$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cc80c21-5ac3-316e-aa9b-4745d528c3e5.roa File: 7cc80c21-5ac3-316e-aa9b-4745d528c3e5.roa (raw, json) Hash identifier: rT2TPq/z7N4Z2paUrRJ8foKzYhGO0d+hXnRd2/QK/nA= Subject key identifier: E3:24:3A:5C:6A:12:E2:9E:82:B5:A2:C7:AE:8A:A8:50:4C:58:4E:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670B3682A29484023B7780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cc80c21-5ac3-316e-aa9b-4745d528c3e5.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0b:36:82:a2:94:84:02:3b:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=2a6fae4c-bf6a-42cb-8a0a-730bc3b47240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:37:2f:38:8a:25:40:ba:7c:64:3d:1a:fe:78: d3:cd:18:b2:f9:b4:cc:5a:04:0d:f1:7b:ba:78:90: 66:de:11:95:75:79:64:2d:da:71:14:a4:fb:98:aa: b6:ec:cb:dc:a9:f0:7c:45:3c:22:c8:41:c2:c4:b6: 27:7f:5a:44:12:26:21:04:c7:dd:8c:5e:a3:6f:a4: a0:29:2a:69:d1:b1:7b:db:d8:96:89:5b:1b:6a:01: 7d:e7:46:44:bb:5d:32:7c:cc:07:46:be:bb:05:8f: 65:92:ef:01:f3:73:6e:69:a2:b3:5d:5a:2d:ee:11: 51:67:63:27:44:bb:4b:a7:59:2a:29:67:b2:75:aa: 0a:29:9e:48:8d:8b:79:30:12:14:c5:33:8b:cb:22: 59:b0:2a:8c:b9:94:dd:a3:38:6e:8c:81:be:e8:59: 91:8c:a5:0e:b3:d9:da:b1:07:9e:2a:b5:22:d8:1d: b4:43:8f:4a:f1:96:e8:25:8c:f4:25:82:93:ad:04: 53:bb:7e:37:e3:df:93:f4:ed:34:87:18:ae:3f:cb: 43:e4:ba:53:3f:f9:51:81:ff:fb:f4:9a:4b:dd:ef: a5:57:ef:36:fe:02:ee:f0:bd:34:3d:00:b0:f1:b8: 9b:43:3d:2d:a7:17:90:7f:7b:f8:31:b4:5a:90:38: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:24:3A:5C:6A:12:E2:9E:82:B5:A2:C7:AE:8A:A8:50:4C:58:4E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cc80c21-5ac3-316e-aa9b-4745d528c3e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:51:63:ba:93:b6:0d:de:c4:be:3e:d5:11:d6:d6:c7:5b:77: e5:cf:a0:32:97:43:b4:33:5e:bb:6e:70:fe:e9:d2:63:9e:e5: 11:fd:a1:8c:98:8c:6c:91:23:8c:5d:91:f4:b1:70:19:be:3f: c2:1a:81:2b:3b:87:26:4d:f0:45:45:1d:b9:8a:94:c7:09:5e: e4:6b:87:e6:78:05:8d:34:17:06:9a:e6:e0:b7:d9:58:7c:92: 00:48:d3:5c:c9:06:c2:a6:af:6e:83:6b:47:5b:a1:f3:0a:69: 5e:4e:10:80:a9:88:96:eb:33:a3:8f:af:80:56:b9:07:37:e5: 33:f4:54:c3:75:a4:56:a7:63:e0:b0:f4:d4:f9:f2:21:d3:28: 4e:0a:03:6d:60:87:78:24:b8:ce:f1:f4:d4:95:b5:91:43:95: 7c:04:3d:31:f7:73:bc:d2:32:c4:72:73:6d:61:5d:bc:fe:9d: 9e:ec:74:83:5c:a8:cb:ef:17:66:de:8c:ac:5b:53:8e:99:2a: 9b:b0:ef:b1:36:f7:df:d8:7c:f2:99:ce:45:49:f7:c5:54:51: bc:51:2e:db:f4:a4:d9:df:86:9b:b0:64:52:5f:5c:fe:2e:b9: 50:c5:67:e8:2e:34:49:65:bd:cc:aa:4d:2d:49:33:59:19:7b: 62:6c:93:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZws2gqKUhAI7d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmE2ZmFlNGMtYmY2YS00MmNiLThhMGEtNzMwYmMzYjQ3MjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjcvOIolQLp8ZD0a/njTzRiy+bTMWgQN8Xu6 eJBm3hGVdXlkLdpxFKT7mKq27MvcqfB8RTwiyEHCxLYnf1pEEiYhBMfdjF6jb6Sg KSpp0bF729iWiVsbagF950ZEu10yfMwHRr67BY9lku8B83NuaaKzXVot7hFRZ2Mn RLtLp1kqKWeydaoKKZ5IjYt5MBIUxTOLyyJZsCqMuZTdozhujIG+6FmRjKUOs9na sQeeKrUi2B20Q49K8ZboJYz0JYKTrQRTu34349+T9O00hxiuP8tD5LpTP/lRgf/7 9JpL3e+lV+82/gLu8L00PQCw8bibQz0tpxeQf3v4MbRakDhEBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMkOlxqEuKegrWix66KqFBMWE4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2NjODBjMjEtNWFjMy0z MTZlLWFhOWItNDc0NWQ1MjhjM2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhRY7qTtg3exL4+1RHW1sdbd+XPoDKXQ7QzXrtucP7p0mOe5RH9oYyY jGyRI4xdkfSxcBm+P8IagSs7hyZN8EVFHbmKlMcJXuRrh+Z4BY00Fwaa5uC32Vh8 kgBI01zJBsKmr26Da0dbofMKaV5OEICpiJbrM6OPr4BWuQc35TP0VMN1pFanY+Cw 9NT58iHTKE4KA21gh3gkuM7x9NSVtZFDlXwEPTH3c7zSMsRyc21hXbz+nZ7sdINc qMvvF2bejKxbU46ZKpuw77E299/YfPKZzkVJ98VUUbxRLtv0pNnfhpuwZFJfXP4u uVDFZ+guNEllvcyqTS1JM1kZe2Jsk3o= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:38 2025 by rpki-client