$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b5dbffb-c1e3-3870-8486-c69c735be54b.roa File: 7b5dbffb-c1e3-3870-8486-c69c735be54b.roa (raw, json) Hash identifier: gIX/WQS7B5qThY3tWlEVxUsuDO7XYAeWD+WM7BlmG0E= Subject key identifier: 16:D0:DD:92:6B:D6:5F:A6:6E:11:5D:11:2A:3E:EE:ED:DE:6B:54:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B98CB0627F1A21BEA4A59BF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b5dbffb-c1e3-3870-8486-c69c735be54b.roa Signing time: Tue 21 Oct 2025 15:59:38 +0000 ROA not before: Tue 21 Oct 2025 15:59:38 +0000 ROA not after: Mon 19 Jan 2026 16:59:38 +0000 asID: 22773 IP address blocks: 70.173.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:cb:06:27:f1:a2:1b:ea:4a:59:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 21 15:59:38 2025 GMT Not After : Jan 19 16:59:38 2026 GMT Subject: CN=1769a4e9-8f91-49ab-a26b-3c30458f9c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4c:20:0b:ef:79:35:2c:98:2d:d4:c5:8a:c8: 12:22:56:aa:50:45:02:17:52:9e:02:32:6b:86:e7: 9b:cc:75:c4:0d:ed:dd:f3:d7:af:81:ea:15:8f:2e: 13:c2:3b:54:a7:ee:ad:12:01:8d:67:03:3b:d0:65: 6f:1e:2b:4e:dd:be:ad:6b:c3:5a:b4:e4:4c:06:4d: 38:5c:08:43:fe:47:cc:6b:04:09:27:78:94:ee:cd: cc:ff:7c:35:a7:4a:0d:c8:f0:1b:7b:80:b5:3a:2c: 15:74:68:65:b8:79:c2:47:a5:94:4d:98:c6:eb:ed: 1e:0e:42:2e:4e:a8:2c:b1:b6:8d:7b:27:db:9e:0f: 06:04:7c:a9:88:33:67:97:ad:57:f6:4a:29:75:53: c3:43:6c:cf:32:95:c0:59:61:6c:ff:4a:38:ad:96: 89:48:9d:8b:b4:99:4f:1c:6c:ff:17:d5:b7:7a:e8: bc:f6:70:d2:43:9c:01:85:37:4e:6e:31:64:7c:8d: cf:06:b4:77:ba:e8:1e:da:98:e8:36:96:0e:b9:64: fb:58:16:3b:33:47:f5:9c:54:50:d1:02:94:ee:a7: dd:29:d0:5b:d5:ce:85:0c:fd:de:67:8a:59:18:c8: a2:99:91:56:71:ff:72:89:8a:59:42:3d:e5:45:4b: d7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D0:DD:92:6B:D6:5F:A6:6E:11:5D:11:2A:3E:EE:ED:DE:6B:54:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b5dbffb-c1e3-3870-8486-c69c735be54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:4a:1b:5b:18:bb:bf:a8:e2:a0:b2:45:72:00:0f:39:b8:21: 9d:3b:88:40:1e:94:27:6c:6f:24:ab:1e:3e:fe:b0:cf:7a:94: b4:37:d1:9a:59:81:7c:41:1b:ca:4d:7a:a4:e7:72:a2:31:65: 37:9a:d8:da:42:5e:49:87:b6:d1:43:b3:b7:08:f9:c3:80:2b: 4e:10:0d:e9:9c:33:db:29:54:31:6e:42:64:7b:9d:25:c2:d1: 09:e3:fc:97:18:68:37:7b:d7:e4:63:e4:9e:9b:72:a7:17:9e: 9a:79:dc:ea:34:bf:56:00:91:65:00:19:ab:71:d1:a1:b9:7f: 6e:d4:2f:2b:bd:98:da:5c:d8:68:d1:42:ba:2c:00:91:8c:b4: 10:58:81:0d:c2:95:e6:d2:47:8a:fc:20:9d:e0:e6:ac:61:23: 3c:ae:5c:43:cf:1b:58:56:b7:b2:28:28:ab:cc:41:73:1b:f9: fe:de:74:eb:dc:2b:0c:8d:f8:14:eb:8a:76:33:80:96:04:05: 39:f7:f3:c4:e1:e7:20:b2:a6:56:33:e0:c3:d2:b1:14:3b:d4: 32:0d:b9:9e:c4:98:51:68:ff:46:f0:e4:ef:88:2a:d7:16:a0: 1e:11:be:df:56:de:0a:a3:4b:9c:05:f6:12:65:97:ff:f0:68: f8:91:12:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYywYn8aIb6kpZv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyMTE1NTkzOFoXDTI2MDExOTE2NTkzOFowLzEtMCsGA1UEAxMk MTc2OWE0ZTktOGY5MS00OWFiLWEyNmItM2MzMDQ1OGY5YzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUwgC+95NSyYLdTFisgSIlaqUEUCF1KeAjJr huebzHXEDe3d89evgeoVjy4TwjtUp+6tEgGNZwM70GVvHitO3b6ta8NatORMBk04 XAhD/kfMawQJJ3iU7s3M/3w1p0oNyPAbe4C1OiwVdGhluHnCR6WUTZjG6+0eDkIu TqgssbaNeyfbng8GBHypiDNnl61X9kopdVPDQ2zPMpXAWWFs/0o4rZaJSJ2LtJlP HGz/F9W3eui89nDSQ5wBhTdObjFkfI3PBrR3uuge2pjoNpYOuWT7WBY7M0f1nFRQ 0QKU7qfdKdBb1c6FDP3eZ4pZGMiimZFWcf9yiYpZQj3lRUvXswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbQ3ZJr1l+mbhFdESo+7u3ea1S1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2I1ZGJmZmItYzFlMy0z ODcwLTg0ODYtYzY5YzczNWJlNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlKG1sYu7+o4qCyRXIADzm4IZ07iEAelCdsbySrHj7+sM96lLQ30ZpZ gXxBG8pNeqTncqIxZTea2NpCXkmHttFDs7cI+cOAK04QDemcM9spVDFuQmR7nSXC 0Qnj/JcYaDd71+Rj5J6bcqcXnpp53Oo0v1YAkWUAGatx0aG5f27ULyu9mNpc2GjR QrosAJGMtBBYgQ3ClebSR4r8IJ3g5qxhIzyuXEPPG1hWt7IoKKvMQXMb+f7edOvc KwyN+BTrinYzgJYEBTn388Th5yCyplYz4MPSsRQ71DINuZ7EmFFo/0bw5O+IKtcW oB4Rvt9W3gqjS5wF9hJll//waPiREhI= -----END CERTIFICATE-----Generated at Mon Nov 3 17:16:08 2025 by rpki-client