$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d090f4c-a461-3d3a-b7e0-ab8079c43732.roa File: 7d090f4c-a461-3d3a-b7e0-ab8079c43732.roa (raw, json) Hash identifier: /5LzQJgVRXE547C6YQMIFLwhuwWX5Ec79bPwCtt3tjo= Subject key identifier: 52:2F:49:55:F6:D7:82:81:D7:D9:6C:D6:9D:44:78:0A:A5:B4:AB:35 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671247853F600D6424F900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d090f4c-a461-3d3a-b7e0-ab8079c43732.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:12:47:85:3f:60:0d:64:24:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=bf66b196-2234-476b-8ef8-530ae3d7e2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ca:d9:03:c8:13:17:98:b7:08:9b:5a:33:20: fa:9d:02:06:70:8d:15:0c:e8:c7:c7:f2:fd:c6:81: b0:cf:2a:23:05:9f:49:02:5f:66:06:63:d4:e2:70: 2b:91:3a:d6:ac:a0:03:37:1c:7d:e4:29:a8:e6:5a: a4:16:be:13:29:0f:68:cb:89:6c:bd:36:d1:f3:89: 57:e2:35:05:e2:41:df:9f:aa:3f:97:22:58:c2:f2: 40:1d:30:a2:64:70:51:65:46:4c:0e:14:31:77:c7: 77:50:a0:85:3b:d3:4a:31:96:1e:74:48:a4:10:47: 87:69:4a:44:5f:d7:01:bf:14:f9:50:00:b8:a4:8f: d3:f6:28:34:f3:01:0d:b6:3f:d1:db:98:06:de:20: fb:22:97:6b:86:2c:65:3b:3e:98:5a:90:7f:3b:64: 44:2c:21:6b:3b:8d:1f:f5:91:ff:18:b8:c8:42:33: d1:9b:59:bc:50:bb:00:8c:4d:ab:32:84:70:5e:b3: 20:4d:4a:9a:11:b4:cf:92:6a:9c:03:59:78:c4:f0: 0b:71:e4:24:2a:2a:6b:c8:b9:8b:4d:53:4e:33:3a: 80:bd:96:14:73:7b:ca:f6:82:c2:01:bb:0a:09:46: 3d:8a:9e:0f:7d:c9:57:dc:40:19:32:2a:91:5d:33: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2F:49:55:F6:D7:82:81:D7:D9:6C:D6:9D:44:78:0A:A5:B4:AB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d090f4c-a461-3d3a-b7e0-ab8079c43732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:3c:c3:cb:af:3e:83:d7:34:cc:9f:f9:67:58:34:e9:6b:8a: 99:c7:0a:c0:79:22:85:ea:33:ce:37:44:1d:02:22:28:16:a4: 1b:46:64:c2:9a:58:da:f1:4d:c4:0f:79:a9:8d:3d:93:bd:20: 09:d8:74:30:b5:1d:51:fd:93:54:f6:b2:31:55:5c:b7:9d:b1: cd:b4:2e:4a:f8:b6:ea:98:7a:32:12:6e:18:08:90:66:ed:ec: 88:92:6c:4d:03:23:1d:0f:43:df:b9:02:70:e6:f1:e6:d0:56: f8:ca:86:0b:f2:9c:19:51:d7:01:32:05:7f:81:05:2c:0d:aa: 5f:94:07:3e:72:23:d8:79:24:b4:d2:08:b3:a7:13:0e:69:c5: 17:28:ea:06:02:3e:0e:5b:7a:74:48:a5:83:f1:da:19:2b:85: 37:f5:75:18:79:c3:77:f2:99:0f:f5:f8:3f:ce:dc:56:fe:18: 4f:b1:f5:82:cb:09:79:7d:cf:d8:27:b7:4b:79:52:d1:6f:48: f9:21:58:ea:2b:36:62:d6:94:f8:2d:06:56:0b:84:81:2d:a7: 6f:31:c4:a2:2e:37:3c:27:9f:41:ea:8a:a9:3e:f3:64:ab:99: 21:ce:fe:16:f8:4e:de:2f:d1:b9:00:53:6d:18:19:18:b7:5a: 59:2a:4c:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxJHhT9gDWQk+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YmY2NmIxOTYtMjIzNC00NzZiLThlZjgtNTMwYWUzZDdlMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8rZA8gTF5i3CJtaMyD6nQIGcI0VDOjHx/L9 xoGwzyojBZ9JAl9mBmPU4nArkTrWrKADNxx95Cmo5lqkFr4TKQ9oy4lsvTbR84lX 4jUF4kHfn6o/lyJYwvJAHTCiZHBRZUZMDhQxd8d3UKCFO9NKMZYedEikEEeHaUpE X9cBvxT5UAC4pI/T9ig08wENtj/R25gG3iD7IpdrhixlOz6YWpB/O2RELCFrO40f 9ZH/GLjIQjPRm1m8ULsAjE2rMoRwXrMgTUqaEbTPkmqcA1l4xPALceQkKipryLmL TVNOMzqAvZYUc3vK9oLCAbsKCUY9ip4PfclX3EAZMiqRXTMUBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIvSVX214KB19ls1p1EeAqltKs1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2QwOTBmNGMtYTQ2MS0z ZDNhLWI3ZTAtYWI4MDc5YzQzNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKs8w8uvPoPXNMyf+WdYNOlripnHCsB5IoXqM843RB0CIigWpBtGZMKa WNrxTcQPeamNPZO9IAnYdDC1HVH9k1T2sjFVXLedsc20Lkr4tuqYejISbhgIkGbt 7IiSbE0DIx0PQ9+5AnDm8ebQVvjKhgvynBlR1wEyBX+BBSwNql+UBz5yI9h5JLTS CLOnEw5pxRco6gYCPg5benRIpYPx2hkrhTf1dRh5w3fymQ/1+D/O3Fb+GE+x9YLL CXl9z9gnt0t5UtFvSPkhWOorNmLWlPgtBlYLhIEtp28xxKIuNzwnn0Hqiqk+82Sr mSHO/hb4Tt4v0bkAU20YGRi3WlkqTOg= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:15 2025 by rpki-client