$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0ce37c8-b0ec-3038-9ec3-349b6df41ae9.roa File: a0ce37c8-b0ec-3038-9ec3-349b6df41ae9.roa (raw, json) Hash identifier: qs8HEkD4KELNyTzpBEx9QifVkm+vt8vkohCFXYj9jVo= Subject key identifier: 87:FA:EF:5F:F4:63:3B:D8:3D:B0:4C:DC:86:3F:D9:EA:9B:30:71:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C67795B20ED655602F2A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0ce37c8-b0ec-3038-9ec3-349b6df41ae9.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.163.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:67:79:5b:20:ed:65:56:02:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=47c4a417-017d-4ae1-b88a-0a001249c18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:93:a9:ef:c4:b1:6b:41:73:16:a4:4b:9b:86: f0:84:7f:ef:ea:20:b7:df:f6:ac:f5:21:85:c6:c7: e0:38:8f:70:de:cf:ef:a9:25:0e:9b:d1:d8:fd:d9: 12:b8:67:d7:b0:1d:dd:17:c9:7f:50:08:88:59:af: 5e:b9:f9:74:78:9a:82:f6:b4:71:1c:94:75:5d:43: ec:90:15:39:a2:67:99:e7:85:28:b0:4a:72:d0:27: f8:a1:80:60:c2:79:0b:90:7a:44:fc:39:63:b3:5d: 4a:27:96:ad:92:b8:1d:21:7d:67:3f:e8:c2:45:5c: 7b:26:a3:06:39:23:2a:35:89:d3:90:c2:19:d5:07: 1b:42:4f:ea:69:75:89:f9:f8:2f:c7:2d:75:07:e8: 1e:0d:a1:e4:1f:79:10:55:ec:3d:0a:d4:47:8d:d1: 70:d8:09:30:3b:9d:de:db:31:54:a5:46:62:b8:47: 3b:0a:d7:34:5f:cf:be:f4:7d:89:53:04:bb:f5:46: 81:c0:bd:7e:d7:42:7a:c0:3d:07:34:a5:74:b3:3c: 40:f4:95:2a:10:00:ac:f3:50:c1:1e:d8:dd:e2:5b: cb:41:27:a6:8e:bb:dd:24:79:99:7e:6b:a9:f0:7b: dc:24:87:1f:db:46:3b:1d:bd:6c:11:7d:1f:39:74: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FA:EF:5F:F4:63:3B:D8:3D:B0:4C:DC:86:3F:D9:EA:9B:30:71:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0ce37c8-b0ec-3038-9ec3-349b6df41ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.163.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:43:f1:0a:b8:93:0e:93:7c:fe:6f:fe:9d:f1:e5:46:75:22: 50:6f:68:67:2f:d6:d4:b1:9b:52:46:43:80:43:4b:41:81:61: fc:7e:a0:b7:47:05:85:33:06:fa:7a:0c:3f:a2:3e:eb:46:d6: 09:4c:39:2f:9e:4b:ef:ab:05:99:e5:70:04:89:3a:d2:3b:db: 77:1a:e5:e9:59:d8:fe:ca:99:f8:95:57:cb:eb:c3:88:5b:a3: f0:0f:b4:eb:b1:ee:5f:b9:55:0c:03:75:51:f0:af:c9:1a:20: bc:3d:b7:97:ad:18:99:a3:02:df:fb:09:8a:b4:1e:36:fa:47: c5:5c:36:fd:8e:47:cc:7e:5e:8c:d9:ac:0e:3b:bd:60:73:71: 76:53:0b:be:57:8a:fc:c2:af:43:1f:4a:be:7b:be:a6:ac:18: 78:80:45:72:1b:46:c2:d9:20:ac:3b:6d:a4:a3:c9:d2:19:46: 47:27:a5:1b:a6:1a:69:c8:45:69:63:7f:d5:21:3a:be:02:7f: 02:d8:be:8f:8a:95:04:a9:94:eb:6f:28:57:0d:64:75:d2:ed: 91:95:5f:54:9e:a0:47:6d:dd:42:8a:b9:4f:c5:73:88:78:ce: 57:f4:bd:20:1a:0c:15:29:1f:a0:b3:47:ed:60:e3:3f:6f:c4: 01:8d:68:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGd5WyDtZVYC8qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NDdjNGE0MTctMDE3ZC00YWUxLWI4OGEtMGEwMDEyNDljMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Op78Sxa0FzFqRLm4bwhH/v6iC33/as9SGF xsfgOI9w3s/vqSUOm9HY/dkSuGfXsB3dF8l/UAiIWa9eufl0eJqC9rRxHJR1XUPs kBU5omeZ54UosEpy0Cf4oYBgwnkLkHpE/Dljs11KJ5atkrgdIX1nP+jCRVx7JqMG OSMqNYnTkMIZ1QcbQk/qaXWJ+fgvxy11B+geDaHkH3kQVew9CtRHjdFw2AkwO53e 2zFUpUZiuEc7Ctc0X8++9H2JUwS79UaBwL1+10J6wD0HNKV0szxA9JUqEACs81DB Htjd4lvLQSemjrvdJHmZfmup8HvcJIcf20Y7Hb1sEX0fOXRv2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf671/0YzvYPbBM3IY/2eqbMHFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTBjZTM3YzgtYjBlYy0z MDM4LTllYzMtMzQ5YjZkZjQxYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxD8Qq4kw6TfP5v/p3x5UZ1IlBvaGcv1tSxm1JGQ4BDS0GBYfx+oLdH BYUzBvp6DD+iPutG1glMOS+eS++rBZnlcASJOtI723ca5elZ2P7KmfiVV8vrw4hb o/APtOux7l+5VQwDdVHwr8kaILw9t5etGJmjAt/7CYq0Hjb6R8VcNv2OR8x+XozZ rA47vWBzcXZTC75XivzCr0MfSr57vqasGHiARXIbRsLZIKw7baSjydIZRkcnpRum GmnIRWljf9UhOr4CfwLYvo+KlQSplOtvKFcNZHXS7ZGVX1SeoEdt3UKKuU/Fc4h4 zlf0vSAaDBUpH6CzR+1g4z9vxAGNaCQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:40 2025 by rpki-client