$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9df72cd1-5f08-34e2-990f-ed5e371ce94d.roa File: 9df72cd1-5f08-34e2-990f-ed5e371ce94d.roa (raw, json) Hash identifier: EzEn5TCZ5nYEX2AfLYMFPxujo0KTzQa6dxMmG7ICd0k= Subject key identifier: 83:F6:7F:23:B9:E6:EC:20:28:B5:CA:43:F7:80:00:1A:06:B3:C0:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671A0091D3A50FFEB9AE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9df72cd1-5f08-34e2-990f-ed5e371ce94d.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1a:00:91:d3:a5:0f:fe:b9:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=0af828b5-76d7-420c-be61-5ebd0b0d2a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:0f:4d:b2:99:b7:d6:f9:1b:16:b9:f2:c7: 1d:df:0a:df:99:26:d6:fb:66:33:ee:4f:b6:f0:0f: f4:04:08:b1:b9:e3:89:6a:76:83:9c:f9:f3:00:77: 7c:ed:e3:e5:a4:93:2c:83:0d:08:0b:f2:09:6c:69: 4a:6b:ba:06:bf:5c:b4:04:ec:f3:4d:f8:7c:e0:9b: 72:ea:ce:ff:13:90:e8:dd:1a:1b:b8:73:42:b9:ab: 51:05:49:1f:e4:6e:2b:3d:77:19:37:1b:e0:93:79: 8d:a7:a9:13:11:3b:4f:ea:14:93:e2:80:7e:16:ad: 97:dd:9a:6f:97:ee:68:4c:19:49:13:27:40:f4:84: bd:35:96:9e:30:24:db:9b:cd:3d:06:d7:50:53:6c: 8e:dc:b1:3d:be:fb:d6:2a:5c:5c:45:f0:1c:62:32: 12:10:b6:45:a2:44:73:cc:39:f0:82:1a:e5:d3:11: 32:d9:28:4b:72:32:e5:cb:d6:6b:e9:e9:03:9b:bd: 98:ea:5b:e5:c7:11:67:3a:d2:3b:a6:77:e3:ac:5f: 8e:2d:d6:79:65:c8:9c:8c:81:c2:80:fe:ba:56:b0: 35:c5:68:77:79:10:08:5e:be:c0:a2:84:f4:a5:c1: d9:be:9b:01:50:08:9f:eb:66:37:04:74:03:f3:09: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F6:7F:23:B9:E6:EC:20:28:B5:CA:43:F7:80:00:1A:06:B3:C0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9df72cd1-5f08-34e2-990f-ed5e371ce94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:7a:cb:88:fa:4d:fd:f9:b1:e5:e9:e4:d6:2e:ef:e0:9c:46: 9b:7c:2c:cd:92:02:c0:eb:5b:35:d0:19:10:98:7e:42:10:3a: 61:7f:da:c9:df:35:c6:0e:73:1e:28:02:f3:fd:db:cb:a3:e5: e4:da:9e:74:0e:ae:6f:66:4b:bd:1d:51:91:f0:68:26:fe:10: b8:d5:2b:93:0e:ba:02:a7:67:03:13:0c:12:ef:31:98:c6:82: 66:24:c3:59:9e:fb:9a:45:3c:30:c5:13:b8:3f:0f:f7:57:86: 6b:53:18:06:2b:04:72:d8:0a:a1:95:1a:79:e5:35:9f:b2:51: aa:f4:f5:b4:47:01:d5:17:d0:cc:4c:30:7b:26:44:43:a8:92: 70:1a:fb:1c:49:86:4a:af:c9:be:8a:4d:4c:74:a0:31:d6:9b: 82:6f:43:ad:23:e2:35:b9:86:fe:3f:e6:74:49:74:b7:c4:5c: ba:8d:5e:e0:91:06:3e:fc:51:68:bf:f6:a3:55:6a:ab:5e:8f: 0a:52:9f:7c:b4:7c:a9:59:95:50:24:31:ce:5a:3c:82:4f:25: b8:0b:28:fd:10:55:53:12:95:7b:0a:a7:04:cb:33:6c:35:36: d1:74:19:34:66:47:4d:0f:63:91:e1:f7:69:91:bf:65:9c:3f: 24:af:eb:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxoAkdOlD/65roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MGFmODI4YjUtNzZkNy00MjBjLWJlNjEtNWViZDBiMGQyYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsasPTbKZt9b5Gxa58scd3wrfmSbW+2Yz7k+2 8A/0BAixueOJanaDnPnzAHd87ePlpJMsgw0IC/IJbGlKa7oGv1y0BOzzTfh84Jty 6s7/E5Do3RobuHNCuatRBUkf5G4rPXcZNxvgk3mNp6kTETtP6hST4oB+Fq2X3Zpv l+5oTBlJEydA9IS9NZaeMCTbm809BtdQU2yO3LE9vvvWKlxcRfAcYjISELZFokRz zDnwghrl0xEy2ShLcjLly9Zr6ekDm72Y6lvlxxFnOtI7pnfjrF+OLdZ5ZcicjIHC gP66VrA1xWh3eRAIXr7AooT0pcHZvpsBUAif62Y3BHQD8wnKwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP2fyO55uwgKLXKQ/eAABoGs8CdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWRmNzJjZDEtNWYwOC0z NGUyLTk5MGYtZWQ1ZTM3MWNlOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR6y4j6Tf35seXp5NYu7+CcRpt8LM2SAsDrWzXQGRCYfkIQOmF/2snf NcYOcx4oAvP928uj5eTannQOrm9mS70dUZHwaCb+ELjVK5MOugKnZwMTDBLvMZjG gmYkw1me+5pFPDDFE7g/D/dXhmtTGAYrBHLYCqGVGnnlNZ+yUar09bRHAdUX0MxM MHsmREOoknAa+xxJhkqvyb6KTUx0oDHWm4JvQ60j4jW5hv4/5nRJdLfEXLqNXuCR Bj78UWi/9qNVaqtejwpSn3y0fKlZlVAkMc5aPIJPJbgLKP0QVVMSlXsKpwTLM2w1 NtF0GTRmR00PY5Hh92mRv2WcPySv628= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:11 2025 by rpki-client