$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a00cddab-e57b-305e-955f-847f1a94bbff.roa File: a00cddab-e57b-305e-955f-847f1a94bbff.roa (raw, json) Hash identifier: K0LlzOer3949vtvJcJSeIu8+2nJ7GgZfYjqbwHbwNLE= Subject key identifier: 15:D4:94:81:46:DA:7F:FB:9A:BD:D8:51:1B:6B:CC:86:67:15:FB:E1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C6B3C20730032A49C6180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a00cddab-e57b-305e-955f-847f1a94bbff.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.172.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:6b:3c:20:73:00:32:a4:9c:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=fce0a395-3f14-4e1d-8167-4d9cb2ebd951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:1b:d7:7f:2a:33:d7:c1:c0:9e:77:4e:e9: 9d:c3:df:15:1d:c3:46:ba:d3:f0:a9:13:f9:2b:05: a3:16:f4:13:36:7b:de:3d:94:73:64:96:08:e1:4f: 65:ee:ad:49:db:af:27:19:26:98:d3:56:ed:ab:41: 71:ab:0d:df:b0:6d:27:17:a6:49:a4:22:cf:9b:68: e4:8b:03:01:fb:74:a2:50:f4:0e:f0:19:7a:bd:72: 97:7b:2a:19:f9:14:82:0c:8c:0c:f8:74:75:1b:e4: 9e:2f:85:bf:4d:8e:2c:f5:02:10:56:ab:4d:e3:1f: a6:6e:4b:fe:6e:1d:5a:4c:43:fa:89:cd:e1:b5:8a: 5c:8d:2c:63:f3:77:c5:cf:56:a6:f1:ee:b9:9b:06: 21:40:2c:4f:75:b9:e3:8c:9d:31:d0:05:f4:ee:7b: 09:69:77:06:e3:8d:b1:08:2d:70:4d:e9:2f:e8:bf: 10:c9:f8:48:af:a1:b9:a4:a7:73:fc:f0:86:89:58: 20:14:a1:7d:22:db:fe:db:ec:22:98:ff:1c:ca:61: 64:b9:c6:e5:cf:ab:f4:e3:13:bf:cb:aa:19:c9:94: 7e:ca:46:08:5f:82:51:58:1a:e8:8e:b2:e1:ce:ee: 30:f4:a4:30:38:e2:31:a7:18:de:da:c5:ed:3d:57: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D4:94:81:46:DA:7F:FB:9A:BD:D8:51:1B:6B:CC:86:67:15:FB:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a00cddab-e57b-305e-955f-847f1a94bbff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c1:4e:40:f4:04:ef:e0:b2:96:45:2a:5c:e4:47:bc:2e:26: a2:b3:35:fa:88:35:8c:f1:00:34:6a:e8:be:2f:fd:e9:f8:f3: 31:d9:ac:a3:81:bc:1e:b5:51:0b:6e:92:0d:a4:5e:69:92:0a: cf:6a:fb:88:49:4c:2a:fc:1a:60:97:79:b6:82:ac:43:57:28: ac:c7:91:f2:09:9d:26:e6:a5:02:73:b5:d5:5f:d3:9d:dc:d0: e1:e6:77:cb:0f:28:6e:96:88:03:4f:e3:4d:70:25:fa:84:35: e5:7e:d0:52:da:ef:44:a1:9a:d2:a4:ad:1a:d7:46:54:33:f1: c7:7b:5c:51:52:84:22:f9:22:40:a0:eb:07:39:33:c2:14:74: 76:90:75:06:40:28:f7:a8:2d:b2:26:67:b7:13:a6:13:8d:2d: 92:29:f0:68:a9:da:4a:fd:76:f8:05:7c:2f:a2:27:77:cb:28: c3:ef:2f:56:4c:4a:7c:2c:4a:fa:d2:11:27:38:73:dd:e7:2a: d8:e1:ca:c4:b1:b2:5a:d0:97:da:93:e8:70:ab:96:ae:7b:ca: 00:53:5c:62:c0:7a:35:a6:a1:dc:aa:c2:e6:0f:a7:00:b0:9c: 21:97:71:51:10:a5:60:54:17:d5:52:82:93:d1:6c:42:80:01: d3:94:c3:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGs8IHMAMqScYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmNlMGEzOTUtM2YxNC00ZTFkLTgxNjctNGQ5Y2IyZWJkOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSMb138qM9fBwJ53Tumdw98VHcNGutPwqRP5 KwWjFvQTNnvePZRzZJYI4U9l7q1J268nGSaY01btq0Fxqw3fsG0nF6ZJpCLPm2jk iwMB+3SiUPQO8Bl6vXKXeyoZ+RSCDIwM+HR1G+SeL4W/TY4s9QIQVqtN4x+mbkv+ bh1aTEP6ic3htYpcjSxj83fFz1am8e65mwYhQCxPdbnjjJ0x0AX07nsJaXcG442x CC1wTekv6L8QyfhIr6G5pKdz/PCGiVggFKF9Itv+2+wimP8cymFkucblz6v04xO/ y6oZyZR+ykYIX4JRWBrojrLhzu4w9KQwOOIxpxje2sXtPVfm6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXUlIFG2n/7mr3YURtrzIZnFfvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTAwY2RkYWItZTU3Yi0z MDVlLTk1NWYtODQ3ZjFhOTRiYmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvBTkD0BO/gspZFKlzkR7wuJqKzNfqINYzxADRq6L4v/en48zHZrKOB vB61UQtukg2kXmmSCs9q+4hJTCr8GmCXebaCrENXKKzHkfIJnSbmpQJztdVf053c 0OHmd8sPKG6WiANP401wJfqENeV+0FLa70ShmtKkrRrXRlQz8cd7XFFShCL5IkCg 6wc5M8IUdHaQdQZAKPeoLbImZ7cTphONLZIp8Gip2kr9dvgFfC+iJ3fLKMPvL1ZM SnwsSvrSESc4c93nKtjhysSxslrQl9qT6HCrlq57ygBTXGLAejWmodyqwuYPpwCw nCGXcVEQpWBUF9VSgpPRbEKAAdOUw5M= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:16 2025 by rpki-client