$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a273715c-621b-34c1-8bd8-9c7a52985b50.roa File: a273715c-621b-34c1-8bd8-9c7a52985b50.roa (raw, json) Hash identifier: LMxyiX1yqNDq8B1gpGsTdD7r+RIQmZzJqhnjE+T3zFw= Subject key identifier: 85:D3:27:A0:6D:B7:DB:A0:72:2D:9E:90:D2:F5:67:9D:F9:19:67:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C6955E04CF87C990C1000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a273715c-621b-34c1-8bd8-9c7a52985b50.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.171.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:69:55:e0:4c:f8:7c:99:0c:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=53ac0b17-caf1-4447-b781-b1d9fe6bfbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:22:8b:dd:e1:e0:45:48:c0:3f:16:71:6c:9f: 43:77:a1:53:a8:ee:64:04:31:e8:53:93:5c:ec:0b: 6a:3a:58:93:b0:9d:26:1c:72:9b:4c:60:ed:2b:3b: 5b:0e:5d:78:54:55:2e:98:64:ea:2c:12:b0:05:6f: e0:ee:b4:ad:6f:cd:84:2a:b9:b8:7c:18:6f:2a:6a: 0d:c2:dc:58:f2:dd:b7:ea:98:79:4d:f6:9f:9f:72: e9:2c:b7:40:b6:ad:20:52:b2:52:b4:19:87:5a:86: ca:2d:af:98:82:21:c2:a6:e3:8d:48:7e:33:ee:98: 4c:f6:ed:22:dc:36:f7:30:95:08:87:a1:49:bc:4e: 5b:1d:3a:4a:ee:bf:4d:65:0c:ad:ac:bc:90:4b:14: c1:32:e5:c9:30:08:16:3f:73:cd:12:c9:ca:fa:2e: 3c:e6:36:b6:e5:d6:b0:6e:9c:98:23:17:62:cb:8c: 7e:21:45:72:4b:51:f8:5a:7e:57:28:44:7a:4d:f3: 28:79:76:06:04:0f:b0:4c:f5:04:0f:5f:fc:3f:6d: c6:b7:75:67:26:61:46:1f:4b:b7:2b:17:f6:b1:47: 5e:50:67:bb:9d:74:f4:99:b8:90:b4:10:de:fd:40: 49:ab:3b:19:fa:3f:a7:b8:43:ad:a1:f5:fb:13:6e: e1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:27:A0:6D:B7:DB:A0:72:2D:9E:90:D2:F5:67:9D:F9:19:67:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a273715c-621b-34c1-8bd8-9c7a52985b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6b:76:7a:27:e1:31:47:c0:53:94:a2:7d:f5:ee:d2:85:9c: ab:6b:99:9a:3b:c9:74:21:ad:8f:49:f6:cf:b6:47:10:c4:90: bd:7d:a4:ca:61:70:00:f0:fa:59:fb:8e:b4:e5:af:0d:c2:d3: 61:6a:23:da:13:e8:0d:41:5a:22:96:a3:09:41:ad:47:26:c3: 64:ac:af:23:26:fa:1d:01:c2:2d:72:f0:c5:6e:25:f9:69:26: 18:58:8c:38:a3:f5:e8:1e:0c:10:a4:12:07:03:5e:a7:46:b2: 5e:34:93:ae:1b:79:04:95:6a:a2:7c:e2:f7:79:77:a0:e0:2a: c0:b5:03:53:ed:03:d1:24:5e:83:3c:55:d0:69:6e:cc:1e:a4: eb:0b:fb:c5:0c:1d:bf:f5:d0:42:35:8c:5d:30:1a:6a:9d:89: d3:15:d6:76:d9:f8:fd:3d:c1:9e:8b:ff:36:39:0b:6e:88:fe: 0d:ce:08:5e:f8:e6:5f:35:f0:e6:e7:67:f6:e9:8d:a5:7b:c7: 4b:b1:cd:3e:60:8a:25:62:48:c9:36:d3:89:ec:30:23:97:b8: a2:7c:3e:df:eb:28:0b:42:81:f1:ca:7c:dd:17:bb:3a:98:52: b6:fb:ec:d3:ec:76:2b:2e:ab:56:93:d8:48:08:9a:88:8f:1b: 94:10:7b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGlV4Ez4fJkMEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTNhYzBiMTctY2FmMS00NDQ3LWI3ODEtYjFkOWZlNmJmYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyKL3eHgRUjAPxZxbJ9Dd6FTqO5kBDHoU5Nc 7AtqOliTsJ0mHHKbTGDtKztbDl14VFUumGTqLBKwBW/g7rStb82EKrm4fBhvKmoN wtxY8t236ph5Tfafn3LpLLdAtq0gUrJStBmHWobKLa+YgiHCpuONSH4z7phM9u0i 3Db3MJUIh6FJvE5bHTpK7r9NZQytrLyQSxTBMuXJMAgWP3PNEsnK+i485ja25daw bpyYIxdiy4x+IUVyS1H4Wn5XKER6TfMoeXYGBA+wTPUED1/8P23Gt3VnJmFGH0u3 Kxf2sUdeUGe7nXT0mbiQtBDe/UBJqzsZ+j+nuEOtofX7E27h0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXTJ6Btt9ugci2ekNL1Z535GWc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTI3MzcxNWMtNjIxYi0z NGMxLThiZDgtOWM3YTUyOTg1YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRrdnon4TFHwFOUon317tKFnKtrmZo7yXQhrY9J9s+2RxDEkL19pMph cADw+ln7jrTlrw3C02FqI9oT6A1BWiKWowlBrUcmw2SsryMm+h0Bwi1y8MVuJflp JhhYjDij9egeDBCkEgcDXqdGsl40k64beQSVaqJ84vd5d6DgKsC1A1PtA9EkXoM8 VdBpbswepOsL+8UMHb/10EI1jF0wGmqdidMV1nbZ+P09wZ6L/zY5C26I/g3OCF74 5l818ObnZ/bpjaV7x0uxzT5giiViSMk204nsMCOXuKJ8Pt/rKAtCgfHKfN0XuzqY Urb77NPsdisuq1aT2EgImoiPG5QQe64= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:25 2025 by rpki-client