$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c1e2867-a896-3701-ac3a-a7dc1a509907.roa File: 9c1e2867-a896-3701-ac3a-a7dc1a509907.roa (raw, json) Hash identifier: N3Xn3cyIi6X66szu/zWrcyqLr+xItXrEww4jZpA88Rw= Subject key identifier: A0:ED:A1:E9:3E:D3:BA:E6:4F:BB:2A:93:74:F4:AC:3C:63:13:4D:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C6E952E7D3B6D35F542E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c1e2867-a896-3701-ac3a-a7dc1a509907.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.174.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:6e:95:2e:7d:3b:6d:35:f5:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=23eb025a-b0d8-49ee-b7e3-94933f48e51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:9b:42:89:62:25:9b:82:07:49:5f:95:74: fa:a8:2c:81:dd:2b:0f:2e:99:b9:d0:5d:a6:f9:68: 3e:cb:f3:61:ac:97:70:69:e9:16:d7:c8:e9:9d:1e: 6b:e3:70:f3:d2:29:b3:61:58:4d:03:e4:47:bc:a9: cf:8a:34:31:0c:10:13:ff:18:0d:d4:73:a2:ad:fe: bf:fb:86:ab:a7:11:25:d2:d0:81:34:b4:79:0d:2b: 96:ce:ca:cc:50:1a:05:d0:62:49:1f:74:e8:e0:6c: e3:97:54:1e:52:65:b4:e5:d0:aa:ed:8b:62:37:47: 42:a7:81:84:87:b9:a3:8f:0f:15:ac:12:50:c0:3b: f4:ba:7a:d9:9c:0e:88:22:59:28:5d:69:a9:e9:54: ef:aa:b7:16:78:0f:17:1e:b8:cb:05:33:e4:2c:f0: 89:68:24:5f:de:14:d8:50:00:9e:cc:74:1b:5d:45: 4c:d0:d5:93:b7:9c:6b:3f:e2:c9:3c:39:bc:38:a9: 45:22:51:d7:a6:ff:f8:08:60:ba:eb:d5:eb:7e:65: 7b:e2:81:ed:d9:52:cd:4a:76:59:9c:69:0f:48:72: 33:32:2c:8f:65:fc:74:b4:3d:ef:8e:ca:83:32:e8: d9:b9:c4:54:83:bb:4f:48:54:c1:2a:2d:18:56:3e: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:ED:A1:E9:3E:D3:BA:E6:4F:BB:2A:93:74:F4:AC:3C:63:13:4D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c1e2867-a896-3701-ac3a-a7dc1a509907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9b:43:37:50:7b:cd:1e:37:ad:3a:78:aa:4e:25:4a:c5:d2: 6b:81:b5:ea:97:24:56:32:f7:17:8f:da:6f:0e:98:43:e7:95: ad:4b:40:9c:f9:5e:be:a8:1a:8d:d9:69:90:3a:8f:18:ba:79: 75:a6:fb:aa:cc:b1:b9:0d:f8:42:66:8f:fa:cb:ae:29:64:52: d6:ea:bd:a6:ed:f8:40:7a:79:de:72:c0:2c:5d:60:13:de:0d: 3d:f9:63:68:f6:37:66:78:24:60:8a:05:fd:84:57:79:f4:c8: 6e:4d:fd:1f:9a:04:93:74:12:25:8b:d8:42:72:74:67:87:3d: 9b:3c:75:c1:05:b0:37:83:3c:86:6b:35:db:f4:cb:d4:21:df: 8a:48:3e:81:6e:88:6f:bd:95:55:04:65:c7:d0:05:cb:72:90: b1:77:ad:c5:8d:11:78:b3:5d:30:33:30:66:ab:07:24:81:22: d7:19:e3:f4:24:aa:a9:ac:d2:54:86:b8:7e:1e:82:f8:26:f5: 04:67:f5:4f:55:1c:33:7c:f2:17:a9:dc:7f:33:b9:80:20:3a: 93:d5:fb:2f:dd:4a:b0:25:ff:85:78:76:19:8b:f4:5c:84:8d: be:6d:1a:c0:41:40:32:6b:df:65:de:dd:24:15:54:a6:43:17: a5:86:39:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnG6VLn07bTX1QuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MjNlYjAyNWEtYjBkOC00OWVlLWI3ZTMtOTQ5MzNmNDhlNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdqbQoliJZuCB0lflXT6qCyB3SsPLpm50F2m +Wg+y/NhrJdwaekW18jpnR5r43Dz0imzYVhNA+RHvKnPijQxDBAT/xgN1HOirf6/ +4arpxEl0tCBNLR5DSuWzsrMUBoF0GJJH3To4Gzjl1QeUmW05dCq7YtiN0dCp4GE h7mjjw8VrBJQwDv0unrZnA6IIlkoXWmp6VTvqrcWeA8XHrjLBTPkLPCJaCRf3hTY UACezHQbXUVM0NWTt5xrP+LJPDm8OKlFIlHXpv/4CGC669XrfmV74oHt2VLNSnZZ nGkPSHIzMiyPZfx0tD3vjsqDMujZucRUg7tPSFTBKi0YVj5IzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDtoek+07rmT7sqk3T0rDxjE03aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWMxZTI4NjctYTg5Ni0z NzAxLWFjM2EtYTdkYzFhNTA5OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq7HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKbQzdQe80eN606eKpOJUrF0muBteqXJFYy9xeP2m8OmEPnla1LQJz5 Xr6oGo3ZaZA6jxi6eXWm+6rMsbkN+EJmj/rLrilkUtbqvabt+EB6ed5ywCxdYBPe DT35Y2j2N2Z4JGCKBf2EV3n0yG5N/R+aBJN0EiWL2EJydGeHPZs8dcEFsDeDPIZr Ndv0y9Qh34pIPoFuiG+9lVUEZcfQBctykLF3rcWNEXizXTAzMGarBySBItcZ4/Qk qqms0lSGuH4egvgm9QRn9U9VHDN88hep3H8zuYAgOpPV+y/dSrAl/4V4dhmL9FyE jb5tGsBBQDJr32Xe3SQVVKZDF6WGOeo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:08 2025 by rpki-client