b:ee:f6:1b:fc:78:73:51:e5: d1:0e:67:7a:7c:3e:b4:69:76:78:10:54:6c:ab:e9: 5a:fe:12:36:9a:eb:71:f4:64:c0:d5:a1:cf:e8:7a: eb:02:bf:8e:de:d2:5a:ae:ee:f7:73:c5:ab:7d:59: 25:53:fe:15:e0:e3:95:c3:d7:cb:cb:a6:06:8a:2e: 0b:5a:26:e4:d9:a2:84:3e:b2:2f:d3:99:b0:fd:a5: 2c:c1:a7:24:e4:cf:f7:6e:f2:d1:88:42:38:0d:45: c3:0b:4a:f2:d8:dc:ed:ac:24:b6:11:50:36:a3:9a: 9d:4d:f8:19:f7:57:76:42:34:15:74:73:f9:c8:e9: 12:b2:2f:c4:fe:b7:7c:58:84:e1:67:c1:82:d7:ca: af:44:d3:ce:f1:54:a4:d9:ba:80:5f:0c:3d:4b:00: 9b:32:37:6d:9c:71:e0:ac:df:93:fa:79:54:05:65: 93:3e:ec:42:8d:25:88:ce:d4:86:76:de:94:90:1a: 5e:3f:d6:2a:e9:5f:9f:18:4c:2e:90:56:db:32:36: 62:37:99:f1:92:02:cb:4d:64:95:8e:d8:ed:6f:ec: 71:ef:9d:ee:43:6e:2c:6f:bb:3d:31:fa:29:ff:bb: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FE:29:D9:3C:0A:E3:28:CD:42:C9:B0:89:62:36:2C:FF:59:12:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4afce41a-e54d-300b-b281-344c49be2e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.175.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:37:6e:c3:88:e5:af:1d:ee:c0:de:2a:32:74:34:48:dc:75: 6b:94:c1:cf:b0:1b:9e:f7:af:ad:1b:5d:20:04:ed:f3:e8:d8: aa:46:d1:1c:58:7e:f7:7b:63:b1:2d:01:21:1f:66:01:7d:70: 0c:c3:26:f9:69:53:2e:4e:ca:b2:07:73:e4:3c:49:b4:99:2f: 4a:4f:8c:64:84:06:5e:a8:5d:d2:7d:32:26:93:9b:44:23:e5: bf:c5:c2:12:47:a2:4c:90:2c:14:8d:1f:62:ee:23:0f:95:0f: 87:ef:1e:1e:6a:ee:d9:58:a3:41:c9:85:23:99:df:92:70:29: 96:86:6e:0c:29:a3:ba:ca:0c:05:b8:25:6a:57:24:a2:7e:20: b1:76:81:61:ee:64:73:f4:d0:f8:72:3c:82:c7:73:a4:f7:7a: 9b:13:bf:37:fd:c2:12:be:76:c4:73:26:00:7c:29:b7:9d:96: b7:12:d0:50:0c:83:06:9c:41:29:74:8d:c1:09:09:5f:e8:e4: 23:e7:f1:a5:58:30:d0:f3:cb:c8:9f:04:37:20:35:14:f4:01: 76:f8:af:24:b4:46:8c:82:01:f9:0f:06:ce:5b:10:d8:3b:c4: 5c:2e:ba:64:26:ef:96:c8:2e:a9:c3:30:41:04:cb:19:4e:c9: a2:84:a4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHJ5ClRQLT7fjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk N2NkODBiMGEtMjQyMC00YzgxLTg4ZTktY2M2NjQzY2Q3MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswkKo9tME99zZjEOhaDPoH/uTSib7vYb/Hhz UeXRDmd6fD60aXZ4EFRsq+la/hI2mutx9GTA1aHP6HrrAr+O3tJaru73c8WrfVkl U/4V4OOVw9fLy6YGii4LWibk2aKEPrIv05mw/aUswack5M/3bvLRiEI4DUXDC0ry 2NztrCS2EVA2o5qdTfgZ91d2QjQVdHP5yOkSsi/E/rd8WIThZ8GC18qvRNPO8VSk 2bqAXww9SwCbMjdtnHHgrN+T+nlUBWWTPuxCjSWIztSGdt6UkBpeP9Yq6V+fGEwu kFbbMjZiN5nxkgLLTWSVjtjtb+xx753uQ24sb7s9Mfop/7vFNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv+Kdk8CuMozULJsIliNiz/WRLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGFmY2U0MWEtZTU0ZC0z MDBiLWIyODEtMzQ0YzQ5YmUyZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG83bsOI5a8d7sDeKjJ0NEjcdWuUwc+wG573r60bXSAE7fPo2KpG0RxY fvd7Y7EtASEfZgF9cAzDJvlpUy5OyrIHc+Q8SbSZL0pPjGSEBl6oXdJ9MiaTm0Qj 5b/FwhJHokyQLBSNH2LuIw+VD4fvHh5q7tlYo0HJhSOZ35JwKZaGbgwpo7rKDAW4 JWpXJKJ+ILF2gWHuZHP00PhyPILHc6T3epsTvzf9whK+dsRzJgB8KbedlrcS0FAM gwacQSl0jcEJCV/o5CPn8aVYMNDzy8ifBDcgNRT0AXb4ryS0RoyCAfkPBs5bENg7 xFwuumQm75bILqnDMEEEyxlOyaKEpMU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:10 2025 by rpki-client