$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99c6be4b-a490-3b1d-bb38-fffffb39fa53.roa File: 99c6be4b-a490-3b1d-bb38-fffffb39fa53.roa (raw, json) Hash identifier: 6nEx1IoCUkCCi/z935YFaLfrk7zboJTFJhJ2a+TPfHs= Subject key identifier: C0:AE:A0:92:79:EC:F6:A3:12:28:2E:F5:20:D8:56:24:AA:6D:B7:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21F9555733745D8C993C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99c6be4b-a490-3b1d-bb38-fffffb39fa53.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.161.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1f:95:55:73:37:45:d8:c9:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=603af161-4bec-46eb-9615-665609c9d767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:c0:c7:e5:2f:cd:ed:56:9f:c2:46:a0:ae: e6:0b:66:ef:dd:8c:42:5e:31:36:84:24:17:44:d0: fc:64:e4:62:51:ad:83:d7:40:72:4c:56:39:9b:05: 96:0e:72:d8:d6:93:85:83:1b:d6:b1:62:69:28:c0: c2:6a:06:76:80:73:38:8a:9f:8c:64:59:58:1d:8d: d0:41:f9:7e:19:97:3b:4d:d5:1f:fd:95:4a:d1:39: 4b:0f:35:34:e9:5d:ad:a3:22:9b:09:06:5d:f7:49: 83:19:6a:e3:6d:83:20:f7:e4:ba:37:81:78:19:22: c0:2f:53:0c:7a:e7:a2:1f:10:43:2c:07:4a:65:85: 28:56:c3:11:36:44:30:1a:3f:39:8b:a9:73:64:3f: 08:18:a5:d9:6f:7c:ea:2d:ce:f2:63:bd:91:e8:17: 26:b1:92:a7:26:39:63:93:88:5c:02:d9:3e:f2:15: 38:26:96:79:e6:62:6a:72:00:01:b9:a3:ae:ff:33: fc:c5:bb:cc:71:ce:f9:44:7f:3e:88:e8:c6:1a:a2: ef:4d:7c:b2:f4:d9:b1:18:11:21:a7:db:13:e8:ed: 6b:c1:9e:02:d1:45:ec:7e:90:4e:c4:94:8c:4c:74: 82:96:67:42:5f:86:08:de:d5:6e:d6:b8:5e:ee:36: 5f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AE:A0:92:79:EC:F6:A3:12:28:2E:F5:20:D8:56:24:AA:6D:B7:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99c6be4b-a490-3b1d-bb38-fffffb39fa53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:17:56:32:91:7e:1a:53:8e:b0:a2:c0:18:56:b9:9e:9f:31: c6:cf:99:2a:a1:a9:8b:6c:49:27:66:0f:52:a1:f7:05:eb:5b: e8:8b:00:c4:0d:6c:45:3f:df:dc:ae:76:a1:1f:1d:c3:da:9f: 25:69:96:e9:5d:ce:86:de:dc:0c:f8:c7:11:1c:03:5d:eb:89: a8:05:ec:86:16:1b:ff:35:75:69:2a:13:58:56:6b:ca:82:90: f4:52:51:da:19:d9:f0:74:c0:50:1d:ef:00:5d:41:c9:0e:96: 6c:90:1a:77:72:c7:b4:8b:75:84:d0:28:74:93:68:7f:ec:b4: f1:cb:f2:be:85:af:b3:ec:1c:34:f0:0b:1a:0d:ef:87:ee:16: 66:f2:a6:ae:ce:fc:14:72:9c:27:79:a9:35:9c:47:9a:8c:8f: 9e:ce:da:91:00:8e:41:9e:03:b3:37:fa:26:ba:0c:b1:b0:15: bb:f9:94:b6:42:5f:8c:6e:dc:ee:50:f5:aa:05:fb:7c:77:84: 31:03:d5:92:0a:bc:5d:5b:9a:28:f2:82:d2:dd:06:94:03:32: b7:2c:4a:da:9d:76:34:01:c5:14:9b:b9:35:b4:dc:52:61:9b: b5:df:ce:88:61:b3:22:8d:59:62:51:ac:ea:a6:44:4a:69:88: ac:e6:58:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28h+VVXM3RdjJk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NjAzYWYxNjEtNGJlYy00NmViLTk2MTUtNjY1NjA5YzlkNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0zAx+Uvze1Wn8JGoK7mC2bv3YxCXjE2hCQX RND8ZORiUa2D10ByTFY5mwWWDnLY1pOFgxvWsWJpKMDCagZ2gHM4ip+MZFlYHY3Q Qfl+GZc7TdUf/ZVK0TlLDzU06V2toyKbCQZd90mDGWrjbYMg9+S6N4F4GSLAL1MM eueiHxBDLAdKZYUoVsMRNkQwGj85i6lzZD8IGKXZb3zqLc7yY72R6BcmsZKnJjlj k4hcAtk+8hU4JpZ55mJqcgABuaOu/zP8xbvMcc75RH8+iOjGGqLvTXyy9NmxGBEh p9sT6O1rwZ4C0UXsfpBOxJSMTHSClmdCX4YI3tVu1rhe7jZf3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCuoJJ57PajEigu9SDYViSqbbdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTljNmJlNGItYTQ5MC0z YjFkLWJiMzgtZmZmZmZiMzlmYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkXVjKRfhpTjrCiwBhWuZ6fMcbPmSqhqYtsSSdmD1Kh9wXrW+iLAMQN bEU/39yudqEfHcPanyVpluldzobe3Az4xxEcA13riagF7IYWG/81dWkqE1hWa8qC kPRSUdoZ2fB0wFAd7wBdQckOlmyQGndyx7SLdYTQKHSTaH/stPHL8r6Fr7PsHDTw CxoN74fuFmbypq7O/BRynCd5qTWcR5qMj57O2pEAjkGeA7M3+ia6DLGwFbv5lLZC X4xu3O5Q9aoF+3x3hDED1ZIKvF1bmijygtLdBpQDMrcsStqddjQBxRSbuTW03FJh m7XfzohhsyKNWWJRrOqmREppiKzmWCk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:21:46 2025 by rpki-client