$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ca0dd4d-5e12-31b6-a053-b987e1689c6f.roa File: 8ca0dd4d-5e12-31b6-a053-b987e1689c6f.roa (raw, json) Hash identifier: 3nYB0hqGvwuZmiFhohoxUJ2zuWtdCdsCJSrg4gkokP0= Subject key identifier: D8:44:BE:7A:23:AE:DD:E8:FD:0D:1F:DD:9B:74:85:45:16:FB:A3:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C663EF08EEDC4E0693840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ca0dd4d-5e12-31b6-a053-b987e1689c6f.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.163.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:66:3e:f0:8e:ed:c4:e0:69:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=5d9c77db-dcc1-48a1-b725-81145dae423c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5d:72:20:01:56:a2:99:13:51:0a:32:05:28: 32:6d:9f:c7:34:6e:81:f8:6f:18:1e:13:53:b3:78: 95:ab:55:a2:93:3a:ec:10:fe:ff:25:99:fd:4b:ef: d4:90:74:f6:1f:6a:fa:3f:43:f2:e6:f1:10:ab:8b: be:c7:b6:ff:3b:57:72:6c:6d:0d:4c:01:0c:58:2d: 69:43:04:93:1c:fa:d3:19:1f:da:99:cd:1d:4a:b2: 23:ef:2c:1d:30:ef:46:45:da:72:e2:c0:73:73:88: e4:8f:17:50:ef:4b:f3:11:61:5f:30:40:07:98:66: b6:30:06:32:b9:2c:7f:e7:fd:55:60:08:1c:e3:09: 46:84:ca:ff:5a:70:d5:f0:e1:5f:df:4e:8e:c6:56: e1:61:de:ff:3c:89:ae:7a:45:b7:fb:fe:ca:40:a1: 88:a7:55:c2:6a:05:6d:b8:da:24:4b:0c:6b:75:54: ff:bb:bb:50:a7:11:77:9c:ac:e3:ce:bf:6c:f3:48: c6:a8:bd:c9:51:5b:cc:78:8b:d5:f2:14:ed:86:86: e7:bc:6a:60:0d:e0:a0:f1:e8:d9:87:8a:96:af:cc: 3c:84:fb:90:bc:e0:60:ab:7e:ba:c5:73:21:14:fa: e9:d2:9f:22:13:3b:91:5d:b3:c1:24:4d:3a:a3:62: 3c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:44:BE:7A:23:AE:DD:E8:FD:0D:1F:DD:9B:74:85:45:16:FB:A3:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ca0dd4d-5e12-31b6-a053-b987e1689c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.163.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:40:5e:23:fb:87:d8:1c:ba:40:90:bc:2d:eb:63:85:86:bf: d2:1f:85:ac:9e:47:7e:52:c7:e8:c4:6b:8e:a7:16:f0:63:da: 95:c4:68:64:2a:17:ac:e4:74:c6:5c:ab:a7:d3:37:59:9f:c7: fb:c3:4c:dd:6d:c2:8f:e7:00:ee:88:45:10:75:12:51:79:bd: 19:84:cc:c9:ad:a5:37:06:a8:60:80:72:30:d7:05:0d:5a:57: 58:aa:01:54:cc:08:ab:09:c4:3a:89:00:f1:7c:7f:59:aa:f7: af:e7:f6:db:47:12:3d:87:4b:82:cc:f0:45:61:5d:d7:3e:db: 7f:48:54:59:a0:ca:1a:d0:c9:4d:b7:dd:d2:5f:16:9d:2c:0d: de:50:81:a8:75:12:18:68:b5:8c:c8:89:a8:c9:02:a4:1b:d1: e4:aa:76:f0:be:11:7b:b2:b6:8a:50:a5:fb:54:3a:be:0c:a0: 93:1e:e7:31:d6:b4:3c:86:76:ca:da:3b:38:48:dd:ec:14:67: 25:27:b9:1c:ea:4b:03:11:b8:9b:06:19:e4:a9:e4:89:7f:1f: 4a:3c:17:f0:86:c4:2d:91:56:0f:3f:03:a9:0a:a6:9c:ba:03: 94:43:4b:6b:74:97:74:f0:46:6a:33:eb:5a:75:95:ec:87:36: f4:c2:1c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGY+8I7txOBpOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NWQ5Yzc3ZGItZGNjMS00OGExLWI3MjUtODExNDVkYWU0MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8V1yIAFWopkTUQoyBSgybZ/HNG6B+G8YHhNT s3iVq1WikzrsEP7/JZn9S+/UkHT2H2r6P0Py5vEQq4u+x7b/O1dybG0NTAEMWC1p QwSTHPrTGR/amc0dSrIj7ywdMO9GRdpy4sBzc4jkjxdQ70vzEWFfMEAHmGa2MAYy uSx/5/1VYAgc4wlGhMr/WnDV8OFf306OxlbhYd7/PImuekW3+/7KQKGIp1XCagVt uNokSwxrdVT/u7tQpxF3nKzjzr9s80jGqL3JUVvMeIvV8hTthobnvGpgDeCg8ejZ h4qWr8w8hPuQvOBgq366xXMhFPrp0p8iEzuRXbPBJE06o2I83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhEvnojrt3o/Q0f3Zt0hUUW+6PwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGNhMGRkNGQtNWUxMi0z MWI2LWEwNTMtYjk4N2UxNjg5YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBAXiP7h9gcukCQvC3rY4WGv9IfhayeR35Sx+jEa46nFvBj2pXEaGQq F6zkdMZcq6fTN1mfx/vDTN1two/nAO6IRRB1ElF5vRmEzMmtpTcGqGCAcjDXBQ1a V1iqAVTMCKsJxDqJAPF8f1mq96/n9ttHEj2HS4LM8EVhXdc+239IVFmgyhrQyU23 3dJfFp0sDd5Qgah1EhhotYzIiajJAqQb0eSqdvC+EXuytopQpftUOr4MoJMe5zHW tDyGdsraOzhI3ewUZyUnuRzqSwMRuJsGGeSp5Il/H0o8F/CGxC2RVg8/A6kKppy6 A5RDS2t0l3TwRmoz61p1leyHNvTCHLc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:30 2025 by rpki-client