$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f0743ec-ca6f-30fc-83c8-745f904cc056.roa File: 9f0743ec-ca6f-30fc-83c8-745f904cc056.roa (raw, json) Hash identifier: vQVEDetFQiB13lAT7keV5T5qAzmffEXniVudJzp03eQ= Subject key identifier: CB:17:B9:97:9E:F1:45:B7:A0:FE:8A:4E:B8:1E:A2:39:27:85:FA:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206707CB043ED4EC0A117400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f0743ec-ca6f-30fc-83c8-745f904cc056.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:07:cb:04:3e:d4:ec:0a:11:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=bb5b2fb2-6434-4e5b-89b0-ce21deed678e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:00:ab:3e:da:56:ae:a2:6d:74:20:fe:b8:dc: 31:e9:28:f5:eb:3b:a3:64:97:36:d0:c8:08:39:b9: 06:8d:0b:e5:84:6c:57:d0:eb:77:c2:97:34:d4:2b: db:89:f9:40:56:89:7f:5c:d9:86:e0:32:db:78:43: 7a:fe:aa:ee:70:67:99:56:65:86:e0:cf:9c:33:f7: 33:6c:e5:bd:76:94:60:59:2b:c1:f6:ee:b8:03:de: ec:15:5e:d6:0e:06:3e:38:8c:c5:57:bf:35:fb:d5: 16:67:2a:62:26:90:59:d2:e4:ef:7f:f1:b4:90:d0: af:b3:58:95:52:b0:9f:af:37:d7:d1:be:2e:af:51: df:5c:41:a6:15:aa:fe:60:37:d5:0d:4b:9f:41:c6: fc:f1:66:90:bd:75:e4:30:19:b7:f3:fd:aa:44:e3: 32:a9:59:47:95:a9:b4:72:9d:84:10:38:0b:ec:6b: eb:8b:e6:62:8a:37:fa:90:f3:a7:f0:d9:04:f4:d5: 3b:14:aa:d4:55:ad:7e:6e:da:2e:5f:a3:94:96:80: 85:16:c0:15:67:f8:3c:03:f7:ea:3d:a1:e0:92:32: f4:cc:bb:97:45:29:d5:99:ce:c7:d9:92:25:4f:10: b4:a6:4d:86:8c:f3:45:05:ae:7c:37:b1:a3:9d:48: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:17:B9:97:9E:F1:45:B7:A0:FE:8A:4E:B8:1E:A2:39:27:85:FA:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f0743ec-ca6f-30fc-83c8-745f904cc056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2e:96:21:3e:cf:56:a3:74:e8:f7:ca:21:28:82:34:67:7b: c9:e6:99:fa:02:7a:78:a2:b5:ac:dd:57:9b:63:36:b2:9e:69: 70:5d:5a:ba:2c:57:18:5c:e1:00:2f:8e:d9:c7:8d:e1:ce:62: 45:f6:55:b2:4f:67:c1:28:3f:e9:24:04:41:25:cc:e7:22:32: 95:1f:a2:c4:65:2c:52:2d:fa:0e:76:a4:a6:01:69:46:94:19: 2d:a9:3f:b0:e8:ea:cd:28:8f:aa:47:29:d8:10:11:d0:f5:64: 1d:8b:54:03:e1:35:a7:f2:ed:df:90:83:fd:b9:a1:f0:f2:79: 9b:43:d5:e7:79:d0:a9:70:d1:ba:6a:8e:a5:33:3c:93:de:8c: d8:4e:98:7d:52:62:89:da:fe:c3:ff:c4:1b:63:3d:9f:53:3d: 13:b0:f9:a1:5e:94:c2:c0:e2:19:37:ba:82:73:97:66:f4:d9: 19:91:3d:41:20:58:7e:6f:00:c2:e0:04:2d:62:0a:2a:aa:00: 92:dc:24:34:53:dd:ca:8d:58:f6:b5:07:99:33:9e:29:ec:31: 63:5b:66:1d:a0:4a:cf:c8:9e:43:50:87:40:98:2e:e1:27:83: 65:5b:fd:b8:70:c1:14:2c:b7:1d:45:f9:9c:3d:a6:3c:38:c8: a0:6e:8b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwfLBD7U7AoRdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YmI1YjJmYjItNjQzNC00ZTViLTg5YjAtY2UyMWRlZWQ2NzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQCrPtpWrqJtdCD+uNwx6Sj16zujZJc20MgI ObkGjQvlhGxX0Ot3wpc01CvbiflAVol/XNmG4DLbeEN6/qrucGeZVmWG4M+cM/cz bOW9dpRgWSvB9u64A97sFV7WDgY+OIzFV781+9UWZypiJpBZ0uTvf/G0kNCvs1iV UrCfrzfX0b4ur1HfXEGmFar+YDfVDUufQcb88WaQvXXkMBm38/2qROMyqVlHlam0 cp2EEDgL7Gvri+Ziijf6kPOn8NkE9NU7FKrUVa1+btouX6OUloCFFsAVZ/g8A/fq PaHgkjL0zLuXRSnVmc7H2ZIlTxC0pk2GjPNFBa58N7GjnUh1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsXuZee8UW3oP6KTrgeojknhfpbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWYwNzQzZWMtY2E2Zi0z MGZjLTgzYzgtNzQ1ZjkwNGNjMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYuliE+z1ajdOj3yiEogjRne8nmmfoCeniitazdV5tjNrKeaXBdWros Vxhc4QAvjtnHjeHOYkX2VbJPZ8EoP+kkBEElzOciMpUfosRlLFIt+g52pKYBaUaU GS2pP7Do6s0oj6pHKdgQEdD1ZB2LVAPhNafy7d+Qg/25ofDyeZtD1ed50Klw0bpq jqUzPJPejNhOmH1SYona/sP/xBtjPZ9TPROw+aFelMLA4hk3uoJzl2b02RmRPUEg WH5vAMLgBC1iCiqqAJLcJDRT3cqNWPa1B5kzninsMWNbZh2gSs/InkNQh0CYLuEn g2Vb/bhwwRQstx1F+Zw9pjw4yKBui3M= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:11 2025 by rpki-client