$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/709e44f1-ab09-32fc-823f-6281d2b7af51.roa File: 709e44f1-ab09-32fc-823f-6281d2b7af51.roa (raw, json) Hash identifier: vD+R4J9/1z8GPdkF3TeroQPPoqaNvHzkmxGwrUP5i+E= Subject key identifier: AF:79:F2:E1:8C:32:25:9F:9D:05:FB:39:68:A2:AD:0B:E6:EF:C7:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206703C3EA8B1D5A4D7239B8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/709e44f1-ab09-32fc-823f-6281d2b7af51.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:03:c3:ea:8b:1d:5a:4d:72:39:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=e41f79fc-fd14-4fe5-83b9-27b816c90fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:78:59:bb:9b:93:e5:8c:83:93:39:93:f6: 8c:c1:11:0a:c9:72:21:ad:5d:e1:7c:10:89:2b:a6: be:9f:f2:70:48:18:da:45:98:1b:0b:bd:8d:c6:75: 12:70:0c:fc:9e:9d:6f:d8:1e:86:1f:5f:34:f8:0e: aa:1a:5c:06:c5:51:9c:ba:db:d2:af:d9:74:10:7f: b0:99:ce:80:49:98:55:e3:be:c7:63:53:d7:d0:08: ac:44:d3:fd:d0:e7:58:ff:a7:9b:a5:26:a5:42:92: 67:e2:d7:cd:50:c4:79:fb:13:9a:57:3b:79:8f:4f: e6:48:54:d0:c3:37:11:36:cf:66:0e:41:02:0b:24: a8:fb:e8:00:9b:da:84:4c:27:5c:42:97:bc:d9:e4: 8e:14:f0:13:2c:b9:4c:b5:28:6b:91:ce:0f:f3:c2: 50:52:a5:63:c6:f1:13:9a:9c:b4:b7:52:35:b1:ed: bd:59:c0:26:af:7a:d8:58:91:93:d3:f7:57:3e:4d: 68:00:9a:04:25:21:49:9b:c3:77:d6:27:a8:f7:da: d9:b1:a8:33:e6:7b:fc:6f:a9:d1:cc:81:59:59:3f: 68:b6:72:47:7f:83:e0:f5:15:96:57:b8:c6:9a:1d: e1:81:4e:78:ad:8d:88:47:aa:8a:52:9b:5b:26:b1: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:79:F2:E1:8C:32:25:9F:9D:05:FB:39:68:A2:AD:0B:E6:EF:C7:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/709e44f1-ab09-32fc-823f-6281d2b7af51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:34:d7:8b:3a:ac:b5:e2:7e:5f:4d:88:f1:51:b7:20:2a:81: e9:35:dd:00:6d:7b:d6:b0:36:e3:b3:a2:87:03:d4:48:cc:a1: 0b:a1:f4:f6:da:03:27:54:60:a8:9e:3b:63:c1:e4:55:b7:c1: aa:31:09:e6:85:3d:df:32:ee:81:82:b4:81:ab:18:43:44:d0: bb:c3:76:a4:43:f4:90:3f:47:3b:89:83:cb:de:ea:f5:a5:af: 4f:87:5f:da:cb:dd:bf:97:52:91:0b:2c:d0:4a:bf:13:55:d0: 31:31:95:74:9e:3d:b9:d2:cc:21:92:a8:9b:6c:60:fb:b7:d4: 4d:ba:76:b5:85:67:9b:a2:b3:71:28:e1:ff:2e:f4:ad:09:11: 79:98:2a:b8:cb:d5:30:b8:2a:cd:ad:4f:b5:fe:1d:e6:a8:04: 6c:33:80:f3:80:62:e2:ff:58:0d:bc:90:dc:b2:b9:28:f6:2c: 10:18:8a:ca:e8:a7:88:32:8f:0b:96:80:20:93:18:37:4d:3e: d6:61:f1:08:a5:c8:5d:a0:0f:e7:6b:a7:27:5e:f9:08:37:dd: 99:33:33:b0:33:11:34:30:38:49:fd:21:38:20:81:07:8a:44: 6c:92:7f:09:b1:c8:a2:32:b1:d5:b1:3e:25:f5:c5:90:4e:d5: 8b:9b:ec:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwPD6osdWk1yObgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTQxZjc5ZmMtZmQxNC00ZmU1LTgzYjktMjdiODE2YzkwZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbd4Wbubk+WMg5M5k/aMwREKyXIhrV3hfBCJ K6a+n/JwSBjaRZgbC72NxnUScAz8np1v2B6GH180+A6qGlwGxVGcutvSr9l0EH+w mc6ASZhV477HY1PX0AisRNP90OdY/6ebpSalQpJn4tfNUMR5+xOaVzt5j0/mSFTQ wzcRNs9mDkECCySo++gAm9qETCdcQpe82eSOFPATLLlMtShrkc4P88JQUqVjxvET mpy0t1I1se29WcAmr3rYWJGT0/dXPk1oAJoEJSFJm8N31ieo99rZsagz5nv8b6nR zIFZWT9otnJHf4Pg9RWWV7jGmh3hgU54rY2IR6qKUptbJrHnvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK958uGMMiWfnQX7OWiirQvm78dVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzA5ZTQ0ZjEtYWIwOS0z MmZjLTgyM2YtNjI4MWQyYjdhZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk014s6rLXifl9NiPFRtyAqgek13QBte9awNuOzoocD1EjMoQuh9Pba AydUYKieO2PB5FW3waoxCeaFPd8y7oGCtIGrGENE0LvDdqRD9JA/RzuJg8ve6vWl r0+HX9rL3b+XUpELLNBKvxNV0DExlXSePbnSzCGSqJtsYPu31E26drWFZ5uis3Eo 4f8u9K0JEXmYKrjL1TC4Ks2tT7X+HeaoBGwzgPOAYuL/WA28kNyyuSj2LBAYisro p4gyjwuWgCCTGDdNPtZh8QilyF2gD+drpyde+Qg33ZkzM7AzETQwOEn9ITgggQeK RGySfwmxyKIysdWxPiX1xZBO1Yub7HU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:26 2025 by rpki-client