$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89b23419-c170-3985-99bd-1a4b16e09077.roa File: 89b23419-c170-3985-99bd-1a4b16e09077.roa (raw, json) Hash identifier: cO5ubnK7R6puJXLI3j54VXlEtcAf9yf/lJsoxcEnOH0= Subject key identifier: E0:E9:49:FD:64:94:73:7B:99:0A:8B:AD:03:EA:58:42:1D:58:40:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B0FAF4D2F9176625CFE876300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89b23419-c170-3985-99bd-1a4b16e09077.roa Signing time: Tue 02 Sep 2025 13:18:02 +0000 ROA not before: Tue 02 Sep 2025 13:18:02 +0000 ROA not after: Mon 01 Dec 2025 14:18:02 +0000 asID: 22773 IP address blocks: 70.188.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:af:4d:2f:91:76:62:5c:fe:87:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 2 13:18:02 2025 GMT Not After : Dec 1 14:18:02 2025 GMT Subject: CN=d2e7e90d-91e4-4142-b2df-50a1a8bc6322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:89:6c:eb:54:dd:77:05:37:be:fe:68:5d:d6: a9:89:6a:90:a7:3e:cb:42:65:91:01:88:e0:99:f6: 43:61:79:d4:1e:41:58:e3:2a:21:92:b6:8c:0a:05: 26:7a:dc:98:29:99:f6:70:a5:0d:2d:54:3e:a8:ed: bc:5f:93:4a:ba:cb:35:68:e8:9a:2c:3a:d0:9e:d7: 37:01:bb:6c:fb:66:03:21:9f:71:21:76:bd:0f:14: 50:97:6a:16:f0:e4:31:6e:5c:52:29:ec:a2:75:9d: 44:8c:f3:87:a6:f4:73:a0:b3:2b:87:4e:80:13:96: a4:ff:da:a9:3e:5e:c6:66:d1:b8:66:3e:7a:d1:fc: c1:e8:01:75:8f:c9:39:b1:cf:58:63:20:29:de:7f: df:44:59:df:86:71:ae:73:90:de:79:65:14:52:76: 2d:b1:18:1c:0b:a0:92:98:d9:5e:c3:46:0c:ec:b3: a9:03:2f:d2:f0:fc:f8:6d:91:92:ae:7e:e7:18:4d: e9:6a:d8:a8:9c:0c:e1:f8:27:d7:52:01:c0:50:ef: a5:85:3c:60:be:aa:0b:ac:a0:40:bc:9d:b1:a1:b7: d1:5d:99:f2:11:91:08:84:b0:1e:04:6f:a9:79:a3: 40:ac:05:ef:d8:cb:3a:c0:33:ed:35:ee:bb:b9:ce: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:49:FD:64:94:73:7B:99:0A:8B:AD:03:EA:58:42:1D:58:40:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89b23419-c170-3985-99bd-1a4b16e09077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:28:16:80:1f:a2:54:b1:ab:b0:21:8f:a0:a9:f0:2e:25:0e: 33:50:ce:58:b4:9a:a8:24:50:f3:82:89:d3:d7:08:90:eb:2b: b2:95:56:c2:83:97:0d:f1:70:d5:04:f8:b7:23:0e:31:f2:60: 9d:5b:0e:06:d0:18:75:98:1a:39:4d:3f:f0:27:5c:60:85:e5: ce:b9:58:0b:97:78:83:d0:be:df:de:22:01:39:07:47:8d:92: 6a:94:ef:b8:26:27:bc:4e:ef:10:59:71:f3:a0:2b:2e:3a:c9: 00:72:a3:17:39:78:4d:f1:72:1d:44:e9:f1:3a:7b:be:01:ef: 0c:a7:49:ed:cb:11:4a:b0:3f:6d:05:65:09:20:1b:2c:34:83: 79:0e:c0:20:78:8f:b4:f6:6f:80:e4:a9:90:7a:33:ea:35:4b: 30:9e:89:c2:ec:69:18:58:c4:50:7f:3d:6d:36:36:6d:b2:38: c6:f8:cd:14:9e:ab:2f:f5:e8:ea:59:f1:44:8c:ec:8b:1b:9f: ae:5f:5b:92:cd:7d:81:82:25:83:0f:3d:2d:72:b7:03:fe:8c: b1:88:6d:76:27:4c:c6:6c:6b:ee:c9:71:fa:42:dd:65:af:e4: c0:3d:4e:1b:61:30:3e:65:2f:b8:04:55:29:24:9d:6e:f3:c7: 67:e8:bf:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPr00vkXZiXP6HYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwMjEzMTgwMloXDTI1MTIwMTE0MTgwMlowLzEtMCsGA1UEAxMk ZDJlN2U5MGQtOTFlNC00MTQyLWIyZGYtNTBhMWE4YmM2MzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4ls61TddwU3vv5oXdapiWqQpz7LQmWRAYjg mfZDYXnUHkFY4yohkraMCgUmetyYKZn2cKUNLVQ+qO28X5NKuss1aOiaLDrQntc3 Abts+2YDIZ9xIXa9DxRQl2oW8OQxblxSKeyidZ1EjPOHpvRzoLMrh06AE5ak/9qp Pl7GZtG4Zj560fzB6AF1j8k5sc9YYyAp3n/fRFnfhnGuc5DeeWUUUnYtsRgcC6CS mNlew0YM7LOpAy/S8Pz4bZGSrn7nGE3pationAzh+CfXUgHAUO+lhTxgvqoLrKBA vJ2xobfRXZnyEZEIhLAeBG+peaNArAXv2Ms6wDPtNe67uc5NmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODpSf1klHN7mQqLrQPqWEIdWEARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODliMjM0MTktYzE3MC0z OTg1LTk5YmQtMWE0YjE2ZTA5MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEoFoAfolSxq7Ahj6Cp8C4lDjNQzli0mqgkUPOCidPXCJDrK7KVVsKD lw3xcNUE+LcjDjHyYJ1bDgbQGHWYGjlNP/AnXGCF5c65WAuXeIPQvt/eIgE5B0eN kmqU77gmJ7xO7xBZcfOgKy46yQByoxc5eE3xch1E6fE6e74B7wynSe3LEUqwP20F ZQkgGyw0g3kOwCB4j7T2b4DkqZB6M+o1SzCeicLsaRhYxFB/PW02Nm2yOMb4zRSe qy/16OpZ8USM7Isbn65fW5LNfYGCJYMPPS1ytwP+jLGIbXYnTMZsa+7JcfpC3WWv 5MA9ThthMD5lL7gEVSkknW7zx2fov0A= -----END CERTIFICATE-----Generated at Mon Nov 3 17:15:48 2025 by rpki-client