$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88066aef-ba03-3a63-a9d1-6cd7b786ad08.roa File: 88066aef-ba03-3a63-a9d1-6cd7b786ad08.roa (raw, json) Hash identifier: zVUlfL2xj2EPhksAXIoDnlhOdZXVD6pt5jrR/riSzRM= Subject key identifier: 8F:38:3B:8F:2E:EB:40:A9:42:35:EC:99:51:48:30:01:1B:D3:F3:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670AFFC64E84A309E30200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88066aef-ba03-3a63-a9d1-6cd7b786ad08.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0a:ff:c6:4e:84:a3:09:e3:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=ccc8c742-e691-4a36-8a8e-41feb738db50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:aa:f7:40:f9:4b:59:0b:35:7a:70:90:17: 5c:68:2d:f7:67:9f:1f:54:a8:48:37:9e:64:d4:32: 00:57:b8:59:ea:de:ca:e2:d0:68:71:1a:e5:25:e7: 19:0a:06:e4:b4:ad:5d:7f:87:9d:03:96:77:62:26: bb:36:37:b8:31:9a:13:b7:58:34:97:48:b2:f8:3b: f2:a8:58:a1:4a:38:87:85:8b:75:c9:74:86:5d:c5: fc:12:c4:5a:a7:de:12:54:c1:86:db:3d:4d:c9:e2: 5b:28:aa:20:97:f1:de:89:4b:dc:8b:19:1b:fa:9f: 4f:f5:92:0b:25:01:fe:b0:31:8b:7d:d0:48:e4:24: 79:f5:33:e9:45:f6:fa:9f:d6:ed:9b:34:df:58:52: bb:5d:13:20:a7:54:e5:0b:9e:4f:17:44:1b:cd:83: e0:d7:cd:c6:ed:c0:1f:d2:47:0f:d3:05:a9:6b:4c: 2a:39:f7:cd:49:a9:36:34:61:1d:35:b7:c4:2b:e5: f5:1d:77:1d:3b:f4:f5:6a:01:bc:7c:0c:ee:52:c0: a4:dc:f9:99:2c:fd:ce:ad:17:77:38:74:f7:0d:60: 08:19:51:94:e1:8a:9f:be:2e:1d:ea:8f:99:f3:56: 3d:d1:1b:48:70:98:11:39:26:62:c1:d2:48:79:70: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:38:3B:8F:2E:EB:40:A9:42:35:EC:99:51:48:30:01:1B:D3:F3:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88066aef-ba03-3a63-a9d1-6cd7b786ad08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2d:d6:23:1c:3c:0a:2d:f4:f4:16:f9:bb:bd:c1:58:19:01: 5c:4d:fa:92:a1:ac:a9:c1:b2:a7:90:ee:ca:8d:8c:5d:d1:13: 74:d2:99:60:a5:4a:24:3f:e2:d3:97:2f:c2:dc:ab:82:80:b1: b3:6a:9f:69:4d:25:93:28:0a:0b:bf:60:e5:f1:62:4c:87:7a: 1a:74:d0:46:46:d6:9b:7e:ad:45:32:47:20:ff:c0:e9:38:e0: 36:00:79:12:fc:ed:e1:d6:ec:6d:d3:ba:d8:72:2a:e6:8b:f0: 79:bd:39:09:70:23:62:77:79:f9:eb:6a:79:ac:94:2a:96:8b: 73:9c:4c:c5:54:da:74:7e:d7:89:83:73:f1:26:d5:d2:76:f9: 47:fc:83:25:63:28:59:be:9a:db:62:64:16:16:cf:b5:d1:a4: a3:45:3e:63:d2:11:53:fd:5b:23:86:7f:6e:c7:ad:78:e4:15: a2:14:d6:f5:57:bd:29:88:65:45:c2:0e:bf:ef:8f:81:28:4e: 3a:95:43:16:5e:c2:d2:d1:b6:d9:1f:40:c4:59:de:72:59:29: 4a:4a:2d:3b:72:5e:95:c0:d5:c6:4e:a2:e9:28:42:7c:11:4f: aa:a9:85:8b:a9:bc:f1:ef:ff:7e:bf:ce:0c:83:28:c1:b1:2f: 95:3f:ac:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwr/xk6EownjAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2NjOGM3NDItZTY5MS00YTM2LThhOGUtNDFmZWI3MzhkYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfSq90D5S1kLNXpwkBdcaC33Z58fVKhIN55k 1DIAV7hZ6t7K4tBocRrlJecZCgbktK1df4edA5Z3Yia7Nje4MZoTt1g0l0iy+Dvy qFihSjiHhYt1yXSGXcX8EsRap94SVMGG2z1NyeJbKKogl/HeiUvcixkb+p9P9ZIL JQH+sDGLfdBI5CR59TPpRfb6n9btmzTfWFK7XRMgp1TlC55PF0QbzYPg183G7cAf 0kcP0wWpa0wqOffNSak2NGEdNbfEK+X1HXcdO/T1agG8fAzuUsCk3PmZLP3OrRd3 OHT3DWAIGVGU4Yqfvi4d6o+Z81Y90RtIcJgROSZiwdJIeXCcvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI84O48u60CpQjXsmVFIMAEb0/PXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODgwNjZhZWYtYmEwMy0z YTYzLWE5ZDEtNmNkN2I3ODZhZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4t1iMcPAot9PQW+bu9wVgZAVxN+pKhrKnBsqeQ7sqNjF3RE3TSmWCl SiQ/4tOXL8Lcq4KAsbNqn2lNJZMoCgu/YOXxYkyHehp00EZG1pt+rUUyRyD/wOk4 4DYAeRL87eHW7G3TuthyKuaL8Hm9OQlwI2J3efnranmslCqWi3OcTMVU2nR+14mD c/Em1dJ2+Uf8gyVjKFm+mttiZBYWz7XRpKNFPmPSEVP9WyOGf27HrXjkFaIU1vVX vSmIZUXCDr/vj4EoTjqVQxZewtLRttkfQMRZ3nJZKUpKLTtyXpXA1cZOoukoQnwR T6qphYupvPHv/36/zgyDKMGxL5U/rMk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:21:53 2025 by rpki-client