$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/804c385b-e061-3992-8443-2fee33a31658.roa File: 804c385b-e061-3992-8443-2fee33a31658.roa (raw, json) Hash identifier: 3IJk1lUqG9m7z1cIpDrAAIirrVPBaffPPQF22HczpG0= Subject key identifier: 4B:B4:0C:3F:AD:B4:D9:53:98:D1:CF:89:94:D4:28:77:88:3A:4F:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F248FF30D492D5AE62C800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/804c385b-e061-3992-8443-2fee33a31658.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.181.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:48:ff:30:d4:92:d5:ae:62:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e2544ef8-7de6-4c33-bb28-1ec60942224c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:82:dd:c7:28:02:6a:c0:9a:50:3a:d6:d0: f0:bb:73:81:f5:0e:98:03:a1:34:6f:9a:16:56:b0: d9:2c:79:85:46:c9:81:3e:4a:26:87:3c:63:dc:71: df:25:ba:aa:39:a9:b8:9f:1a:30:d9:23:03:79:32: 20:c6:9e:d5:12:9f:f8:82:4d:1c:3c:7b:0c:b6:78: c2:89:59:2f:1c:43:c8:ea:59:65:96:0d:00:d4:9f: 99:d6:49:58:2d:c4:ab:a7:3e:0d:9e:46:64:b0:c3: 75:f8:9b:77:62:39:d5:78:c0:84:b6:01:92:00:c9: 7d:a6:03:5a:2d:12:d1:66:83:a1:fa:8c:6c:45:85: d1:a7:3e:46:d2:a8:21:7f:ee:1c:0f:39:65:d2:20: 44:cc:67:73:c2:43:0a:74:81:47:c8:42:a7:1b:10: 22:6a:9c:1c:fa:51:37:49:7f:71:1e:55:1b:a6:8b: 9f:d7:7f:f3:ca:57:ea:bc:7b:19:a4:42:c2:4e:e4: cc:b9:ff:13:b4:3e:d8:89:26:48:53:74:ab:35:51: 43:ff:b3:47:f9:30:ac:2c:10:2d:a2:e9:a1:6c:ba: 36:68:a1:5f:74:58:2b:2d:24:f8:e6:a5:d3:ba:26: 84:76:f3:4c:53:02:db:06:01:f7:6b:e9:80:88:72: 4a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B4:0C:3F:AD:B4:D9:53:98:D1:CF:89:94:D4:28:77:88:3A:4F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/804c385b-e061-3992-8443-2fee33a31658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:04:51:d6:19:0e:bb:7e:a9:7e:5c:fc:4b:67:6c:27:82:64: 77:9a:b9:fa:d3:e2:fd:e1:c4:ea:0a:ee:45:48:8b:ed:64:05: b5:7f:61:52:eb:e6:2b:5b:0f:54:cd:0b:6b:8f:ea:85:0d:48: d3:99:9b:1c:6b:68:8e:f3:5f:72:ff:18:81:50:96:e2:52:0c: b9:62:92:e0:35:df:9a:d0:e6:53:20:51:36:10:61:bd:55:23: 9b:a0:49:fe:dc:fd:64:b5:c7:9b:62:f9:e0:ed:77:59:3b:99: 5a:85:ef:1c:40:dc:35:ba:46:09:f8:2e:cf:88:48:69:3c:55: 3f:4e:49:c9:5f:b5:70:19:42:7d:1f:f9:29:31:06:ea:bf:e6: 63:73:14:b3:9d:00:ce:30:67:77:4d:6f:35:4f:ed:b8:b3:5a: 07:c9:c3:80:a2:dc:11:c9:ee:a9:96:6e:a0:4e:9d:35:83:88: d2:f1:37:64:cf:17:76:11:b1:8b:a9:f7:33:ab:15:99:d2:77: 8b:98:85:25:b2:5b:a2:d8:31:ed:42:42:23:19:81:f6:95:72: f4:3c:29:02:9a:26:aa:4a:62:5e:c9:7e:81:eb:96:f8:0c:e4: 7e:3d:8e:a3:e4:5d:00:ea:84:59:fe:49:68:48:2a:ac:89:74: c8:55:70:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kj/MNSS1a5iyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTI1NDRlZjgtN2RlNi00YzMzLWJiMjgtMWVjNjA5NDIyMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxyC3ccoAmrAmlA61tDwu3OB9Q6YA6E0b5oW VrDZLHmFRsmBPkomhzxj3HHfJbqqOam4nxow2SMDeTIgxp7VEp/4gk0cPHsMtnjC iVkvHEPI6llllg0A1J+Z1klYLcSrpz4NnkZksMN1+Jt3YjnVeMCEtgGSAMl9pgNa LRLRZoOh+oxsRYXRpz5G0qghf+4cDzll0iBEzGdzwkMKdIFHyEKnGxAiapwc+lE3 SX9xHlUbpouf13/zylfqvHsZpELCTuTMuf8TtD7YiSZIU3SrNVFD/7NH+TCsLBAt oumhbLo2aKFfdFgrLST45qXTuiaEdvNMUwLbBgH3a+mAiHJK4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu0DD+ttNlTmNHPiZTUKHeIOk/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODA0YzM4NWItZTA2MS0z OTkyLTg0NDMtMmZlZTMzYTMxNjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUEUdYZDrt+qX5c/EtnbCeCZHeaufrT4v3hxOoK7kVIi+1kBbV/YVLr 5itbD1TNC2uP6oUNSNOZmxxraI7zX3L/GIFQluJSDLlikuA135rQ5lMgUTYQYb1V I5ugSf7c/WS1x5ti+eDtd1k7mVqF7xxA3DW6Rgn4Ls+ISGk8VT9OSclftXAZQn0f +SkxBuq/5mNzFLOdAM4wZ3dNbzVP7bizWgfJw4Ci3BHJ7qmWbqBOnTWDiNLxN2TP F3YRsYup9zOrFZnSd4uYhSWyW6LYMe1CQiMZgfaVcvQ8KQKaJqpKYl7JfoHrlvgM 5H49jqPkXQDqhFn+SWhIKqyJdMhVcHM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:43 2025 by rpki-client