$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75d3fb69-3aa0-3cf9-8054-b85f7a3be938.roa File: 75d3fb69-3aa0-3cf9-8054-b85f7a3be938.roa (raw, json) Hash identifier: wejanIDlPUhuDfDc8OD4qprccgiV3A50nb/C3FkOcfw= Subject key identifier: 8D:A0:BE:4D:F8:F2:F0:4F:53:FA:E2:97:05:C2:F9:5C:CC:0B:A0:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29CD3EA875DC884901F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75d3fb69-3aa0-3cf9-8054-b85f7a3be938.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.172.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9c:d3:ea:87:5d:c8:84:90:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7c36685a-f0a3-4b68-bc24-9e4a73b54a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6e:f5:ae:30:a5:fe:4e:3e:7f:66:a7:02:e2: 22:92:e2:40:6f:f9:df:fa:8a:af:e9:5a:e0:b2:a3: 59:bd:66:ab:6b:25:b0:cf:6e:75:12:df:6c:28:66: 9e:3a:89:37:63:0d:ca:d1:1a:60:ec:b4:a1:8d:f4: 2a:0a:52:59:bd:18:66:ed:5c:25:d6:7e:a9:59:4c: f7:0e:5a:47:e2:f4:14:1a:c9:d6:ca:9c:d9:c0:35: 72:83:39:95:d0:68:b9:dc:24:0f:a1:d6:0e:67:d8: 2b:ea:ae:df:d5:4c:cd:71:9b:0b:e4:46:85:7c:2b: 7b:54:a0:2d:a3:09:a3:7f:f7:3f:28:4f:ff:08:a8: c0:fc:7a:4c:2b:84:9e:ac:17:7c:e6:57:8c:8a:fb: 58:de:b4:e2:d1:ab:dc:2e:e8:6f:24:61:5b:0d:5f: e6:f2:ed:8f:40:39:c7:98:c3:02:bc:96:ac:3a:37: ef:a6:0d:fe:83:c8:e7:6d:33:1b:71:e9:7f:e4:4f: 86:5c:da:d6:e7:94:31:5f:3a:ab:2c:c7:a9:c4:40: ca:d7:b6:d1:18:1d:62:2a:81:23:5b:a7:21:18:c2: 81:f3:0a:f9:ac:ae:ad:8f:d9:ca:b0:fd:f7:2d:4e: ee:6b:d1:e2:13:fe:a4:46:3f:ad:41:cb:91:9a:46: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A0:BE:4D:F8:F2:F0:4F:53:FA:E2:97:05:C2:F9:5C:CC:0B:A0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75d3fb69-3aa0-3cf9-8054-b85f7a3be938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:72:55:1d:70:e5:09:66:98:ee:b8:65:67:71:3c:9d:c4:ec: d1:a5:b9:cd:4e:24:b5:ed:0a:81:00:4f:1a:50:18:8f:32:bc: 45:31:fd:1c:5a:9d:47:39:5b:5b:79:57:84:13:0d:3c:b5:77: ed:38:5f:13:80:30:6a:e7:fa:98:ab:c5:66:a7:65:4a:3d:2e: 19:6e:d6:34:1e:75:01:37:c4:51:d9:b7:70:78:a0:d4:0a:8a: 88:b7:17:d0:06:cb:87:58:ea:16:9c:26:83:91:ec:42:7c:7a: 0e:88:46:0f:47:57:e8:f5:51:ec:fe:2c:94:87:a2:ed:75:8f: 6c:a8:1b:c4:ac:b4:40:86:4a:8c:95:1a:68:00:0c:cf:cc:24: ac:36:21:dd:8a:2e:a2:8b:bf:ba:67:e3:de:27:56:fd:9b:1e: dd:f5:aa:95:c9:87:19:ed:e2:73:2f:99:f7:d0:63:ab:b4:44: d3:54:e8:f3:5c:52:55:24:89:4c:ba:9b:bf:78:e5:d9:71:1c: 5e:82:a8:50:5a:52:2c:28:b0:63:11:5a:36:00:35:cc:dc:3b: 64:82:b1:6c:9b:05:b9:11:5b:55:7f:02:e2:07:ef:af:ef:84: c6:71:59:78:e4:0b:27:3c:39:f6:bd:e6:4c:09:e9:42:20:70: c7:03:5f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pzT6oddyISQHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2MzNjY4NWEtZjBhMy00YjY4LWJjMjQtOWU0YTczYjU0YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt271rjCl/k4+f2anAuIikuJAb/nf+oqv6Vrg sqNZvWarayWwz251Et9sKGaeOok3Yw3K0Rpg7LShjfQqClJZvRhm7Vwl1n6pWUz3 DlpH4vQUGsnWypzZwDVygzmV0Gi53CQPodYOZ9gr6q7f1UzNcZsL5EaFfCt7VKAt owmjf/c/KE//CKjA/HpMK4SerBd85leMivtY3rTi0avcLuhvJGFbDV/m8u2PQDnH mMMCvJasOjfvpg3+g8jnbTMbcel/5E+GXNrW55QxXzqrLMepxEDK17bRGB1iKoEj W6chGMKB8wr5rK6tj9nKsP33LU7ua9HiE/6kRj+tQcuRmkZIOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2gvk348vBPU/rilwXC+VzMC6CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzVkM2ZiNjktM2FhMC0z Y2Y5LTgwNTQtYjg1ZjdhM2JlOTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxyVR1w5QlmmO64ZWdxPJ3E7NGluc1OJLXtCoEATxpQGI8yvEUx/Rxa nUc5W1t5V4QTDTy1d+04XxOAMGrn+pirxWanZUo9Lhlu1jQedQE3xFHZt3B4oNQK ioi3F9AGy4dY6hacJoOR7EJ8eg6IRg9HV+j1Uez+LJSHou11j2yoG8SstECGSoyV GmgADM/MJKw2Id2KLqKLv7pn494nVv2bHt31qpXJhxnt4nMvmffQY6u0RNNU6PNc UlUkiUy6m7945dlxHF6CqFBaUiwosGMRWjYANczcO2SCsWybBbkRW1V/AuIH76/v hMZxWXjkCyc8Ofa95kwJ6UIgcMcDX1U= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:09 2025 by rpki-client