$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96fa5b32-3a49-3a79-87b5-89ba3de609ab.roa File: 96fa5b32-3a49-3a79-87b5-89ba3de609ab.roa (raw, json) Hash identifier: f0HnQ8nGj06jz7VvJdvuh7Cs8M9xMNONWRz/2o7cvXk= Subject key identifier: 91:DB:CF:0D:6A:8A:F8:ED:17:4D:FE:22:2F:B2:F8:4F:C7:91:7D:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F289EE34961DFAB5917D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96fa5b32-3a49-3a79-87b5-89ba3de609ab.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.160.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:89:ee:34:96:1d:fa:b5:91:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3f9e3a39-ca33-410c-86af-3fc370b85d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:85:3f:00:04:fb:e1:db:d4:80:f6:7e:54: 8e:4a:4e:e2:17:1e:da:e5:87:9a:7e:4a:70:96:d4: e8:b4:16:06:7f:c0:20:6d:9c:ab:4c:53:fd:80:0b: ae:71:95:4f:04:b0:1b:dc:b7:e0:be:e5:a7:04:f5: d6:a1:4b:20:47:b4:87:4b:5e:11:9c:3e:74:68:d1: e5:8e:b7:dd:90:76:4c:37:ad:35:af:38:a1:b1:0a: 99:ba:0c:4b:a5:48:b7:16:4a:e1:d8:96:f3:01:c1: 24:a2:34:45:88:ef:fb:1d:74:56:87:62:e1:e5:28: 89:82:9d:58:67:02:ad:1a:76:ae:62:63:d5:ad:6c: 82:14:f3:b1:ba:41:0a:7a:c3:24:df:4e:38:88:d3: e7:3e:49:ff:63:e4:b6:29:a1:e8:f7:0d:aa:4e:5f: 06:6e:e4:c2:b8:26:c7:36:a9:89:d9:c8:5a:7a:a5: da:4d:07:53:b0:36:68:17:c7:3d:0c:17:a3:c2:78: 79:6d:14:aa:39:d7:03:9b:5a:b6:1c:fc:12:de:64: 61:8d:02:f2:fa:56:62:24:c8:80:96:d2:09:cd:5d: 3f:07:59:7b:7f:9f:a4:90:43:31:8d:36:2a:d8:ce: 82:d9:35:c4:6b:6b:06:ec:a3:b0:3f:3a:6f:73:53: d9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DB:CF:0D:6A:8A:F8:ED:17:4D:FE:22:2F:B2:F8:4F:C7:91:7D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96fa5b32-3a49-3a79-87b5-89ba3de609ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:66:63:c3:be:46:49:4a:83:f4:3f:d2:9f:9e:c3:14:39:f0: bf:93:70:b5:25:a6:c0:b5:fd:14:d7:c0:c7:73:12:87:46:2d: 2b:e2:6d:fe:f1:04:fa:f6:bd:a9:e6:57:84:07:e3:95:28:23: e1:92:76:6d:c8:b8:6f:ef:6b:ec:14:10:0d:12:45:62:94:ab: f9:a9:1b:b3:25:ad:4e:11:4b:b1:38:ae:53:9e:08:b8:a5:0c: 8c:cd:d8:30:90:c3:ee:e4:e8:af:db:c5:82:6e:10:0d:fb:98: df:09:e8:31:e5:cd:cf:fc:35:b2:6a:b9:27:1d:16:8c:9e:e2: 74:fc:fc:51:cb:d4:0d:57:60:27:b4:fc:5f:0f:1f:2d:aa:87: 3b:c5:d2:f1:db:60:0a:66:29:93:30:96:3b:b0:6e:5d:33:1d: df:a3:66:f8:e8:21:cb:b6:67:eb:18:68:6e:a7:70:b5:eb:5a: b6:e9:66:d3:e5:32:18:12:b2:43:21:e9:4d:f5:1f:5d:0b:5b: 1b:37:91:02:49:43:cd:7b:d2:7d:71:7d:29:8a:f1:37:bb:29: 63:fe:6a:f1:17:9f:87:d8:f8:c9:ca:80:a3:67:6a:09:87:87: 3c:ec:df:f7:24:90:da:9d:71:21:f9:59:62:7c:dc:a7:72:a7: c3:34:41:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28onuNJYd+rWRfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2Y5ZTNhMzktY2EzMy00MTBjLTg2YWYtM2ZjMzcwYjg1ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsiFPwAE++Hb1ID2flSOSk7iFx7a5Yeafkpw ltTotBYGf8AgbZyrTFP9gAuucZVPBLAb3LfgvuWnBPXWoUsgR7SHS14RnD50aNHl jrfdkHZMN601rzihsQqZugxLpUi3Fkrh2JbzAcEkojRFiO/7HXRWh2Lh5SiJgp1Y ZwKtGnauYmPVrWyCFPOxukEKesMk3044iNPnPkn/Y+S2KaHo9w2qTl8GbuTCuCbH NqmJ2chaeqXaTQdTsDZoF8c9DBejwnh5bRSqOdcDm1q2HPwS3mRhjQLy+lZiJMiA ltIJzV0/B1l7f5+kkEMxjTYq2M6C2TXEa2sG7KOwPzpvc1PZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHbzw1qivjtF03+Ii+y+E/HkX0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTZmYTViMzItM2E0OS0z YTc5LTg3YjUtODliYTNkZTYwOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqDfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABmY8O+RklKg/Q/0p+ewxQ58L+TcLUlpsC1/RTXwMdzEodGLSvibf7x BPr2vanmV4QH45UoI+GSdm3IuG/va+wUEA0SRWKUq/mpG7MlrU4RS7E4rlOeCLil DIzN2DCQw+7k6K/bxYJuEA37mN8J6DHlzc/8NbJquScdFoye4nT8/FHL1A1XYCe0 /F8PHy2qhzvF0vHbYApmKZMwljuwbl0zHd+jZvjoIcu2Z+sYaG6ncLXrWrbpZtPl MhgSskMh6U31H10LWxs3kQJJQ8170n1xfSmK8Te7KWP+avEXn4fY+MnKgKNnagmH hzzs3/ckkNqdcSH5WWJ83Kdyp8M0QaA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:53 2025 by rpki-client