$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8eaa2db0-f3db-356a-8492-e717d0600e6e.roa File: 8eaa2db0-f3db-356a-8492-e717d0600e6e.roa (raw, json) Hash identifier: nKo5urfB0F4mt30YgWfUoL6Koz5+ElxIlxwESSKw1uI= Subject key identifier: 8F:EB:1E:5B:01:EC:E7:51:DD:20:CE:B9:98:55:73:45:F3:A3:A3:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C5F3504B3BE8F3F8D0E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8eaa2db0-f3db-356a-8492-e717d0600e6e.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.162.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:5f:35:04:b3:be:8f:3f:8d:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=bcfb7923-c128-4884-b712-045447f98f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:09:59:f0:76:28:18:a1:3f:f7:a0:ff:01: 4f:bb:87:88:5d:46:70:22:59:3d:c0:fa:40:57:1b: 64:3f:12:5f:38:c6:73:28:2a:f6:c2:af:e2:21:13: 55:c9:e4:23:75:58:39:9f:5d:7f:42:75:df:c2:9e: 23:06:19:bf:bc:4e:45:a9:74:42:2b:41:6a:fc:3b: 40:5f:2d:6b:4a:94:3d:93:cc:fd:ae:99:42:16:52: 2a:38:cc:80:0c:40:bf:8d:f9:9f:13:25:c0:b5:9c: 80:c1:02:83:80:f4:c3:29:d0:75:d1:7e:23:a1:d9: 7e:88:cf:f7:12:91:7f:23:72:9c:78:aa:5d:0e:38: cd:ac:48:c2:05:c0:e4:94:a8:23:dc:7b:43:47:6d: 8a:17:c1:fb:16:4a:79:ad:76:28:8e:ba:32:26:00: 3f:7e:a8:ec:cd:c4:50:f1:b2:8c:00:80:24:44:ed: 08:53:4f:10:1d:94:7a:77:a1:01:19:8b:b8:44:93: 4b:f9:72:4e:6e:c2:4e:ce:d9:88:2c:61:45:f1:07: 87:71:e4:38:68:c0:f1:09:0b:1e:4f:19:fa:f8:2b: 84:f1:6d:06:3c:d3:85:75:2c:0e:1d:97:39:85:37: b6:03:c4:9b:f0:47:eb:9c:ba:80:08:4e:d4:76:f3: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EB:1E:5B:01:EC:E7:51:DD:20:CE:B9:98:55:73:45:F3:A3:A3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8eaa2db0-f3db-356a-8492-e717d0600e6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.162.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:56:49:62:b9:0d:9c:44:04:82:94:db:b8:e8:5b:ea:9e:91: 95:6b:96:8f:20:0c:f6:2c:cc:29:54:ce:1b:ab:92:33:de:95: 46:75:30:a2:37:eb:85:47:5b:5e:2a:25:0e:86:28:5d:df:a9: 75:ee:4e:99:1c:68:c9:98:bf:4d:d3:3a:5e:81:46:5e:d2:77: f3:4e:40:78:10:7f:07:5f:9f:e9:fc:3d:67:06:4c:d9:43:e1: aa:9d:f0:f2:99:ae:2a:b7:f2:c5:60:cf:dd:f0:fe:33:60:20: 68:65:47:18:79:4d:23:77:fc:b8:e0:17:4b:62:7c:6f:a6:08: 42:ef:8b:23:25:e4:00:00:f2:18:37:ae:d7:e7:39:1b:98:39: e3:0a:ec:e6:0f:49:a1:1e:ba:77:30:2d:25:a3:cc:c5:19:86: 90:33:b9:47:12:e7:e6:ec:54:f6:88:7d:79:c7:ab:03:b2:3e: 30:04:5c:5a:d4:15:cd:37:d6:f2:dc:ce:02:b7:df:47:9b:1a: dc:4c:9b:7d:0a:15:d1:0f:81:3f:b8:cc:14:f7:ec:a6:7b:c4: 5f:1c:77:46:4d:5c:3b:87:07:a9:94:0e:8f:83:e9:c0:36:f9: d0:9a:21:e8:3c:b4:72:16:5d:8f:e6:ce:fb:9c:a6:5c:c0:94: 32:70:92:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnF81BLO+jz+NDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YmNmYjc5MjMtYzEyOC00ODg0LWI3MTItMDQ1NDQ3Zjk4ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCYJWfB2KBihP/eg/wFPu4eIXUZwIlk9wPpA VxtkPxJfOMZzKCr2wq/iIRNVyeQjdVg5n11/QnXfwp4jBhm/vE5FqXRCK0Fq/DtA Xy1rSpQ9k8z9rplCFlIqOMyADEC/jfmfEyXAtZyAwQKDgPTDKdB10X4jodl+iM/3 EpF/I3KceKpdDjjNrEjCBcDklKgj3HtDR22KF8H7Fkp5rXYojroyJgA/fqjszcRQ 8bKMAIAkRO0IU08QHZR6d6EBGYu4RJNL+XJObsJOztmILGFF8QeHceQ4aMDxCQse Txn6+CuE8W0GPNOFdSwOHZc5hTe2A8Sb8EfrnLqACE7UdvNA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/rHlsB7OdR3SDOuZhVc0Xzo6MhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGVhYTJkYjAtZjNkYi0z NTZhLTg0OTItZTcxN2QwNjAwZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhWSWK5DZxEBIKU27joW+qekZVrlo8gDPYszClUzhurkjPelUZ1MKI3 64VHW14qJQ6GKF3fqXXuTpkcaMmYv03TOl6BRl7Sd/NOQHgQfwdfn+n8PWcGTNlD 4aqd8PKZriq38sVgz93w/jNgIGhlRxh5TSN3/LjgF0tifG+mCELviyMl5AAA8hg3 rtfnORuYOeMK7OYPSaEeuncwLSWjzMUZhpAzuUcS5+bsVPaIfXnHqwOyPjAEXFrU Fc031vLczgK330ebGtxMm30KFdEPgT+4zBT37KZ7xF8cd0ZNXDuHB6mUDo+D6cA2 +dCaIeg8tHIWXY/mzvucplzAlDJwkoI= -----END CERTIFICATE-----Generated at Thu Oct 16 01:31:16 2025 by rpki-client