$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a454ae5f-c293-308f-bac1-2500aa4157ba.roa File: a454ae5f-c293-308f-bac1-2500aa4157ba.roa (raw, json) Hash identifier: oWrM0ooqcCi83C7ZxFhPo5xsB1fzenv5eZUFDjXsIs8= Subject key identifier: 7A:A8:07:93:B4:3F:28:6B:E0:F7:3A:F2:6F:03:31:7B:A0:47:DA:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2067090688C1E6A7855D3800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a454ae5f-c293-308f-bac1-2500aa4157ba.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:09:06:88:c1:e6:a7:85:5d:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=2d175a10-ae98-4108-8784-7efcd492a47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:58:21:24:01:1d:bb:5d:a5:13:89:cb:3d:98: 00:55:05:c5:49:22:21:79:cc:d6:8b:3b:04:4a:14: a8:05:26:33:64:32:82:86:31:5f:7b:3b:d2:cc:f5: 8e:c9:41:24:cd:87:15:a3:d7:1e:aa:49:6b:f6:c1: 60:76:3f:32:84:16:12:2c:4a:65:fe:8a:cb:88:e2: 09:18:06:3a:ac:4a:00:ca:e7:49:cf:f6:4c:69:92: 23:ec:75:4e:fc:c1:e5:45:99:b5:63:48:28:e9:63: 5b:c0:e4:d9:ea:af:ed:c9:31:4b:6b:f7:0a:8c:17: 5b:c9:fd:76:60:5d:4e:b5:da:db:4e:75:a7:45:cb: 2a:49:e8:6c:f9:17:75:80:2e:5b:ad:19:2a:7b:76: e8:b4:ff:c5:fb:71:00:23:41:c0:3f:11:1f:e3:7b: cf:f6:0d:42:82:a8:9d:23:bf:3d:af:ed:e3:b3:e9: d6:eb:35:65:34:91:65:3f:f1:d8:35:89:35:cc:59: 62:32:52:a4:fc:3b:8b:69:c2:e0:5e:39:db:1f:95: d9:86:b0:1d:06:ef:e4:ad:d9:d8:c7:46:66:de:d0: 66:92:6e:e3:15:56:e3:9a:a3:47:10:63:18:f1:62: 16:6d:72:33:6d:c7:58:41:5c:fa:57:71:3d:17:f5: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A8:07:93:B4:3F:28:6B:E0:F7:3A:F2:6F:03:31:7B:A0:47:DA:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a454ae5f-c293-308f-bac1-2500aa4157ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:44:18:f0:38:5b:fe:d5:20:9a:7c:68:a5:88:91:05:2f:a1: 05:c0:bc:9a:9a:de:3e:5c:cc:92:0f:27:3f:0c:1f:d4:66:35: 64:30:4d:5e:69:80:b6:e0:57:ca:51:61:93:c3:c9:35:ab:89: fb:00:15:8c:7b:98:39:58:2f:fa:c3:8b:74:b3:47:bc:d9:b4: 65:eb:ec:20:25:75:41:b4:04:f3:a8:28:77:db:6f:7b:86:18: 74:91:e8:34:58:de:0d:54:03:9b:6c:b1:2d:76:76:39:af:b2: c6:1a:75:a0:a0:eb:7d:22:a9:c8:8c:05:16:d4:90:d7:29:db: 48:39:cd:e5:50:7d:07:99:ac:00:83:75:6f:02:7b:0d:21:31: da:d5:1e:e0:50:91:6c:9b:1d:5b:e8:fb:8c:4b:3f:9c:01:62: 91:ae:ee:c7:5f:fc:fb:10:2f:ac:db:92:72:26:8c:12:65:ad: a2:fc:c5:e2:bf:22:ae:8f:ff:fc:aa:ef:4e:90:a8:e5:54:d4: c9:ac:2a:1f:a6:d1:c9:0c:26:b4:ed:79:2b:3a:d0:f1:6a:ab: 29:ed:6e:9e:20:05:fd:aa:9e:46:ae:5c:22:c8:e1:eb:81:d1: fd:d8:03:f1:57:92:88:8d:7b:15:62:3d:e7:b5:ee:fd:64:4a: 24:c2:dc:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwkGiMHmp4VdOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmQxNzVhMTAtYWU5OC00MTA4LTg3ODQtN2VmY2Q0OTJhNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlghJAEdu12lE4nLPZgAVQXFSSIheczWizsE ShSoBSYzZDKChjFfezvSzPWOyUEkzYcVo9ceqklr9sFgdj8yhBYSLEpl/orLiOIJ GAY6rEoAyudJz/ZMaZIj7HVO/MHlRZm1Y0go6WNbwOTZ6q/tyTFLa/cKjBdbyf12 YF1OtdrbTnWnRcsqSehs+Rd1gC5brRkqe3botP/F+3EAI0HAPxEf43vP9g1Cgqid I789r+3js+nW6zVlNJFlP/HYNYk1zFliMlKk/DuLacLgXjnbH5XZhrAdBu/krdnY x0Zm3tBmkm7jFVbjmqNHEGMY8WIWbXIzbcdYQVz6V3E9F/UBzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqoB5O0Pyhr4Pc68m8DMXugR9qgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTQ1NGFlNWYtYzI5My0z MDhmLWJhYzEtMjUwMGFhNDE1N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlEGPA4W/7VIJp8aKWIkQUvoQXAvJqa3j5czJIPJz8MH9RmNWQwTV5p gLbgV8pRYZPDyTWrifsAFYx7mDlYL/rDi3SzR7zZtGXr7CAldUG0BPOoKHfbb3uG GHSR6DRY3g1UA5tssS12djmvssYadaCg630iqciMBRbUkNcp20g5zeVQfQeZrACD dW8Cew0hMdrVHuBQkWybHVvo+4xLP5wBYpGu7sdf/PsQL6zbknImjBJlraL8xeK/ Iq6P//yq706QqOVU1MmsKh+m0ckMJrTteSs60PFqqyntbp4gBf2qnkauXCLI4euB 0f3YA/FXkoiNexViPee17v1kSiTC3EM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:52 2025 by rpki-client