$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4df1945d-b175-3358-9728-8d5d1393d953.roa File: 4df1945d-b175-3358-9728-8d5d1393d953.roa (raw, json) Hash identifier: ruoolRv4xUl8dBFJMD0kDE/JMstfTOCqSnl7Xy3oDZ0= Subject key identifier: 7F:33:CA:DB:08:1D:6B:82:D6:C8:39:3E:FB:2D:58:6E:BF:B8:A0:BA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C79216E0B6E52D83B2400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4df1945d-b175-3358-9728-8d5d1393d953.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:79:21:6e:0b:6e:52:d8:3b:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=4d625c47-b954-4a48-a7f8-4ff6bc01947e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:80:09:5e:f9:9a:68:6d:b6:48:e9:01:2b:a7: 90:95:48:ee:d1:a5:2e:7b:db:9d:00:21:be:c0:66: 8e:1c:f5:14:76:aa:c3:93:69:d9:a5:c8:2f:1b:4b: ac:32:22:dc:2c:c1:f1:78:48:69:ff:a3:6d:1f:bc: fb:a1:d9:90:dc:43:f1:f3:17:5e:96:8e:c1:b0:27: a1:31:c5:ad:28:d4:78:61:a6:db:95:04:73:e9:5b: 91:8f:75:a9:b5:a0:a7:ef:27:fd:d7:17:1a:87:1d: b7:5c:7f:18:93:68:ca:cd:35:27:3e:21:18:d3:44: c7:af:29:32:ed:9d:cd:43:ea:b7:a8:19:ab:32:a6: 7e:64:73:85:44:09:ed:98:37:f8:19:ae:d5:01:e2: 15:1a:c7:4a:21:32:d2:99:0b:10:4c:64:9e:6b:9a: 63:44:05:5e:26:97:1c:37:8c:97:fc:ec:21:51:e7: fc:7b:41:a0:ec:38:57:d8:3e:39:ce:22:99:b2:95: de:27:a8:3c:68:83:76:df:d5:97:e3:c4:81:34:2a: 89:6c:4d:bc:0a:34:b6:51:5e:09:f7:52:c1:2b:a5: a1:78:a4:a7:6b:0a:75:03:d0:97:1a:72:0e:62:ab: bb:94:57:2a:91:50:27:78:b8:77:90:73:19:ea:d9: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:33:CA:DB:08:1D:6B:82:D6:C8:39:3E:FB:2D:58:6E:BF:B8:A0:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4df1945d-b175-3358-9728-8d5d1393d953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:67:83:a8:a9:f3:49:46:a0:34:d8:2b:91:0b:06:f0:fa:76: ad:23:2e:4c:14:2b:d0:04:e5:28:51:d3:50:89:c6:6e:64:53: 9d:e0:0c:50:a1:39:2f:df:c7:de:0d:27:d6:40:9d:52:d2:4c: 25:29:6a:ce:c0:62:8e:6e:d9:4e:a0:e5:23:4a:4a:c9:8d:52: 92:4c:03:f4:61:9b:4b:19:7a:19:3a:a6:70:e0:04:4a:4e:5d: d6:eb:2c:52:e3:d7:f7:f9:10:ad:ce:b7:f4:20:2d:3f:fc:63: a6:9b:f0:d5:06:2d:ea:1c:44:13:59:cd:01:f1:a1:b4:27:4b: 73:c3:31:ba:a1:f9:e1:01:ea:21:81:cd:63:19:c3:1a:22:fb: 1f:a0:53:9f:de:af:95:21:c8:4c:8a:c8:7b:8d:aa:a5:a8:2c: a4:9c:57:fa:90:e6:25:be:b9:20:c0:22:b1:79:ac:f7:70:13: a1:31:8b:e3:b6:de:57:b2:53:37:c6:eb:b9:d4:49:7f:f4:cb: c9:bd:1d:fd:a3:79:98:40:7a:c1:b3:c9:cb:93:c3:c8:35:b7: 26:cf:59:ef:45:d6:e1:3c:d5:12:1f:8d:f1:68:dd:c3:e3:13: 43:aa:6f:21:82:22:ed:e9:a8:d1:5c:6e:34:ff:0e:6b:d3:31: c4:f6:f7:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHkhbgtuUtg7JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NGQ2MjVjNDctYjk1NC00YTQ4LWE3ZjgtNGZmNmJjMDE5NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIAJXvmaaG22SOkBK6eQlUju0aUue9udACG+ wGaOHPUUdqrDk2nZpcgvG0usMiLcLMHxeEhp/6NtH7z7odmQ3EPx8xdelo7BsCeh McWtKNR4YabblQRz6VuRj3WptaCn7yf91xcahx23XH8Yk2jKzTUnPiEY00THryky 7Z3NQ+q3qBmrMqZ+ZHOFRAntmDf4Ga7VAeIVGsdKITLSmQsQTGSea5pjRAVeJpcc N4yX/OwhUef8e0Gg7DhX2D45ziKZspXeJ6g8aIN239WX48SBNCqJbE28CjS2UV4J 91LBK6WheKSnawp1A9CXGnIOYqu7lFcqkVAneLh3kHMZ6tm8nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8zytsIHWuC1sg5PvstWG6/uKC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGRmMTk0NWQtYjE3NS0z MzU4LTk3MjgtOGQ1ZDEzOTNkOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhng6ip80lGoDTYK5ELBvD6dq0jLkwUK9AE5ShR01CJxm5kU53gDFCh OS/fx94NJ9ZAnVLSTCUpas7AYo5u2U6g5SNKSsmNUpJMA/Rhm0sZehk6pnDgBEpO XdbrLFLj1/f5EK3Ot/QgLT/8Y6ab8NUGLeocRBNZzQHxobQnS3PDMbqh+eEB6iGB zWMZwxoi+x+gU5/er5UhyEyKyHuNqqWoLKScV/qQ5iW+uSDAIrF5rPdwE6Exi+O2 3leyUzfG67nUSX/0y8m9Hf2jeZhAesGzycuTw8g1tybPWe9F1uE81RIfjfFo3cPj E0OqbyGCIu3pqNFcbjT/DmvTMcT29w8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:14 2025 by rpki-client