$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b9cc989-3bad-3fd6-a40b-7ae9f8ee0971.roa File: 9b9cc989-3bad-3fd6-a40b-7ae9f8ee0971.roa (raw, json) Hash identifier: aqEh0lbW06VSTWCWfVDj3BnOmLz2RFEpGvsE4Cic470= Subject key identifier: A4:93:B7:69:2D:EE:D1:60:FF:35:C8:3E:64:E6:04:16:28:23:EE:7B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C689BE9A6052C5B1A9810 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b9cc989-3bad-3fd6-a40b-7ae9f8ee0971.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.171.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:68:9b:e9:a6:05:2c:5b:1a:98:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=59bffe9c-1967-4dbb-95a8-66797804e3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:ba:16:39:9d:07:87:57:ef:cf:84:bb:aa: c1:91:39:0d:05:c5:9e:63:ef:a7:dd:95:52:ac:ff: 2b:23:eb:f4:0e:f9:b9:d2:c9:5d:a5:d9:c6:d5:07: 79:ad:48:0f:7c:f9:60:65:25:5e:e3:7f:30:c4:26: 9d:a7:9a:59:a8:39:3d:dd:ac:76:71:89:6d:eb:2f: dd:f7:c9:e0:0c:a0:a9:56:d5:6e:06:13:c5:03:46: 97:68:1e:fe:66:2f:c1:40:06:34:4b:97:1d:43:1a: 7e:7f:81:0e:a9:6a:8d:f4:e3:1c:02:d3:43:e1:58: 2e:a8:6c:37:48:e4:87:eb:08:f0:06:22:6f:ab:9e: b7:76:e5:03:63:b6:26:ca:b2:67:ec:9d:38:c5:3f: 51:b7:a0:ae:82:13:d1:f0:52:2f:0b:9b:82:14:82: 11:c3:00:33:33:d4:cf:87:fe:2b:05:3b:d9:de:31: bf:79:b6:90:b5:62:55:ac:6a:fe:3b:f3:f9:53:2c: 12:5e:e1:4b:f0:11:42:19:4a:2d:21:75:30:d2:7f: 39:32:52:fc:3f:4f:71:12:44:e0:cd:fe:6c:c9:9e: 5e:e8:30:65:aa:f9:01:7d:a9:bb:00:2f:80:cc:5a: 51:38:70:da:fe:cb:cf:86:f3:f4:3b:e5:c7:71:27: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:93:B7:69:2D:EE:D1:60:FF:35:C8:3E:64:E6:04:16:28:23:EE:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b9cc989-3bad-3fd6-a40b-7ae9f8ee0971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b8:07:86:a3:ad:82:7f:28:45:e4:1f:66:22:55:e5:d1:c8: 43:77:e3:1b:59:8a:1e:6f:62:5b:a1:10:0b:d3:e1:3d:7c:a8: b0:2f:f5:bf:31:6f:fa:46:57:9b:36:b4:ad:23:7c:e2:9a:57: 10:7c:3f:3d:e4:a5:94:b9:a4:08:09:0e:b4:5b:7d:49:be:d3: 07:a5:34:9d:aa:13:2b:83:50:1a:57:7d:0a:e2:31:9f:ee:e2: 08:b5:48:08:82:98:33:54:bc:df:49:71:f9:6a:a1:1e:be:59: 53:19:d0:ed:d9:6c:ca:61:73:81:45:c3:ad:d5:1f:98:3f:c0: d2:76:27:bb:29:99:d7:56:3d:61:5b:b1:bf:f6:2d:da:86:21: e1:f9:a3:56:da:cc:5a:bf:6b:55:18:c9:d7:12:c7:d9:ce:f8: 45:cd:23:da:09:41:47:90:a7:2e:9a:87:18:eb:dd:c6:1b:12: 6d:05:5e:28:76:dc:dd:0c:2b:e8:b9:06:6d:cb:e6:38:6b:1f: 91:8d:31:1b:be:c4:df:00:ed:b1:87:9b:0d:69:4a:0d:d7:df: 4f:6e:fb:97:e6:62:46:db:4b:0c:52:ec:6a:61:2a:61:fc:a2: 9a:21:12:e8:36:45:a1:8b:de:82:88:eb:b2:87:80:86:55:f6: 5a:3f:2b:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGib6aYFLFsamBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTliZmZlOWMtMTk2Ny00ZGJiLTk1YTgtNjY3OTc4MDRlM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJy6FjmdB4dX78+Eu6rBkTkNBcWeY++n3ZVS rP8rI+v0Dvm50sldpdnG1Qd5rUgPfPlgZSVe438wxCadp5pZqDk93ax2cYlt6y/d 98ngDKCpVtVuBhPFA0aXaB7+Zi/BQAY0S5cdQxp+f4EOqWqN9OMcAtND4VguqGw3 SOSH6wjwBiJvq563duUDY7YmyrJn7J04xT9Rt6CughPR8FIvC5uCFIIRwwAzM9TP h/4rBTvZ3jG/ebaQtWJVrGr+O/P5UywSXuFL8BFCGUotIXUw0n85MlL8P09xEkTg zf5syZ5e6DBlqvkBfam7AC+AzFpROHDa/svPhvP0O+XHcScBfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSTt2kt7tFg/zXIPmTmBBYoI+57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWI5Y2M5ODktM2JhZC0z ZmQ2LWE0MGItN2FlOWY4ZWUwOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG4B4ajrYJ/KEXkH2YiVeXRyEN34xtZih5vYluhEAvT4T18qLAv9b8x b/pGV5s2tK0jfOKaVxB8Pz3kpZS5pAgJDrRbfUm+0welNJ2qEyuDUBpXfQriMZ/u 4gi1SAiCmDNUvN9JcflqoR6+WVMZ0O3ZbMphc4FFw63VH5g/wNJ2J7spmddWPWFb sb/2LdqGIeH5o1bazFq/a1UYydcSx9nO+EXNI9oJQUeQpy6ahxjr3cYbEm0FXih2 3N0MK+i5Bm3L5jhrH5GNMRu+xN8A7bGHmw1pSg3X309u+5fmYkbbSwxS7GphKmH8 opohEug2RaGL3oKI67KHgIZV9lo/KwM= -----END CERTIFICATE-----Generated at Thu Oct 16 01:33:46 2025 by rpki-client