$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/653c5f92-d341-3b25-b7ce-adc2a9f1ffce.roa File: 653c5f92-d341-3b25-b7ce-adc2a9f1ffce.roa (raw, json) Hash identifier: T6hm+uwBziE539xwb9f/TQfa0aEXC7lWiYJcACEZrBA= Subject key identifier: D1:4F:01:BF:2C:35:6A:81:77:17:88:18:B1:C8:63:59:9D:EC:F7:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670AB8BA74E94DEB2F1CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/653c5f92-d341-3b25-b7ce-adc2a9f1ffce.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0a:b8:ba:74:e9:4d:eb:2f:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=580c6c46-64be-49bc-a3eb-8ae01b625c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:10:2b:a2:c0:18:34:75:84:7e:99:29:95: 70:b0:11:b5:8e:83:77:31:ce:01:dc:28:79:8f:e7: 55:7e:17:d8:f5:f1:99:b0:3f:46:c8:ef:88:17:91: 67:ad:ca:bf:bf:04:82:15:c4:af:5f:7e:29:f6:33: 89:fa:73:6b:b4:da:80:65:95:76:50:09:57:f3:42: 28:35:9e:a0:b5:7d:de:47:cd:19:d0:61:78:b9:12: 31:21:ca:3c:2c:19:27:ea:4e:3c:ed:a0:b6:63:71: 71:fd:21:92:9c:d8:5d:ea:ec:13:66:a4:e0:c4:e7: 8b:3d:2c:2d:41:6a:5b:3a:2a:a4:f1:3f:bd:7e:4d: 02:bd:fb:29:88:eb:20:9f:b1:44:5d:50:3e:27:b0: 75:db:91:7a:76:bf:e8:da:ca:ba:1c:65:d5:c5:89: 55:d3:dc:66:09:43:73:78:00:4f:b5:b3:b3:d2:80: 23:e8:7e:56:b8:7d:34:ff:0e:48:ef:aa:30:e6:34: 00:d7:3c:24:14:f7:bc:28:54:69:8e:39:00:58:b4: d4:8a:a1:23:0e:24:83:93:df:8b:f4:24:18:58:f2: 07:b5:ad:a3:c7:ba:56:5f:6c:02:66:e9:29:c0:85: 6e:1d:65:3f:99:9d:01:97:d2:a3:72:a0:e1:7b:73: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4F:01:BF:2C:35:6A:81:77:17:88:18:B1:C8:63:59:9D:EC:F7:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/653c5f92-d341-3b25-b7ce-adc2a9f1ffce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7f:68:de:ed:8f:a6:c4:45:a4:8e:cd:e5:4b:23:cf:a7:45: 88:de:a3:0e:b6:a5:50:32:1f:d7:e2:e8:57:c4:f7:ea:5c:d3: ff:15:c7:7c:ab:8a:86:0c:ae:7d:52:57:28:99:b7:d9:50:e2: 44:35:ac:c8:c7:f5:55:f2:9f:cf:64:11:c2:29:79:47:cb:f7: 9d:e3:3b:2f:44:5c:b5:f9:6f:cd:45:16:d7:4a:84:6c:2d:d6: 47:c5:3b:ee:f7:df:cc:eb:b9:f0:1c:11:3f:08:5d:87:2e:3c: 22:c1:49:cf:34:26:13:ec:fa:ed:4f:6d:97:49:e9:9f:2e:07: 8f:48:78:db:90:71:4e:8d:6f:ae:66:9a:65:fb:2d:e2:74:7e: 6f:5d:ce:05:07:d5:f8:cf:bb:f7:06:fc:d6:6b:69:76:7d:dc: 6b:2b:1f:18:80:d9:0a:ed:19:89:de:b5:ea:d2:0b:12:d5:05: 31:59:15:59:07:30:2e:92:44:04:f8:54:6d:f7:0e:bd:7b:8f: 20:d6:e7:77:75:2f:6b:48:f6:67:f2:c4:94:54:12:d3:43:8a: a8:19:d8:f6:f1:f9:5e:29:d2:14:a8:3a:09:b3:f6:95:63:80: 25:41:60:24:09:06:e9:87:3c:bd:44:98:c2:41:15:ea:de:13: 91:19:94:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwq4unTpTesvHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NTgwYzZjNDYtNjRiZS00OWJjLWEzZWItOGFlMDFiNjI1YzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFMQK6LAGDR1hH6ZKZVwsBG1joN3Mc4B3Ch5 j+dVfhfY9fGZsD9GyO+IF5Fnrcq/vwSCFcSvX34p9jOJ+nNrtNqAZZV2UAlX80Io NZ6gtX3eR80Z0GF4uRIxIco8LBkn6k487aC2Y3Fx/SGSnNhd6uwTZqTgxOeLPSwt QWpbOiqk8T+9fk0CvfspiOsgn7FEXVA+J7B125F6dr/o2sq6HGXVxYlV09xmCUNz eABPtbOz0oAj6H5WuH00/w5I76ow5jQA1zwkFPe8KFRpjjkAWLTUiqEjDiSDk9+L 9CQYWPIHta2jx7pWX2wCZukpwIVuHWU/mZ0Bl9KjcqDhe3MijQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFPAb8sNWqBdxeIGLHIY1md7PfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjUzYzVmOTItZDM0MS0z YjI1LWI3Y2UtYWRjMmE5ZjFmZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1/aN7tj6bERaSOzeVLI8+nRYjeow62pVAyH9fi6FfE9+pc0/8Vx3yr ioYMrn1SVyiZt9lQ4kQ1rMjH9VXyn89kEcIpeUfL953jOy9EXLX5b81FFtdKhGwt 1kfFO+7338zrufAcET8IXYcuPCLBSc80JhPs+u1PbZdJ6Z8uB49IeNuQcU6Nb65m mmX7LeJ0fm9dzgUH1fjPu/cG/NZraXZ93GsrHxiA2QrtGYneterSCxLVBTFZFVkH MC6SRAT4VG33Dr17jyDW53d1L2tI9mfyxJRUEtNDiqgZ2Pbx+V4p0hSoOgmz9pVj gCVBYCQJBumHPL1EmMJBFereE5EZlMc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:28 2025 by rpki-client