$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d1c2c39-08e3-35c6-a5a1-0b4aa1ff477e.roa File: 8d1c2c39-08e3-35c6-a5a1-0b4aa1ff477e.roa (raw, json) Hash identifier: AjhtHyTbZLCAAq0OCgXqlbgESrCKiz22/cQAc89Lxqg= Subject key identifier: 84:53:23:43:AD:08:3E:21:DB:C8:13:55:F8:56:95:50:BD:FC:64:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29FBF7228A7F9F7F90380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d1c2c39-08e3-35c6-a5a1-0b4aa1ff477e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.160.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9f:bf:72:28:a7:f9:f7:f9:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4ff96b85-2754-4dea-85fc-04ed21b68dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cb:51:24:5e:8c:f8:15:22:9a:80:37:ad:69: 2e:4c:f1:2b:0e:0f:1c:65:24:e1:b7:79:3d:07:76: f3:5f:55:f8:18:7a:1c:10:7b:40:62:35:ff:da:0d: 8b:d0:4a:00:df:7c:48:22:5b:61:2d:b1:39:bc:f3: e0:b8:4b:30:6a:d9:d0:db:fe:eb:4a:1c:e2:ef:cc: ad:7a:38:bb:e5:cf:6e:4f:e0:c5:3f:59:44:61:87: 17:8f:c5:3a:9b:53:b9:af:39:c5:3b:b7:97:62:7e: 01:a4:3c:62:61:ac:ef:ef:ea:bb:d5:17:fe:23:b2: de:cf:9d:72:6d:18:0e:d0:8a:df:67:d0:cd:0d:e8: 8c:1e:32:82:a1:fa:f7:9b:8d:73:75:a9:bc:71:be: 29:9e:2c:70:64:d5:94:15:d4:ab:b2:05:52:33:9a: 2d:95:01:dc:d1:62:3a:7e:c6:97:20:9a:ee:61:6a: ed:e6:2d:c8:ab:e6:9b:cd:39:64:b4:aa:a9:34:45: 16:7e:a3:73:b0:b3:67:ee:6a:c6:fd:0d:38:3b:df: 22:da:5d:1c:70:04:b9:72:be:a3:99:63:25:b3:69: 0a:db:df:1f:a5:9f:fb:9f:b7:26:c0:c3:77:d1:23: 93:29:51:b5:25:0c:da:ce:40:93:a5:3d:bb:cf:2b: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:53:23:43:AD:08:3E:21:DB:C8:13:55:F8:56:95:50:BD:FC:64:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d1c2c39-08e3-35c6-a5a1-0b4aa1ff477e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3b:0a:56:2e:22:f6:7f:c8:54:7a:36:e4:8f:ff:a6:cd:6c: 58:48:1d:bc:7f:07:aa:f1:1b:18:89:a9:a7:3e:66:e8:77:f1: 2d:ad:19:f3:60:be:a0:dd:6b:8f:56:73:7a:4b:5d:41:dc:52: b5:8d:10:20:32:90:08:83:cd:ad:3c:8d:9e:d0:74:13:c5:c1: 63:d5:09:b8:d9:83:38:aa:93:61:49:c1:54:2d:ed:4f:6d:3e: 95:e8:89:b9:3d:5c:1b:96:b4:2b:e7:e8:c9:3b:c5:be:f4:f9: 07:b2:56:8b:50:c0:72:35:2a:0b:b5:2b:16:f1:22:7c:80:ca: d1:6d:64:43:63:ae:37:d9:cc:c3:5b:5e:6b:7f:88:5f:15:ba: a4:69:5c:95:93:2e:be:03:ac:ab:0d:b2:b0:83:e2:7e:94:73: 39:14:d9:2a:09:9b:f3:34:f6:e7:4c:49:a6:08:b7:d8:4f:34: 66:c7:8a:33:5e:30:8e:1f:0a:3c:2b:88:f1:35:fc:80:97:06: c8:12:16:dd:04:66:2f:32:91:35:de:5f:0e:a8:91:2c:20:98: ae:ab:db:db:48:ef:ca:d1:9f:9d:8b:85:8e:07:9f:b7:f1:97: f5:7a:9d:6c:bb:08:e3:02:69:de:a6:90:f5:34:b3:6c:e0:6e: 6e:fc:65:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28p+/ciin+ff5A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGZmOTZiODUtMjc1NC00ZGVhLTg1ZmMtMDRlZDIxYjY4ZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8tRJF6M+BUimoA3rWkuTPErDg8cZSTht3k9 B3bzX1X4GHocEHtAYjX/2g2L0EoA33xIIlthLbE5vPPguEswatnQ2/7rShzi78yt eji75c9uT+DFP1lEYYcXj8U6m1O5rznFO7eXYn4BpDxiYazv7+q71Rf+I7Lez51y bRgO0IrfZ9DNDeiMHjKCofr3m41zdam8cb4pnixwZNWUFdSrsgVSM5otlQHc0WI6 fsaXIJruYWrt5i3Iq+abzTlktKqpNEUWfqNzsLNn7mrG/Q04O98i2l0ccAS5cr6j mWMls2kK298fpZ/7n7cmwMN30SOTKVG1JQzazkCTpT27zyvKtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRTI0OtCD4h28gTVfhWlVC9/GRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGQxYzJjMzktMDhlMy0z NWM2LWE1YTEtMGI0YWExZmY0NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk7ClYuIvZ/yFR6NuSP/6bNbFhIHbx/B6rxGxiJqac+Zuh38S2tGfNg vqDda49Wc3pLXUHcUrWNECAykAiDza08jZ7QdBPFwWPVCbjZgziqk2FJwVQt7U9t PpXoibk9XBuWtCvn6Mk7xb70+QeyVotQwHI1Kgu1KxbxInyAytFtZENjrjfZzMNb Xmt/iF8VuqRpXJWTLr4DrKsNsrCD4n6UczkU2SoJm/M09udMSaYIt9hPNGbHijNe MI4fCjwriPE1/ICXBsgSFt0EZi8ykTXeXw6okSwgmK6r29tI78rRn52LhY4Hn7fx l/V6nWy7COMCad6mkPU0s2zgbm78ZSQ= -----END CERTIFICATE-----Generated at Thu Oct 16 01:31:18 2025 by rpki-client