$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/530db406-5de0-3d15-aa12-ca69cf0f525b.roa File: 530db406-5de0-3d15-aa12-ca69cf0f525b.roa (raw, json) Hash identifier: MRjnOIKOuodZdAlRcdsYxyagUy4WWF9l7j5d2BGMAgs= Subject key identifier: 6F:1B:A9:A1:E5:E3:57:A4:EC:6C:87:A2:BC:7D:C7:41:F8:AD:95:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C6CAE6940DF9E2B1C7800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/530db406-5de0-3d15-aa12-ca69cf0f525b.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.172.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:6c:ae:69:40:df:9e:2b:1c:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=f9d3def3-867f-4eff-b1b8-d1cff722baae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bd:86:fe:69:36:77:7c:b4:a6:7d:67:9c:52: e9:79:cb:75:63:24:63:ed:46:3b:7c:6b:20:c2:91: 8c:87:5f:98:5d:a7:07:aa:46:78:b6:2b:11:9a:0e: f0:92:a9:fe:81:6b:3c:38:25:5f:d5:fa:e4:49:51: 8f:87:43:1d:14:e9:92:e3:b7:f2:28:d4:cc:a0:dd: a6:53:15:0f:96:56:d5:e0:6e:e5:c7:72:ff:e8:12: 41:60:a5:c1:7e:a2:1b:07:7b:47:15:75:1c:a6:49: 1f:1a:66:74:0c:b5:17:90:4a:82:17:96:94:09:2d: aa:5c:ef:3b:df:2b:46:de:5f:52:d6:54:6b:5f:b5: 43:a2:4f:7d:5d:3e:cb:6e:ee:77:1c:5e:a8:5c:48: 4a:23:19:2c:06:9b:c2:d0:4a:f9:12:8c:cb:71:bc: ff:dc:6c:04:f5:0f:84:e9:e5:c3:e8:4a:e3:83:18: 29:d1:aa:7b:07:51:51:9e:04:8e:4d:75:e1:df:87: dd:57:8c:ca:38:c3:c4:ef:c0:40:2d:42:51:be:87: c9:2c:4a:7f:76:9f:47:95:d6:b5:f1:1a:c0:0d:06: 52:fe:b6:bf:3a:f8:49:46:4b:88:57:16:75:cc:70: 16:cb:c7:63:48:dd:77:54:b5:35:3f:ee:db:f7:9a: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1B:A9:A1:E5:E3:57:A4:EC:6C:87:A2:BC:7D:C7:41:F8:AD:95:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/530db406-5de0-3d15-aa12-ca69cf0f525b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:85:97:9b:4c:0e:9e:89:76:eb:5a:21:3d:53:78:a5:e1:60: 78:50:8a:3d:6e:fd:69:33:3a:40:0d:79:f8:c8:9a:d3:9e:45: 0d:3b:40:5b:6d:d9:5b:56:48:63:b4:89:11:32:17:ca:47:24: c5:a5:50:e3:d8:31:e9:4a:71:62:0f:58:45:c8:c4:20:ab:b0: 97:55:5c:1b:a8:51:45:47:0e:cf:e0:11:25:aa:18:32:fe:99: bf:a4:fc:d0:0e:68:31:a6:37:15:00:df:e1:9e:07:bb:71:83: 13:1b:66:84:91:94:36:95:fe:18:36:b4:5e:d4:9c:e4:57:1f: 2a:bc:71:ff:35:01:7f:44:39:c7:fd:e9:c8:a5:af:fc:93:33: 2b:55:eb:53:da:ef:f9:9d:f1:f3:3e:28:33:a0:6f:f1:9c:e9: e6:37:08:29:20:57:2e:35:19:8e:eb:3b:9f:ce:26:70:d7:fa: dd:77:9f:82:87:d0:ae:18:60:ec:91:05:87:cf:82:dc:48:5b: ef:18:55:f7:29:13:bf:7d:d1:7b:3c:52:36:0c:d1:3c:10:3a: 74:98:98:3b:3f:66:66:0e:9f:34:ee:73:7c:5e:5e:dd:b8:b1: f1:be:98:1f:1b:08:38:b0:c8:3c:92:06:0c:52:c9:98:68:47: 3a:0a:ab:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGyuaUDfnisceAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjlkM2RlZjMtODY3Zi00ZWZmLWIxYjgtZDFjZmY3MjJiYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb2G/mk2d3y0pn1nnFLpect1YyRj7UY7fGsg wpGMh1+YXacHqkZ4tisRmg7wkqn+gWs8OCVf1frkSVGPh0MdFOmS47fyKNTMoN2m UxUPllbV4G7lx3L/6BJBYKXBfqIbB3tHFXUcpkkfGmZ0DLUXkEqCF5aUCS2qXO87 3ytG3l9S1lRrX7VDok99XT7Lbu53HF6oXEhKIxksBpvC0Er5EozLcbz/3GwE9Q+E 6eXD6Erjgxgp0ap7B1FRngSOTXXh34fdV4zKOMPE78BALUJRvofJLEp/dp9Hlda1 8RrADQZS/ra/OvhJRkuIVxZ1zHAWy8djSN13VLU1P+7b95rkUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8bqaHl41ek7GyHorx9x0H4rZVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTMwZGI0MDYtNWRlMC0z ZDE1LWFhMTItY2E2OWNmMGY1MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCFl5tMDp6JdutaIT1TeKXhYHhQij1u/WkzOkANefjImtOeRQ07QFtt 2VtWSGO0iREyF8pHJMWlUOPYMelKcWIPWEXIxCCrsJdVXBuoUUVHDs/gESWqGDL+ mb+k/NAOaDGmNxUA3+GeB7txgxMbZoSRlDaV/hg2tF7UnORXHyq8cf81AX9EOcf9 6cilr/yTMytV61Pa7/md8fM+KDOgb/Gc6eY3CCkgVy41GY7rO5/OJnDX+t13n4KH 0K4YYOyRBYfPgtxIW+8YVfcpE7990Xs8UjYM0TwQOnSYmDs/ZmYOnzTuc3xeXt24 sfG+mB8bCDiwyDySBgxSyZhoRzoKq2E= -----END CERTIFICATE-----Generated at Thu Oct 16 01:46:58 2025 by rpki-client