$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59b240e2-c8c8-3731-b29f-4f945b755994.roa File: 59b240e2-c8c8-3731-b29f-4f945b755994.roa (raw, json) Hash identifier: qrBwbb0SB6vH2g9az6hQTF3R6VkTwY4jmS1k/XfpIpQ= Subject key identifier: A3:8F:12:A2:05:97:B9:8E:7D:DD:B3:41:27:CC:80:EA:D2:08:1F:67 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206708AD155DFFD8FF7AE400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59b240e2-c8c8-3731-b29f-4f945b755994.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:08:ad:15:5d:ff:d8:ff:7a:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=1c8790ba-88ec-4e13-8573-5663d18ee4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:7e:33:1c:5b:fe:68:e3:7d:98:1c:66:f0: 4c:b7:06:5b:4a:41:6f:19:67:10:be:ae:3f:4e:29: 86:36:91:ad:8c:91:8c:e3:d7:fa:57:ab:92:e3:5a: 98:5d:4a:9d:73:30:69:23:83:9c:79:a6:98:e4:56: d8:26:ef:50:f5:39:b1:4f:d8:c6:0d:e8:73:93:f8: bc:e0:d2:f6:e7:f2:42:cb:e7:cf:ad:8b:c3:58:d8: ef:a1:30:77:75:e3:9b:3d:8d:54:c9:79:ff:00:85: 80:7d:f1:b2:e0:8f:5f:06:10:be:7a:03:d5:12:98: 45:2e:65:84:45:f2:3b:63:4c:8c:22:6e:f5:8a:48: 1f:47:94:a5:c1:81:f5:98:f2:ba:71:d0:22:d7:ee: 10:a0:20:dd:90:ce:50:77:2a:0d:9e:f7:c7:f2:f5: e8:a9:f8:c6:22:3f:80:11:48:2a:0f:b7:4c:17:27: d9:4d:5f:aa:d7:78:4c:cd:2e:fa:31:0e:fd:06:e2: 1c:f7:7d:94:54:48:8a:a2:3c:d6:56:6b:89:43:23: d1:be:7f:69:66:cc:75:2f:68:38:f7:a9:2e:13:76: 52:6c:55:af:e8:cc:1b:a9:b3:c1:29:73:b7:42:9c: 37:30:e9:a8:20:12:f4:5c:4f:8d:65:85:6b:22:9a: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8F:12:A2:05:97:B9:8E:7D:DD:B3:41:27:CC:80:EA:D2:08:1F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59b240e2-c8c8-3731-b29f-4f945b755994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b5:9b:d4:41:68:48:b3:65:7d:24:7c:a7:d7:df:5d:1b:89: e4:97:1f:6d:87:dd:f9:52:09:85:e9:1c:ec:a0:e6:1e:33:f7: e3:6b:f1:e7:a6:36:21:44:00:d0:15:fe:90:f2:88:77:9f:98: 2b:f2:62:62:fb:d2:f7:7e:49:4e:72:ba:05:e2:85:06:fd:6f: 60:2c:6d:a3:87:69:37:39:0d:20:9b:30:d8:fc:d2:35:be:ee: 80:2a:67:4c:29:9d:04:2b:fa:fa:6b:d4:47:51:a2:77:02:5e: d3:32:c3:71:0e:49:d4:b5:c6:0b:10:7c:4b:69:17:45:6b:22: 95:1a:63:7f:55:0a:10:44:2e:ef:8b:e9:13:73:eb:4c:9c:a1: 03:ff:e4:33:0d:f9:de:5a:7e:e0:df:83:0a:f5:68:1c:cc:f4: 2f:38:96:68:90:b9:e9:85:a5:c4:82:9d:18:aa:63:8a:e8:4e: 2c:54:22:f4:af:e7:f8:cc:11:87:bc:d7:3f:63:3b:cd:73:ce: 47:a5:5e:c7:bd:71:e6:ac:6a:88:81:eb:1d:72:ce:8d:d5:e9: e9:5e:3f:18:8f:83:9a:cc:dd:35:53:54:34:a8:63:14:84:ef: 42:f1:7e:e3:80:39:04:2d:e4:32:9a:ac:7e:0b:05:f8:9e:bd: 2c:1a:1d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwitFV3/2P965AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MWM4NzkwYmEtODhlYy00ZTEzLTg1NzMtNTY2M2QxOGVlNGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHN+Mxxb/mjjfZgcZvBMtwZbSkFvGWcQvq4/ TimGNpGtjJGM49f6V6uS41qYXUqdczBpI4OceaaY5FbYJu9Q9TmxT9jGDehzk/i8 4NL25/JCy+fPrYvDWNjvoTB3deObPY1UyXn/AIWAffGy4I9fBhC+egPVEphFLmWE RfI7Y0yMIm71ikgfR5SlwYH1mPK6cdAi1+4QoCDdkM5QdyoNnvfH8vXoqfjGIj+A EUgqD7dMFyfZTV+q13hMzS76MQ79BuIc932UVEiKojzWVmuJQyPRvn9pZsx1L2g4 96kuE3ZSbFWv6MwbqbPBKXO3Qpw3MOmoIBL0XE+NZYVrIppOqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOPEqIFl7mOfd2zQSfMgOrSCB9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTliMjQwZTItYzhjOC0z NzMxLWIyOWYtNGY5NDViNzU1OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa1m9RBaEizZX0kfKfX310bieSXH22H3flSCYXpHOyg5h4z9+Nr8eem NiFEANAV/pDyiHefmCvyYmL70vd+SU5yugXihQb9b2AsbaOHaTc5DSCbMNj80jW+ 7oAqZ0wpnQQr+vpr1EdRoncCXtMyw3EOSdS1xgsQfEtpF0VrIpUaY39VChBELu+L 6RNz60ycoQP/5DMN+d5afuDfgwr1aBzM9C84lmiQuemFpcSCnRiqY4roTixUIvSv 5/jMEYe81z9jO81zzkelXse9ceasaoiB6x1yzo3V6elePxiPg5rM3TVTVDSoYxSE 70LxfuOAOQQt5DKarH4LBfievSwaHeM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:51:20 2025 by rpki-client