$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/999f6cd0-f594-3bbb-84fb-671ed48a155b.roa File: 999f6cd0-f594-3bbb-84fb-671ed48a155b.roa (raw, json) Hash identifier: Cmq5QzAY5lfflg4DvP/e5bFlc4dEq6NQ+MRFbDa4taY= Subject key identifier: D8:AE:A7:DA:FC:1C:F7:28:0E:8B:BF:38:8C:95:CA:72:EA:FC:00:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B98CB053F665CEBAB6F2F9380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/999f6cd0-f594-3bbb-84fb-671ed48a155b.roa Signing time: Tue 21 Oct 2025 15:59:38 +0000 ROA not before: Tue 21 Oct 2025 15:59:38 +0000 ROA not after: Mon 19 Jan 2026 16:59:38 +0000 asID: 22773 IP address blocks: 70.173.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:cb:05:3f:66:5c:eb:ab:6f:2f:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 21 15:59:38 2025 GMT Not After : Jan 19 16:59:38 2026 GMT Subject: CN=75deaa88-33b4-42bb-a986-b43db4d771b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d0:17:24:b6:77:6f:45:10:b5:c2:cb:1d:dc: b7:5b:3c:9a:b6:cd:c0:76:26:5f:f4:19:b6:96:72: d8:14:8d:5b:a6:41:94:e3:4a:64:94:6a:22:da:18: 7a:4e:d4:2c:61:40:65:db:e1:85:b5:53:9e:7e:f0: c0:eb:c0:9d:52:fb:30:8c:9e:99:81:8f:89:a3:b7: 4d:4a:1a:a3:aa:a2:81:9b:2a:87:34:88:2e:a1:7b: c6:e5:81:d3:6f:40:ed:eb:7d:85:47:58:db:90:75: d7:7c:ef:39:b3:53:87:b5:6b:49:49:a6:53:5b:97: 1a:4b:54:14:4b:a7:fc:ff:62:57:1f:12:75:2b:4d: 49:63:b4:5e:4c:bc:1a:f3:7e:88:7f:ae:95:35:a3: 2b:55:24:1c:ca:10:15:0c:c5:49:3a:b9:e2:be:12: 99:4e:d9:46:86:2f:55:a7:9a:99:ba:12:c4:55:1d: 25:da:be:ba:35:8e:84:ee:ea:95:c9:d2:90:a1:3c: 3d:a2:b9:92:0d:18:c6:d4:ec:22:78:2b:b7:35:61: f4:fc:84:17:ac:00:75:30:74:84:04:9a:56:f3:02: 53:08:4e:6d:db:4b:68:3a:ce:fe:8a:3f:70:e1:e4: 03:d8:6c:57:a1:76:aa:e3:11:1c:67:d7:3d:73:7c: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AE:A7:DA:FC:1C:F7:28:0E:8B:BF:38:8C:95:CA:72:EA:FC:00:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/999f6cd0-f594-3bbb-84fb-671ed48a155b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a2:d3:87:90:a4:7a:35:90:f9:c7:38:a8:6c:ca:40:b9:2d: 82:27:a6:90:45:a4:e7:45:54:59:ea:15:c8:98:66:bc:04:2a: 89:27:78:b7:7a:f0:35:7c:c0:69:a8:a3:74:32:0d:e5:d7:11: f2:d1:16:cd:35:37:c9:bd:33:77:11:aa:3b:97:e9:d9:39:89: 10:32:8c:ab:fa:82:b7:d0:72:5d:87:55:4d:3c:85:fd:ba:e6: dd:d9:80:b5:f6:9b:7d:9a:43:f6:3b:32:97:7a:0d:7d:88:2d: f6:4c:bd:2e:3b:28:c9:7f:d5:a0:5a:65:89:0a:43:ca:97:8f: 59:8f:21:c7:4a:3f:f4:a7:33:85:75:af:6f:49:7e:81:f6:06: a7:92:c7:b4:16:45:55:4a:94:54:04:2d:91:d4:4e:06:b7:d6: 3d:48:d0:de:c4:83:f1:ac:d1:34:e7:f7:3a:78:a7:39:c1:ce: 20:3a:68:a9:d9:3f:0b:66:e9:83:23:d7:4a:09:16:c8:d4:f1: 7b:3c:4c:85:4b:ef:68:d5:69:b3:39:d9:a4:e8:f0:c8:57:20: df:20:79:f3:60:6c:00:79:84:bf:77:bb:fb:5d:38:90:b1:83: f5:59:54:d2:9d:5f:7a:39:e8:12:dc:e3:d2:0e:c9:1e:70:1a: aa:7a:e4:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYywU/Zlzrq28vk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyMTE1NTkzOFoXDTI2MDExOTE2NTkzOFowLzEtMCsGA1UEAxMk NzVkZWFhODgtMzNiNC00MmJiLWE5ODYtYjQzZGI0ZDc3MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitAXJLZ3b0UQtcLLHdy3Wzyats3AdiZf9Bm2 lnLYFI1bpkGU40pklGoi2hh6TtQsYUBl2+GFtVOefvDA68CdUvswjJ6ZgY+Jo7dN ShqjqqKBmyqHNIguoXvG5YHTb0Dt632FR1jbkHXXfO85s1OHtWtJSaZTW5caS1QU S6f8/2JXHxJ1K01JY7ReTLwa836If66VNaMrVSQcyhAVDMVJOrnivhKZTtlGhi9V p5qZuhLEVR0l2r66NY6E7uqVydKQoTw9ormSDRjG1OwieCu3NWH0/IQXrAB1MHSE BJpW8wJTCE5t20toOs7+ij9w4eQD2GxXoXaq4xEcZ9c9c3wJPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiup9r8HPcoDou/OIyVynLq/ADVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTk5ZjZjZDAtZjU5NC0z YmJiLTg0ZmItNjcxZWQ0OGExNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAai04eQpHo1kPnHOKhsykC5LYInppBFpOdFVFnqFciYZrwEKokneLd6 8DV8wGmoo3QyDeXXEfLRFs01N8m9M3cRqjuX6dk5iRAyjKv6grfQcl2HVU08hf26 5t3ZgLX2m32aQ/Y7Mpd6DX2ILfZMvS47KMl/1aBaZYkKQ8qXj1mPIcdKP/SnM4V1 r29JfoH2BqeSx7QWRVVKlFQELZHUTga31j1I0N7Eg/Gs0TTn9zp4pznBziA6aKnZ Pwtm6YMj10oJFsjU8Xs8TIVL72jVabM52aTo8MhXIN8gefNgbAB5hL93u/tdOJCx g/VZVNKdX3o56BLc49IOyR5wGqp65OI= -----END CERTIFICATE-----Generated at Mon Nov 3 17:19:15 2025 by rpki-client