$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ae8b2ef-bc7a-3117-b492-be3d4a3d8e4c.roa File: 7ae8b2ef-bc7a-3117-b492-be3d4a3d8e4c.roa (raw, json) Hash identifier: NfTijpBlSq0OWPkHkPlE1I56/k2V+QRru/9g075LFzU= Subject key identifier: 3A:B3:F2:3A:83:FC:DA:BF:52:A2:10:83:DF:97:4B:61:D9:21:86:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F239728C92AEEEE67EEFC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ae8b2ef-bc7a-3117-b492-be3d4a3d8e4c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.181.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:39:72:8c:92:ae:ee:e6:7e:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=03407980-6b89-4fd6-b9ae-7bfa0a3bf1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:52:73:0b:5c:87:a9:76:38:b3:13:af:f7: f1:0e:6d:a9:d7:be:74:d4:86:10:22:36:eb:98:f5: 19:c1:8c:be:92:69:71:c5:98:6e:96:2a:72:8f:1d: 21:e7:5f:b3:38:94:67:02:f6:ca:17:00:50:14:24: b6:f8:40:33:3c:d7:10:8e:6e:53:ad:2a:b2:8a:08: b0:6d:56:a7:41:0b:ef:60:21:b1:3c:bb:27:b7:73: 7a:91:5c:e4:62:ed:9f:f2:90:79:44:5c:82:6e:04: b8:0d:bc:5e:c4:00:1f:44:ca:68:d9:74:19:76:f5: 40:05:65:ab:c0:1c:d8:43:42:c4:c1:96:b5:14:ec: 03:da:59:9d:9d:37:21:60:7a:6d:44:74:43:53:45: 3f:39:f5:49:2b:80:99:30:04:f4:fb:5c:67:a5:e6: 5a:e3:0f:32:ec:24:6f:2f:97:ab:17:2c:19:9b:d6: f6:08:6e:af:81:06:9e:7d:c2:d8:73:63:1f:5e:c6: 78:57:70:06:f6:91:de:8b:6c:fd:ba:a7:15:10:1f: 6c:ec:9f:f2:02:f7:8c:4d:14:58:67:ca:7a:50:07: 0b:85:cc:92:14:36:a6:6e:22:9a:ac:73:b5:76:f4: 68:2c:29:eb:a0:6c:89:83:43:16:5c:90:13:24:74: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B3:F2:3A:83:FC:DA:BF:52:A2:10:83:DF:97:4B:61:D9:21:86:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ae8b2ef-bc7a-3117-b492-be3d4a3d8e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:db:65:90:24:a5:05:08:d8:8e:c4:de:b6:5b:bf:f1:d8:11: fb:84:22:6e:9e:80:c9:13:9d:20:cd:dd:e3:ed:89:bf:ce:09: 9e:f2:dc:09:a1:a7:23:d3:96:d0:6c:69:d2:7a:92:e7:da:62: 04:a9:4c:4e:47:1f:9f:ae:66:37:3c:14:95:9d:23:a6:ce:97: f4:91:b0:cc:59:93:eb:ed:f5:ae:0c:51:fb:e4:e0:90:86:5d: b5:1e:cd:22:87:e9:3e:cb:b7:a1:be:0b:7c:1e:cb:3d:11:c1: ec:7b:b0:9b:5a:57:67:22:5e:99:93:a4:45:ca:bf:67:40:f3: 29:88:8b:44:0b:37:61:3c:a4:42:f2:4c:c1:db:55:39:23:c2: 13:9a:0c:75:54:b5:34:18:c6:6d:96:7b:f8:6a:c5:75:c2:b0: 31:be:51:65:48:c2:c8:23:01:9b:b7:0a:45:b1:9b:30:0e:2d: 0b:90:d3:3e:60:24:49:85:e5:19:fa:e9:d6:0a:7e:28:df:08: 04:e3:0a:21:e8:d0:db:be:38:a8:77:91:c6:33:32:47:7d:0e: 1e:07:03:37:98:15:2d:87:64:7d:e6:18:eb:e1:b5:53:75:04: b8:1d:02:e6:43:37:8b:8f:02:d2:5b:66:43:22:09:93:0a:d8: 10:ac:47:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jlyjJKu7uZ+78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDM0MDc5ODAtNmI4OS00ZmQ2LWI5YWUtN2JmYTBhM2JmMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHBScwtch6l2OLMTr/fxDm2p17501IYQIjbr mPUZwYy+kmlxxZhulipyjx0h51+zOJRnAvbKFwBQFCS2+EAzPNcQjm5TrSqyigiw bVanQQvvYCGxPLsnt3N6kVzkYu2f8pB5RFyCbgS4DbxexAAfRMpo2XQZdvVABWWr wBzYQ0LEwZa1FOwD2lmdnTchYHptRHRDU0U/OfVJK4CZMAT0+1xnpeZa4w8y7CRv L5erFywZm9b2CG6vgQaefcLYc2MfXsZ4V3AG9pHei2z9uqcVEB9s7J/yAveMTRRY Z8p6UAcLhcySFDambiKarHO1dvRoLCnroGyJg0MWXJATJHSnwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqz8jqD/Nq/UqIQg9+XS2HZIYYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2FlOGIyZWYtYmM3YS0z MTE3LWI0OTItYmUzZDRhM2Q4ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/bZZAkpQUI2I7E3rZbv/HYEfuEIm6egMkTnSDN3ePtib/OCZ7y3Amh pyPTltBsadJ6kufaYgSpTE5HH5+uZjc8FJWdI6bOl/SRsMxZk+vt9a4MUfvk4JCG XbUezSKH6T7Lt6G+C3weyz0Rwex7sJtaV2ciXpmTpEXKv2dA8ymIi0QLN2E8pELy TMHbVTkjwhOaDHVUtTQYxm2We/hqxXXCsDG+UWVIwsgjAZu3CkWxmzAOLQuQ0z5g JEmF5Rn66dYKfijfCATjCiHo0Nu+OKh3kcYzMkd9Dh4HAzeYFS2HZH3mGOvhtVN1 BLgdAuZDN4uPAtJbZkMiCZMK2BCsR6I= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:46 2025 by rpki-client