$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6dd71a17-c9fc-3630-bc2b-26f647421d77.roa File: 6dd71a17-c9fc-3630-bc2b-26f647421d77.roa (raw, json) Hash identifier: 8QF/U1BXU4SPvJKzERIqN+P/V3MRQU9oMOtEu1usDS4= Subject key identifier: B2:06:45:91:3E:DF:50:CC:68:A7:7F:AD:0D:EF:4D:C8:32:7E:EE:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20D52C9D945808BD77B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6dd71a17-c9fc-3630-bc2b-26f647421d77.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.161.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:0d:52:c9:d9:45:80:8b:d7:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c2b3a51e-8bfb-4b50-a1fe-5b394faa0596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4f:af:f3:a1:8f:65:f9:1b:a9:8e:16:22:92: bb:05:06:80:5b:05:e8:23:4e:2e:5c:71:7d:99:18: b0:ad:74:f9:0f:36:10:0a:25:d0:f1:98:c5:85:cb: 20:df:e6:0b:56:b9:2c:16:68:2d:7e:59:a2:de:7a: 51:b1:bc:ad:40:d2:15:d1:94:4f:7b:68:77:03:43: f5:b3:ad:ec:74:61:e9:65:20:39:21:b5:95:5a:69: 98:86:85:ab:cf:c2:f5:bd:6a:88:f1:75:93:b0:24: f6:92:b2:3e:ba:2f:26:7b:e7:04:8e:5b:6c:34:22: a4:87:5c:0e:7f:41:f3:06:c0:fa:c3:01:d0:3d:55: ac:d9:b7:84:bd:e9:43:4a:74:83:b2:b5:a5:0f:4a: b6:09:59:f6:d7:dc:dc:54:ae:63:1c:61:5f:64:a9: 15:04:a8:1d:0c:19:71:46:c8:69:a1:46:d2:2d:65: e9:23:d6:c4:84:30:b7:a2:93:cb:f7:43:8b:d1:30: 16:82:54:40:6b:f6:78:94:09:01:9d:80:1b:51:fb: c4:81:c3:d4:92:c7:b1:eb:a5:18:93:18:ce:63:0b: 9f:f0:1c:93:80:c0:d8:52:16:54:a0:19:a2:86:9f: af:b2:d1:71:94:64:a4:e0:ad:db:e8:db:34:2b:fb: 11:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:06:45:91:3E:DF:50:CC:68:A7:7F:AD:0D:EF:4D:C8:32:7E:EE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6dd71a17-c9fc-3630-bc2b-26f647421d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c5:9a:2f:1a:0f:0e:14:34:02:82:3a:c3:62:d9:70:cf:d0: 52:a6:a8:e2:ab:ef:e5:61:46:c1:ba:64:2b:0d:b4:8e:40:10: 4a:db:2c:ce:8a:58:f9:9b:20:97:ad:7b:a9:77:20:7c:6b:e8: 88:06:53:89:06:f5:05:b9:6a:0e:3f:3b:33:5d:2e:ef:83:92: 6d:96:25:0b:97:b7:be:76:e0:45:2d:f6:2d:a0:c1:ff:cf:1b: 49:a7:24:01:e8:d7:91:e9:64:19:da:76:49:99:15:19:73:73: 42:47:28:ae:05:05:9f:b1:13:59:f1:c8:f2:3a:43:b8:db:58: 67:83:b5:7b:9d:d5:82:ce:84:b7:f0:86:83:4e:24:50:ff:e5: fb:d0:3f:86:52:f1:4c:22:1b:14:f8:1c:1c:6c:ec:eb:f4:e5: 0c:d3:a3:04:9b:4f:c7:9e:2f:9f:e1:b1:f5:ea:df:53:b9:2a: 35:4e:f7:18:15:b6:4f:08:0e:a2:00:e6:65:bf:a0:9e:cf:de: e6:81:83:38:1f:a0:bf:30:82:db:41:e6:6e:6d:8a:66:03:1c: 4b:5a:bb:39:99:68:02:88:9b:71:58:eb:0e:f6:0e:52:67:1e: 24:f6:7c:1c:37:bc:e7:6f:c6:9a:31:78:eb:ff:60:dd:4b:1d: ed:e2:98:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28g1SydlFgIvXe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzJiM2E1MWUtOGJmYi00YjUwLWExZmUtNWIzOTRmYWEwNTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE+v86GPZfkbqY4WIpK7BQaAWwXoI04uXHF9 mRiwrXT5DzYQCiXQ8ZjFhcsg3+YLVrksFmgtflmi3npRsbytQNIV0ZRPe2h3A0P1 s63sdGHpZSA5IbWVWmmYhoWrz8L1vWqI8XWTsCT2krI+ui8me+cEjltsNCKkh1wO f0HzBsD6wwHQPVWs2beEvelDSnSDsrWlD0q2CVn219zcVK5jHGFfZKkVBKgdDBlx RshpoUbSLWXpI9bEhDC3opPL90OL0TAWglRAa/Z4lAkBnYAbUfvEgcPUksex66UY kxjOYwuf8ByTgMDYUhZUoBmihp+vstFxlGSk4K3b6Ns0K/sRHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIGRZE+31DMaKd/rQ3vTcgyfu4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmRkNzFhMTctYzlmYy0z NjMwLWJjMmItMjZmNjQ3NDIxZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfFmi8aDw4UNAKCOsNi2XDP0FKmqOKr7+VhRsG6ZCsNtI5AEErbLM6K WPmbIJete6l3IHxr6IgGU4kG9QW5ag4/OzNdLu+Dkm2WJQuXt7524EUt9i2gwf/P G0mnJAHo15HpZBnadkmZFRlzc0JHKK4FBZ+xE1nxyPI6Q7jbWGeDtXud1YLOhLfw hoNOJFD/5fvQP4ZS8UwiGxT4HBxs7Ov05QzTowSbT8eeL5/hsfXq31O5KjVO9xgV tk8IDqIA5mW/oJ7P3uaBgzgfoL8wgttB5m5timYDHEtauzmZaAKIm3FY6w72DlJn HiT2fBw3vOdvxpoxeOv/YN1LHe3imKM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:33:25 2025 by rpki-client