$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60cf6ece-86ac-3b23-b6e6-b4128edd5028.roa File: 60cf6ece-86ac-3b23-b6e6-b4128edd5028.roa (raw, json) Hash identifier: tESADF5QBW9zvL1QKZw8w+CG9b0KdSr5vKfyJzS45CE= Subject key identifier: 77:AD:45:45:69:84:AB:B3:77:9D:9F:80:97:2F:61:5F:CC:7B:98:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F204137556013077E0B580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60cf6ece-86ac-3b23-b6e6-b4128edd5028.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.174.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:04:13:75:56:01:30:77:e0:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2c318311-a279-4150-9571-9ff6aa097497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:42:2d:04:a8:04:75:aa:83:94:b8:78:45:45: d6:44:ee:5e:d3:f0:9f:83:db:58:b7:9f:17:b7:93: 65:5d:45:7b:6a:03:5c:1a:29:10:5e:7d:8c:97:79: 94:b8:f5:8a:50:9f:b7:9f:b8:40:40:63:02:83:84: 34:31:d5:96:94:ab:01:ce:00:7b:a3:7d:f8:2a:c2: 5d:b2:6e:89:2a:39:d8:80:94:dc:e3:74:28:26:91: c0:95:13:b0:2a:e3:74:20:b3:39:5a:17:24:ad:78: 26:2b:16:ce:29:33:2d:3c:7e:8d:12:72:77:79:cc: 74:3c:8d:35:89:8b:9f:bb:bf:36:2d:2e:5d:a8:07: 2f:e7:f2:2c:29:58:c7:ac:37:d3:d5:cf:d9:63:87: 04:16:5c:05:d9:13:a0:e1:8c:c0:fb:1b:85:20:0d: 1b:44:65:8f:b5:11:76:99:91:92:22:eb:f6:bb:c7: 65:b1:57:e8:d2:d7:8e:45:67:b2:a7:fb:0e:5d:1e: c0:ca:75:3d:08:88:f9:4c:6c:0f:a8:13:8c:6f:67: 56:63:90:de:b8:20:33:7b:47:6f:2b:f9:b9:1c:ee: e2:f1:be:77:dd:e0:24:17:fa:a3:91:3b:42:f6:dd: f5:3c:28:eb:cc:23:17:16:a0:6b:7d:ae:77:a5:0c: ba:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AD:45:45:69:84:AB:B3:77:9D:9F:80:97:2F:61:5F:CC:7B:98:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60cf6ece-86ac-3b23-b6e6-b4128edd5028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:76:46:13:d0:a2:43:3a:87:20:54:d5:3b:e6:db:8e:3f:49: 91:ed:0a:c7:e8:8d:34:12:f8:03:f8:5f:e9:f8:54:a0:8e:2b: 1d:f2:43:03:c5:92:fe:60:3c:6e:be:ed:e7:a1:6b:f5:16:bf: d6:8a:7d:76:eb:cd:97:61:3e:9c:45:25:3f:f4:c9:36:5f:23: 28:42:ef:66:6a:f0:22:4b:75:dc:4e:39:68:21:70:67:61:02: 3e:19:a1:c3:f7:d1:3e:c4:2a:70:49:ee:e5:ca:41:e1:c3:30: c7:90:1f:a1:4b:bc:cc:1f:00:62:05:20:a0:c0:31:06:0a:51: 3d:b3:b0:84:ed:0a:d4:7b:f8:fb:6d:65:f8:3c:99:a4:b3:3f: ed:fb:be:5d:fd:3f:83:0b:4f:d5:22:43:db:e8:d3:1c:41:35: a2:d8:1b:7d:f0:2a:e8:bc:99:97:37:60:3f:79:99:1e:34:35: 9c:8b:80:31:2d:c1:0a:92:eb:fd:e7:56:05:64:1b:bc:fd:b8: 25:60:7d:fd:49:cc:ca:4a:33:6e:b9:bf:82:71:2a:c3:7c:21: 96:79:24:6c:d7:d9:1b:6e:f8:de:25:e3:f5:92:c8:c9:f0:28: 76:a9:17:8c:0a:62:ae:12:a4:e2:22:c6:95:d5:44:ca:cc:a8: 31:da:5c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gQTdVYBMHfgtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmMzMTgzMTEtYTI3OS00MTUwLTk1NzEtOWZmNmFhMDk3NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUItBKgEdaqDlLh4RUXWRO5e0/Cfg9tYt58X t5NlXUV7agNcGikQXn2Ml3mUuPWKUJ+3n7hAQGMCg4Q0MdWWlKsBzgB7o334KsJd sm6JKjnYgJTc43QoJpHAlROwKuN0ILM5WhckrXgmKxbOKTMtPH6NEnJ3ecx0PI01 iYufu782LS5dqAcv5/IsKVjHrDfT1c/ZY4cEFlwF2ROg4YzA+xuFIA0bRGWPtRF2 mZGSIuv2u8dlsVfo0teORWeyp/sOXR7AynU9CIj5TGwPqBOMb2dWY5DeuCAze0dv K/m5HO7i8b533eAkF/qjkTtC9t31PCjrzCMXFqBrfa53pQy6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHetRUVphKuzd52fgJcvYV/Me5iYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjBjZjZlY2UtODZhYy0z YjIzLWI2ZTYtYjQxMjhlZGQ1MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq5bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx2RhPQokM6hyBU1Tvm244/SZHtCsfojTQS+AP4X+n4VKCOKx3yQwPF kv5gPG6+7eeha/UWv9aKfXbrzZdhPpxFJT/0yTZfIyhC72Zq8CJLddxOOWghcGdh Aj4ZocP30T7EKnBJ7uXKQeHDMMeQH6FLvMwfAGIFIKDAMQYKUT2zsITtCtR7+Ptt Zfg8maSzP+37vl39P4MLT9UiQ9vo0xxBNaLYG33wKui8mZc3YD95mR40NZyLgDEt wQqS6/3nVgVkG7z9uCVgff1JzMpKM265v4JxKsN8IZZ5JGzX2Rtu+N4l4/WSyMnw KHapF4wKYq4SpOIixpXVRMrMqDHaXCM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:54:16 2025 by rpki-client