$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f7d8c1b-1f1f-34f2-8371-c34a101a2bb2.roa File: 9f7d8c1b-1f1f-34f2-8371-c34a101a2bb2.roa (raw, json) Hash identifier: BtpY8xVZrj0meHDpH2B7fNwAweByVf+r0uYVVOWxQ4E= Subject key identifier: 3B:12:FE:21:D9:68:D4:20:8F:77:4D:A1:60:A5:53:A8:30:FE:82:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2067068A9C38A4D1993493DC Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f7d8c1b-1f1f-34f2-8371-c34a101a2bb2.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:06:8a:9c:38:a4:d1:99:34:93:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=3f197be7-2bfc-4de1-89e5-4d4e4aeb2e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:f9:c1:1f:c2:35:6c:a9:83:fd:ee:45:a9: a5:97:51:41:06:41:3d:93:66:ad:f9:af:30:d5:e1: 3b:97:dc:0c:c9:73:4f:92:dd:dd:71:8d:f6:97:65: fd:c0:0c:af:36:b5:61:c7:34:8f:8c:80:d8:fb:06: da:f5:25:16:6c:8f:4f:78:e0:b0:09:3e:79:c1:5f: 6d:5c:7e:df:12:08:6f:9a:41:ba:e5:4c:3b:d6:85: 00:4c:69:7d:35:28:77:a2:42:f8:b6:0a:3e:85:84: 0f:ca:c3:86:75:aa:26:a8:c5:8f:3b:59:f8:3c:2a: 74:c2:96:b4:78:4c:b1:6c:72:58:8d:19:dc:6d:98: 22:1f:d4:e4:32:53:83:7d:5f:57:9e:34:b8:bd:fe: 8d:c0:c0:9b:14:34:bc:dd:e3:25:69:9e:92:65:5c: fd:54:25:f9:8d:69:95:96:15:91:77:94:55:49:33: 8a:76:9d:f2:48:f3:e1:d4:87:8b:79:10:d2:f9:3b: c3:c3:a6:2e:e9:59:89:92:86:ad:59:f0:5b:19:6e: 6a:d9:c5:17:4f:87:f3:30:ff:23:4e:fe:5b:e6:e0: 38:34:8b:4a:da:de:e6:df:86:22:19:2f:06:34:7f: 1e:79:1b:99:80:96:96:39:d2:e9:f5:9d:3d:9c:9a: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:12:FE:21:D9:68:D4:20:8F:77:4D:A1:60:A5:53:A8:30:FE:82:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f7d8c1b-1f1f-34f2-8371-c34a101a2bb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d5:ae:6f:09:4a:f8:48:7f:44:38:5f:3c:42:97:5f:79:b2: 89:36:a0:2f:1e:c6:93:4c:7d:14:fa:f9:42:5a:42:d2:55:d9: e5:ac:83:b0:36:cd:8b:15:d6:a8:30:0a:de:bf:b8:a1:f6:43: fb:79:0a:a1:73:17:e6:fb:9c:f9:9c:9a:52:29:77:ab:8d:24: c0:a4:5f:04:85:a4:ff:30:6a:9d:71:56:51:94:2f:e5:f9:5a: 0a:57:59:35:d4:7d:18:8d:b0:84:2f:59:80:bf:e2:d7:1a:28: ed:52:55:0c:7a:4d:15:a2:de:e5:89:eb:40:4b:c9:18:3e:5e: f3:f9:18:c9:c1:21:cd:b8:48:f9:af:19:99:30:8d:69:1d:f8: 28:ae:82:5b:09:0a:5e:3e:0b:89:4f:1a:ed:55:90:e8:fe:4a: d4:91:e7:38:1a:63:4d:b0:7a:0e:4b:2b:d8:85:ba:14:15:4e: ba:e9:2c:c9:b3:5b:24:01:cf:76:e4:ce:52:64:fd:54:09:3f: 39:90:47:58:61:92:a1:28:2e:e6:71:69:be:ef:f4:7a:1f:53: 7c:40:9d:3d:79:cd:1e:b6:df:90:31:a8:73:3b:a7:ca:5a:fa: 53:f3:a2:6e:62:74:82:8d:22:43:4d:5c:f2:12:e1:6c:96:d5: 2e:e5:86:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwaKnDik0Zk0k9wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk M2YxOTdiZTctMmJmYy00ZGUxLTg5ZTUtNGQ0ZTRhZWIyZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw75wR/CNWypg/3uRamll1FBBkE9k2at+a8w 1eE7l9wMyXNPkt3dcY32l2X9wAyvNrVhxzSPjIDY+wba9SUWbI9PeOCwCT55wV9t XH7fEghvmkG65Uw71oUATGl9NSh3okL4tgo+hYQPysOGdaomqMWPO1n4PCp0wpa0 eEyxbHJYjRncbZgiH9TkMlODfV9XnjS4vf6NwMCbFDS83eMlaZ6SZVz9VCX5jWmV lhWRd5RVSTOKdp3ySPPh1IeLeRDS+TvDw6Yu6VmJkoatWfBbGW5q2cUXT4fzMP8j Tv5b5uA4NItK2t7m34YiGS8GNH8eeRuZgJaWOdLp9Z09nJqHDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsS/iHZaNQgj3dNoWClU6gw/oKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWY3ZDhjMWItMWYxZi0z NGYyLTgzNzEtYzM0YTEwMWEyYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/Vrm8JSvhIf0Q4XzxCl195sok2oC8expNMfRT6+UJaQtJV2eWsg7A2 zYsV1qgwCt6/uKH2Q/t5CqFzF+b7nPmcmlIpd6uNJMCkXwSFpP8wap1xVlGUL+X5 WgpXWTXUfRiNsIQvWYC/4tcaKO1SVQx6TRWi3uWJ60BLyRg+XvP5GMnBIc24SPmv GZkwjWkd+CiuglsJCl4+C4lPGu1VkOj+StSR5zgaY02weg5LK9iFuhQVTrrpLMmz WyQBz3bkzlJk/VQJPzmQR1hhkqEoLuZxab7v9HofU3xAnT15zR6235AxqHM7p8pa +lPzom5idIKNIkNNXPIS4WyW1S7lhiU= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:51 2025 by rpki-client