$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/866c94bf-e02d-36dd-8b2f-3af448ffcdee.roa File: 866c94bf-e02d-36dd-8b2f-3af448ffcdee.roa (raw, json) Hash identifier: /CzDI+GL0H4N9NLxisvjim182VeiO6wc42kbFgWW+KA= Subject key identifier: A0:40:F2:1C:23:EC:12:A5:D3:AF:2F:2A:81:30:11:FF:91:9F:D6:D0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27C1CF985DDC82876B1C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/866c94bf-e02d-36dd-8b2f-3af448ffcdee.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.174.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7c:1c:f9:85:dd:c8:28:76:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=f2dd85c3-f99d-4faf-8a51-d2465b08ecca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:b9:63:45:9e:b2:5a:c3:49:f7:f0:7c:3d: cc:b5:c8:18:a1:35:28:6d:38:72:dd:dc:5f:d9:84: f5:ed:e6:2e:6a:a3:da:a0:bf:83:c8:55:32:0a:a9: 73:72:38:17:72:79:db:ce:4c:8b:cd:43:41:b6:92: 30:a3:44:15:54:6d:02:41:72:73:f1:99:7f:e6:0d: 7f:e1:b0:2c:ed:3c:a5:cd:e1:b4:c8:b8:7d:84:a5: 24:b9:f1:e0:b4:62:60:60:74:7c:11:9c:01:f8:10: e1:37:be:af:95:71:7f:d0:db:1b:e2:38:ff:f7:6b: 70:3f:da:d2:76:93:42:28:cf:85:28:86:a1:27:49: 25:15:03:6d:fd:7b:ab:d6:87:da:49:aa:16:c9:90: 13:34:b7:96:23:76:b6:2d:24:e3:72:c7:ea:48:76: 0f:75:7d:f3:85:ab:2a:f8:4a:ab:8e:9a:96:97:52: 56:6c:de:a2:30:a0:e4:d2:a1:6b:89:a5:0e:c3:ea: 19:47:1b:87:bf:07:d2:c1:ce:e1:05:64:e9:bc:d1: 6a:b6:38:62:b8:6d:7e:81:e4:8a:9e:bd:20:bc:cd: 96:4d:5a:51:98:de:6b:95:b9:60:53:ad:10:81:d4: 9f:40:0d:fb:b1:0f:cc:ce:18:56:43:d7:b0:01:7c: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:40:F2:1C:23:EC:12:A5:D3:AF:2F:2A:81:30:11:FF:91:9F:D6:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/866c94bf-e02d-36dd-8b2f-3af448ffcdee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0b:b8:58:f2:49:46:15:2d:fa:dc:4a:12:1f:f2:46:53:c6: ba:1b:63:04:63:a9:e4:55:64:64:dd:62:47:4f:00:ef:c2:23: 59:2c:7c:0f:74:3e:01:37:e7:d2:a7:e2:66:6b:9e:a9:1b:3e: 00:04:9a:61:bc:d7:da:99:d4:cf:f9:f9:7a:ad:a9:fa:ab:63: c2:eb:38:ff:f3:c4:37:9d:0a:86:94:5e:14:ea:83:67:ca:f5: 41:4e:72:f9:37:98:55:d9:25:e1:c3:4a:34:37:4b:90:1c:c6: f1:eb:ac:0b:8d:51:22:43:ae:f8:1c:7a:5d:a7:41:aa:84:e8: e9:6c:55:90:e6:05:f5:3b:14:fe:c7:a6:78:b2:7b:74:de:a3: e2:86:8b:36:c4:c5:e2:2c:80:bd:6c:df:fd:ee:88:8d:a7:1e: 2e:dc:c3:86:89:16:cb:c4:57:db:a2:cc:aa:36:47:0c:42:62: cb:1c:1c:37:af:67:6b:50:8b:dd:36:45:20:10:3f:2b:71:a7: dc:eb:e2:69:6c:f8:1f:30:d0:91:9c:5c:ea:2e:a6:51:85:23: d7:9c:f7:ba:44:4c:cb:99:61:99:d1:f8:66:08:9a:ee:48:50: f1:26:c1:ab:64:f7:b0:cd:28:e3:60:76:82:9c:e9:22:8c:c3: 88:5c:55:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nwc+YXdyCh2scAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZjJkZDg1YzMtZjk5ZC00ZmFmLThhNTEtZDI0NjViMDhlY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQK5Y0WeslrDSffwfD3MtcgYoTUobThy3dxf 2YT17eYuaqPaoL+DyFUyCqlzcjgXcnnbzkyLzUNBtpIwo0QVVG0CQXJz8Zl/5g1/ 4bAs7TylzeG0yLh9hKUkufHgtGJgYHR8EZwB+BDhN76vlXF/0Nsb4jj/92twP9rS dpNCKM+FKIahJ0klFQNt/Xur1ofaSaoWyZATNLeWI3a2LSTjcsfqSHYPdX3zhasq +EqrjpqWl1JWbN6iMKDk0qFriaUOw+oZRxuHvwfSwc7hBWTpvNFqtjhiuG1+geSK nr0gvM2WTVpRmN5rlblgU60QgdSfQA37sQ/MzhhWQ9ewAXwelwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBA8hwj7BKl068vKoEwEf+Rn9bQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODY2Yzk0YmYtZTAyZC0z NmRkLThiMmYtM2FmNDQ4ZmZjZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAULuFjySUYVLfrcShIf8kZTxrobYwRjqeRVZGTdYkdPAO/CI1ksfA90 PgE359Kn4mZrnqkbPgAEmmG819qZ1M/5+XqtqfqrY8LrOP/zxDedCoaUXhTqg2fK 9UFOcvk3mFXZJeHDSjQ3S5AcxvHrrAuNUSJDrvgcel2nQaqE6OlsVZDmBfU7FP7H pniye3Teo+KGizbExeIsgL1s3/3uiI2nHi7cw4aJFsvEV9uizKo2RwxCYsscHDev Z2tQi902RSAQPytxp9zr4mls+B8w0JGcXOouplGFI9ec97pETMuZYZnR+GYImu5I UPEmwatk97DNKONgdoKc6SKMw4hcVQw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:17 2025 by rpki-client