$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87228328-39f0-3c15-ae25-21843a5eccae.roa File: 87228328-39f0-3c15-ae25-21843a5eccae.roa (raw, json) Hash identifier: irsSK9Eb4xTGPk8v6Cpaa5OcbUDDMNZX2We2YLqZVA4= Subject key identifier: 5E:89:D7:3C:95:7E:8A:CC:02:40:75:20:DE:47:D7:6A:12:0F:FB:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670A983E1DBE799BB75F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87228328-39f0-3c15-ae25-21843a5eccae.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0a:98:3e:1d:be:79:9b:b7:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=c8b52cae-04f6-40e2-991e-bc287380b302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:ce:cb:8b:0a:65:a7:51:29:c5:10:25:b9: 55:6f:9e:02:e1:2d:ad:93:23:7f:93:b2:d5:da:fe: 68:38:8e:34:88:1b:9f:7a:94:37:9d:6e:88:95:54: 90:88:6f:5b:c3:73:47:dc:24:a1:12:a1:b2:98:69: a3:97:81:72:45:9b:c0:43:03:27:2c:23:76:a0:45: d4:5c:37:82:d3:e4:61:c6:61:46:66:24:d9:11:bb: a9:cf:17:21:2e:7e:61:b5:d4:90:57:fd:82:0a:d8: 77:67:d3:bf:b2:bf:48:9b:c8:e5:70:34:67:32:94: 6f:b2:e9:ee:99:92:84:df:38:a2:c5:db:cf:51:c9: 3a:88:d3:44:5c:58:a9:e5:74:fa:00:a0:a9:25:37: 35:fe:54:54:a4:8b:2c:91:aa:c6:d7:fd:a6:d5:df: 51:38:40:36:4c:70:56:f1:16:4e:0b:91:fe:92:0f: 45:62:7a:46:67:b6:89:64:da:50:96:c2:0e:29:bc: a5:9f:ae:24:78:ef:52:fc:65:6e:0d:74:b8:f9:78: b2:9f:6c:23:4e:20:71:a0:0a:30:35:ae:f3:17:14: 77:71:28:1f:47:eb:52:8f:2b:70:b2:aa:bb:f8:74: 58:61:72:bb:15:0e:56:ea:84:87:62:a8:06:93:4b: 4d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:89:D7:3C:95:7E:8A:CC:02:40:75:20:DE:47:D7:6A:12:0F:FB:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87228328-39f0-3c15-ae25-21843a5eccae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:dc:98:45:31:03:47:6a:b3:7a:42:c0:f0:b3:28:23:cb:a2: 9f:fa:7a:95:5f:9f:be:66:e3:5b:2a:d0:ef:e2:58:15:6c:fa: 92:9b:fa:62:16:7a:c0:3e:71:70:95:06:7b:7f:ca:08:51:25: 16:c4:7d:8c:13:61:6a:72:5c:89:cc:cf:47:79:2a:54:d1:ed: df:13:43:5e:db:23:28:84:23:70:ed:0b:c2:4b:fc:c2:fd:7a: f1:5a:22:19:79:dc:b6:3c:0e:a4:93:e3:f6:51:ed:66:81:e5: 3d:42:0e:0a:1a:59:c3:76:7f:62:11:d1:da:27:e6:5b:dc:51: ef:64:3c:25:a9:c2:18:fc:d7:3f:fb:d1:43:a0:cd:93:d0:ce: b7:f8:8b:00:45:ac:f7:07:e7:8b:35:2b:76:95:92:75:52:ef: 2f:fc:05:bb:ea:7e:3f:f8:79:43:f5:6f:0e:93:1d:19:2c:1d: a3:3d:4f:ca:b5:cc:d6:ab:c0:fe:d2:cd:03:f2:23:b6:62:f4: 3a:ca:56:48:e7:4d:0a:e0:25:8c:35:15:79:b1:3c:b5:70:15: c6:26:6d:ee:13:e5:3e:98:c0:20:31:5c:3e:05:90:b2:9a:28: 34:a3:c7:48:00:92:f6:59:7d:c4:77:89:a7:4c:fb:30:9a:97: 88:91:cf:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwqYPh2+eZu3XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YzhiNTJjYWUtMDRmNi00MGUyLTk5MWUtYmMyODczODBiMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPnOy4sKZadRKcUQJblVb54C4S2tkyN/k7LV 2v5oOI40iBufepQ3nW6IlVSQiG9bw3NH3CShEqGymGmjl4FyRZvAQwMnLCN2oEXU XDeC0+RhxmFGZiTZEbupzxchLn5htdSQV/2CCth3Z9O/sr9Im8jlcDRnMpRvsunu mZKE3ziixdvPUck6iNNEXFip5XT6AKCpJTc1/lRUpIsskarG1/2m1d9ROEA2THBW 8RZOC5H+kg9FYnpGZ7aJZNpQlsIOKbyln64keO9S/GVuDXS4+Xiyn2wjTiBxoAow Na7zFxR3cSgfR+tSjytwsqq7+HRYYXK7FQ5W6oSHYqgGk0tN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6J1zyVforMAkB1IN5H12oSD/uMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODcyMjgzMjgtMzlmMC0z YzE1LWFlMjUtMjE4NDNhNWVjY2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXcmEUxA0dqs3pCwPCzKCPLop/6epVfn75m41sq0O/iWBVs+pKb+mIW esA+cXCVBnt/yghRJRbEfYwTYWpyXInMz0d5KlTR7d8TQ17bIyiEI3DtC8JL/ML9 evFaIhl53LY8DqST4/ZR7WaB5T1CDgoaWcN2f2IR0don5lvcUe9kPCWpwhj81z/7 0UOgzZPQzrf4iwBFrPcH54s1K3aVknVS7y/8Bbvqfj/4eUP1bw6THRksHaM9T8q1 zNarwP7SzQPyI7Zi9DrKVkjnTQrgJYw1FXmxPLVwFcYmbe4T5T6YwCAxXD4FkLKa KDSjx0gAkvZZfcR3iadM+zCal4iRz0U= -----END CERTIFICATE-----Generated at Wed Oct 15 23:38:47 2025 by rpki-client