$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5861f125-93f8-3a92-b07e-c75ddaf3a3a6.roa File: 5861f125-93f8-3a92-b07e-c75ddaf3a3a6.roa (raw, json) Hash identifier: PJEk3RCvWHhbRY4a7ZRiKpQiad+6Ud1tqjXxqR4IV8A= Subject key identifier: FA:D6:99:EA:4A:8D:C0:32:C3:C7:74:79:59:67:0A:E5:B4:87:D8:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7CAF0FA84F27680BA200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5861f125-93f8-3a92-b07e-c75ddaf3a3a6.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.177.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:7c:af:0f:a8:4f:27:68:0b:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=a6da0fcf-ff35-4cba-89e4-3108b264dab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:3a:a4:4e:43:82:49:b0:37:74:c4:83:8f: d9:27:fa:40:db:58:c0:df:a3:94:b7:ad:99:06:e8: 9d:1c:6b:d3:56:92:19:de:68:45:a9:1e:e1:ae:5b: 08:45:b5:15:1a:49:6b:a3:54:58:b4:4e:8c:10:00: 88:22:e8:89:53:f3:e6:a9:b9:e2:18:a9:96:a7:73: 3a:a4:1b:82:ef:64:f3:a7:01:dd:5c:ea:2a:48:34: 73:c8:2d:c1:34:70:b0:89:c3:e3:0a:2d:21:08:c2: 19:ba:15:b4:e0:41:38:e0:1c:3b:4a:28:7f:95:a9: dd:71:81:9a:5c:23:3e:8b:b9:f8:16:f3:d7:6e:9f: 5b:48:b3:9b:64:90:f0:f6:90:34:c6:df:d2:68:d1: 64:07:e3:a3:3d:dd:1c:8d:b4:0b:96:2f:b6:ee:b0: 6a:16:83:6b:10:c9:3f:c7:c4:58:8f:1d:a8:8d:46: d8:03:ba:10:10:f5:4f:4c:64:51:4a:12:29:bd:96: 24:d8:b8:6d:db:9a:68:8d:71:ae:f9:8c:51:04:d6: da:31:10:a7:c3:3d:6a:79:79:68:6a:e2:4d:0b:36: 8c:26:79:af:1f:b2:e1:95:74:a0:c9:d0:bd:a9:ac: c8:77:54:d3:91:9e:0a:9e:d0:23:55:c3:94:38:79: 9a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D6:99:EA:4A:8D:C0:32:C3:C7:74:79:59:67:0A:E5:B4:87:D8:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5861f125-93f8-3a92-b07e-c75ddaf3a3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.177.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:7b:93:37:82:40:b4:78:9b:77:30:9b:3f:5f:a0:2e:0f:06: 59:9b:ca:a7:3a:2a:1a:39:c3:49:c3:22:2c:e3:97:6d:f5:48: 3f:46:62:16:9e:5d:05:d8:41:e8:ea:8b:ca:0c:7f:6f:1b:59: e6:4d:ee:c9:7a:1b:99:f3:db:fd:2e:17:91:d0:d8:76:06:69: 27:84:e5:6f:79:b9:54:3b:83:d8:ac:8b:5e:e8:59:00:5a:f6: c2:65:dd:42:ac:af:dc:6d:43:a6:7b:25:b2:f7:26:8b:9c:35: 81:38:76:99:98:99:01:8e:4a:fd:94:5f:fd:09:c1:b3:4f:40: d1:ce:1a:ad:6d:f9:e4:88:fc:5b:c6:7c:b7:6d:0d:0e:93:ab: 74:03:9e:24:0c:ce:b0:87:e4:c0:02:4b:0a:69:f5:12:43:52: ff:16:7c:7b:7f:0d:af:7c:29:7f:86:8c:7e:47:dd:5d:45:df: 09:3d:32:53:2f:b4:3e:4e:45:8b:49:fa:ce:7b:0b:86:c0:bf: 29:72:6b:d5:24:14:53:0b:d4:ce:60:c5:aa:fd:5a:ce:40:9a: 5d:46:f9:f5:fc:5c:1f:3d:41:2b:a9:fa:6b:e7:b3:51:cb:92: b7:2c:e3:38:eb:c6:80:46:ce:29:d5:24:e1:88:61:ee:87:21: 35:81:66:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHyvD6hPJ2gLogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YTZkYTBmY2YtZmYzNS00Y2JhLTg5ZTQtMzEwOGIyNjRkYWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0s6pE5DgkmwN3TEg4/ZJ/pA21jA36OUt62Z BuidHGvTVpIZ3mhFqR7hrlsIRbUVGklro1RYtE6MEACIIuiJU/PmqbniGKmWp3M6 pBuC72TzpwHdXOoqSDRzyC3BNHCwicPjCi0hCMIZuhW04EE44Bw7Sih/landcYGa XCM+i7n4FvPXbp9bSLObZJDw9pA0xt/SaNFkB+OjPd0cjbQLli+27rBqFoNrEMk/ x8RYjx2ojUbYA7oQEPVPTGRRShIpvZYk2Lht25pojXGu+YxRBNbaMRCnwz1qeXlo auJNCzaMJnmvH7LhlXSgydC9qazId1TTkZ4KntAjVcOUOHma0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrWmepKjcAyw8d0eVlnCuW0h9gHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTg2MWYxMjUtOTNmOC0z YTkyLWIwN2UtYzc1ZGRhZjNhM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKp7kzeCQLR4m3cwmz9foC4PBlmbyqc6Kho5w0nDIizjl231SD9GYhae XQXYQejqi8oMf28bWeZN7sl6G5nz2/0uF5HQ2HYGaSeE5W95uVQ7g9isi17oWQBa 9sJl3UKsr9xtQ6Z7JbL3JoucNYE4dpmYmQGOSv2UX/0JwbNPQNHOGq1t+eSI/FvG fLdtDQ6Tq3QDniQMzrCH5MACSwpp9RJDUv8WfHt/Da98KX+GjH5H3V1F3wk9MlMv tD5ORYtJ+s57C4bAvylya9UkFFML1M5gxar9Ws5Aml1G+fX8XB89QSup+mvns1HL krcs4zjrxoBGzinVJOGIYe6HITWBZqA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:57 2025 by rpki-client