$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/728234a4-fe67-3eff-abde-0f78ba33da74.roa File: 728234a4-fe67-3eff-abde-0f78ba33da74.roa (raw, json) Hash identifier: 8I5xgFFnB3vLuPYnXL67BHm/afRSpofKXRk8RwCR+A4= Subject key identifier: 29:85:D2:0A:3A:E1:8F:73:0C:C5:56:13:3F:2C:2B:34:42:CD:77:AD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7C373DFA05DF5ADEBFC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/728234a4-fe67-3eff-abde-0f78ba33da74.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:7c:37:3d:fa:05:df:5a:de:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=ef8d1e19-2517-4247-98c8-6bb0e178d47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d5:33:b9:ac:2d:cc:e5:9f:b2:fd:f0:84:ab: 54:23:18:c0:45:53:7c:09:d1:fc:57:80:7d:de:36: 8c:6f:47:16:cf:c9:20:6d:9b:b1:ff:4e:39:cf:33: bb:98:2e:0b:5f:f7:d5:5c:d0:c5:bf:71:a6:89:4a: cf:71:90:60:a3:7d:f9:00:7d:ea:bf:36:37:e1:34: bf:22:be:95:c1:e1:92:b6:e0:48:0e:a8:63:38:48: 4b:49:3f:01:97:b7:25:15:84:ed:ea:5a:33:95:70: f4:98:b4:1a:03:73:a0:f0:a0:f3:28:c0:88:09:39: d5:91:3d:a3:ea:99:84:0a:44:ba:52:b6:14:34:b4: 23:6b:69:29:e8:39:40:48:73:28:33:0c:90:ef:39: 47:49:cf:f8:9b:50:30:35:98:3d:49:03:88:b5:3f: 83:da:c2:0a:70:8f:99:84:c5:ee:d8:68:46:3e:c6: 77:be:f6:3f:86:f3:64:d8:03:aa:04:f9:4b:d5:ae: 95:90:41:56:76:24:fe:7d:cb:0d:69:e9:a0:b2:34: 00:0e:50:67:f3:1e:df:fa:55:b2:9d:c2:e1:26:bd: a2:96:5d:d8:95:56:bb:1b:a7:34:98:18:f3:f9:d9: 6d:93:58:c2:1e:3a:94:63:19:83:ae:fa:ab:6a:66: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:85:D2:0A:3A:E1:8F:73:0C:C5:56:13:3F:2C:2B:34:42:CD:77:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/728234a4-fe67-3eff-abde-0f78ba33da74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:34:83:dd:1e:69:65:26:28:fd:2d:21:32:99:07:6e:37:8f: 52:18:39:0a:89:68:70:a8:cf:b2:be:19:9e:8b:53:de:3b:f7: 8d:5d:1e:07:17:e6:7a:42:c6:fc:a9:14:9c:a3:3c:32:4f:1a: 82:dd:76:58:d2:6f:e7:a0:e2:a5:d8:2f:41:f7:fa:d4:39:4d: 5d:fb:a1:5a:a2:eb:d5:ad:50:93:92:d3:2c:03:24:e8:94:a0: f2:ca:ac:d4:4f:d3:84:f6:c9:19:92:ce:6a:9c:66:d3:f4:5c: 59:ac:11:1a:07:49:1b:42:5e:28:9a:8f:c1:b3:0d:1b:95:85: cf:71:05:a5:d8:53:54:8a:5d:b6:2d:ee:16:89:fe:5f:d0:77: 18:c0:de:75:98:3b:f8:b8:7d:fb:70:19:26:6b:43:c3:5a:e2: 53:78:2c:32:9e:6c:6c:ea:4c:79:ab:cf:18:2a:70:77:29:f8: fc:30:77:26:dd:9e:eb:e7:9c:a2:02:59:09:84:08:b4:34:29: d1:df:ca:65:a2:32:69:d6:e1:e9:28:ac:cc:84:a1:18:a9:35: 6b:8a:28:8d:56:c0:d4:fc:50:d6:ee:a5:5e:30:30:15:36:9b: f6:6c:ed:54:eb:8e:01:ee:3f:f0:77:00:d9:15:d8:e4:d8:b9: 70:88:1f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHw3PfoF31rev8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZWY4ZDFlMTktMjUxNy00MjQ3LTk4YzgtNmJiMGUxNzhkNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtUzuawtzOWfsv3whKtUIxjARVN8CdH8V4B9 3jaMb0cWz8kgbZux/045zzO7mC4LX/fVXNDFv3GmiUrPcZBgo335AH3qvzY34TS/ Ir6VweGStuBIDqhjOEhLST8Bl7clFYTt6lozlXD0mLQaA3Og8KDzKMCICTnVkT2j 6pmECkS6UrYUNLQja2kp6DlASHMoMwyQ7zlHSc/4m1AwNZg9SQOItT+D2sIKcI+Z hMXu2GhGPsZ3vvY/hvNk2AOqBPlL1a6VkEFWdiT+fcsNaemgsjQADlBn8x7f+lWy ncLhJr2ill3YlVa7G6c0mBjz+dltk1jCHjqUYxmDrvqramZCxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmF0go64Y9zDMVWEz8sKzRCzXetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzI4MjM0YTQtZmU2Ny0z ZWZmLWFiZGUtMGY3OGJhMzNkYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrD9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC00g90eaWUmKP0tITKZB243j1IYOQqJaHCoz7K+GZ6LU947941dHgcX 5npCxvypFJyjPDJPGoLddljSb+eg4qXYL0H3+tQ5TV37oVqi69WtUJOS0ywDJOiU oPLKrNRP04T2yRmSzmqcZtP0XFmsERoHSRtCXiiaj8GzDRuVhc9xBaXYU1SKXbYt 7haJ/l/QdxjA3nWYO/i4fftwGSZrQ8Na4lN4LDKebGzqTHmrzxgqcHcp+Pwwdybd nuvnnKICWQmECLQ0KdHfymWiMmnW4ekorMyEoRipNWuKKI1WwNT8UNbupV4wMBU2 m/Zs7VTrjgHuP/B3ANkV2OTYuXCIHzw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:05 2025 by rpki-client