$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fcec22c-555d-3e34-8241-40ab4b09ccfd.roa File: 7fcec22c-555d-3e34-8241-40ab4b09ccfd.roa (raw, json) Hash identifier: PjUjMSP7Ll3ZbjnrEs0PrHzGIs1qBb9xivwioX+Bne4= Subject key identifier: C0:69:30:D1:37:F7:57:98:1B:D7:DD:0C:CB:D1:B2:FF:63:AA:39:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F206C4FD4172941E01D040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fcec22c-555d-3e34-8241-40ab4b09ccfd.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.174.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:06:c4:fd:41:72:94:1e:01:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=387f89f8-4e2c-40c5-b7b9-ad4954eb5791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:f8:28:e8:a1:5b:d2:c5:9d:fa:84:ab:22: 00:16:61:1b:94:7d:46:17:48:77:04:9e:df:7a:5b: 4f:16:ab:13:d6:4a:cb:81:e9:09:57:a7:55:0c:67: 0c:27:22:b8:79:00:2e:17:77:15:87:a0:75:81:e3: 45:a9:0b:64:f1:d7:21:55:10:b1:d6:6b:66:1d:26: 8c:4c:67:6d:5e:35:84:52:6a:91:7f:95:85:4c:f5: 13:7a:ed:af:df:0a:a6:d9:26:1f:4a:0a:0d:15:bd: 29:16:53:63:9c:a4:af:29:23:7c:5e:f8:c9:eb:65: e7:ae:59:5b:67:5f:8d:e5:1f:a9:92:8e:15:31:96: 35:b7:06:45:db:26:d2:f7:22:05:43:4e:7a:a2:59: a2:a7:69:ac:3e:5a:0f:2b:11:c0:ac:45:3a:de:46: 4b:ef:9b:01:c5:dc:1a:d2:38:78:51:a5:db:cd:61: 7f:a8:fe:ec:c3:4f:b7:1d:b3:93:1d:ca:17:e1:bf: 40:55:4a:fe:cf:b9:b0:61:e8:2f:62:a2:8b:a1:12: 6c:7b:ca:af:6f:07:98:ee:b2:fc:0e:4c:43:a1:43: 69:04:8c:c8:d8:d2:7e:6a:af:79:ad:1c:80:31:3a: cf:6e:26:33:01:ff:0d:b8:36:ae:f2:23:60:12:d2: ef:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:69:30:D1:37:F7:57:98:1B:D7:DD:0C:CB:D1:B2:FF:63:AA:39:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fcec22c-555d-3e34-8241-40ab4b09ccfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:11:eb:e0:74:17:55:83:7c:d5:0e:5d:e1:73:f1:95:31:9a: 07:59:7c:57:02:ee:83:32:60:c5:b2:80:1f:9a:6d:76:f4:da: 48:f3:ba:63:80:74:84:3f:19:5c:16:8e:04:e2:c9:ef:82:60: 66:97:9a:4c:3e:5b:7c:dd:7e:1e:ec:ba:58:48:75:d5:ba:0c: 1a:d3:fa:9d:e9:fd:cb:13:7f:14:76:28:f2:9d:42:f4:b9:54: 5f:69:82:ba:d9:8f:8b:fa:d5:dc:fc:d9:27:93:3e:67:07:f2: bd:49:d6:aa:9f:06:3e:c4:61:38:d6:23:48:c6:31:ca:c7:d9: 15:77:c7:50:c9:ee:f1:86:3e:45:40:33:63:44:01:31:2a:e2: 08:23:0e:40:75:6e:54:b0:9b:88:96:74:fc:2b:89:ba:6a:03: 73:3f:a1:06:a7:85:b5:0f:23:f0:3a:ad:dc:5e:42:ca:1e:d7: 29:9d:fc:7d:34:bd:6e:2b:fe:13:f3:4f:ba:d6:a7:2a:6d:98: 11:29:03:37:2d:c5:1c:c7:8d:4d:a7:8a:0c:8e:80:22:63:b2: a8:46:b6:52:d9:d2:f4:eb:e9:2f:ca:49:61:d8:65:de:19:6c: e8:ad:c4:a4:88:3b:3a:c1:89:77:a9:b4:7b:0a:69:0c:8f:4b: f8:df:56:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gbE/UFylB4B0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Mzg3Zjg5ZjgtNGUyYy00MGM1LWI3YjktYWQ0OTU0ZWI1NzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYz4KOihW9LFnfqEqyIAFmEblH1GF0h3BJ7f eltPFqsT1krLgekJV6dVDGcMJyK4eQAuF3cVh6B1geNFqQtk8dchVRCx1mtmHSaM TGdtXjWEUmqRf5WFTPUTeu2v3wqm2SYfSgoNFb0pFlNjnKSvKSN8XvjJ62Xnrllb Z1+N5R+pko4VMZY1twZF2ybS9yIFQ056olmip2msPloPKxHArEU63kZL75sBxdwa 0jh4UaXbzWF/qP7sw0+3HbOTHcoX4b9AVUr+z7mwYegvYqKLoRJse8qvbweY7rL8 DkxDoUNpBIzI2NJ+aq95rRyAMTrPbiYzAf8NuDau8iNgEtLvJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBpMNE391eYG9fdDMvRsv9jqjlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2ZjZWMyMmMtNTU1ZC0z ZTM0LTgyNDEtNDBhYjRiMDljY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRq4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQR6+B0F1WDfNUOXeFz8ZUxmgdZfFcC7oMyYMWygB+abXb02kjzumOA dIQ/GVwWjgTiye+CYGaXmkw+W3zdfh7sulhIddW6DBrT+p3p/csTfxR2KPKdQvS5 VF9pgrrZj4v61dz82SeTPmcH8r1J1qqfBj7EYTjWI0jGMcrH2RV3x1DJ7vGGPkVA M2NEATEq4ggjDkB1blSwm4iWdPwribpqA3M/oQanhbUPI/A6rdxeQsoe1ymd/H00 vW4r/hPzT7rWpyptmBEpAzctxRzHjU2nigyOgCJjsqhGtlLZ0vTr6S/KSWHYZd4Z bOitxKSIOzrBiXeptHsKaQyPS/jfVvM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:13 2025 by rpki-client