$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9589bda-3b39-3558-ab7e-6f518ace57f7.roa File: a9589bda-3b39-3558-ab7e-6f518ace57f7.roa (raw, json) Hash identifier: Cml+CJ4xuSXddqtQOZiVLeQyRsbVw+L/SAY7PxwuFzo= Subject key identifier: B3:59:09:7B:F6:F4:A6:9B:75:14:9C:2F:38:C0:9E:BD:E3:BA:08:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C746B3DE0333B4CB5F580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9589bda-3b39-3558-ab7e-6f518ace57f7.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:74:6b:3d:e0:33:3b:4c:b5:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=fd16701e-4ffd-4e26-a829-d9e644cf1064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:5c:0e:e5:96:ad:90:1b:07:94:01:e7:c9: 8d:53:2c:fa:77:d2:cb:56:77:dd:d0:75:86:88:83: 65:e9:62:9f:80:96:8c:38:b1:b0:9b:02:22:bf:e6: 3d:95:03:27:d0:aa:e8:86:11:9c:5b:a2:52:10:c3: 32:28:ba:8a:5b:16:6d:7d:eb:42:bc:a9:05:72:74: 81:69:0f:89:e6:64:13:a5:c7:af:42:04:11:77:4a: c7:6b:42:9f:be:6a:ab:8e:5e:33:bf:fe:e5:95:6d: e3:17:aa:71:a1:e5:ff:8c:1d:94:1a:a1:c9:32:11: 91:1d:5c:87:cf:b7:a6:57:d4:16:53:b9:20:d1:77: ca:d6:fe:bd:73:f1:db:2b:65:85:b0:e9:d7:af:2f: f0:a6:d0:52:11:18:4a:94:2f:29:a6:41:38:46:ed: 14:f8:c5:09:dc:79:38:4f:23:0a:4c:48:6d:37:ab: 84:e2:db:6c:ba:d8:78:1a:76:ea:bf:ed:30:79:ff: 69:04:ec:56:27:5e:0a:1a:cb:b1:6e:06:9d:11:07: 94:79:bb:20:68:5a:71:6b:0a:44:7f:73:5b:e3:a7: c1:ab:16:8b:a4:5b:66:9e:c2:89:1f:e6:7e:d5:6e: 24:c6:f8:c0:7e:86:ed:c8:8e:94:b0:5d:c7:40:a9: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:59:09:7B:F6:F4:A6:9B:75:14:9C:2F:38:C0:9E:BD:E3:BA:08:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9589bda-3b39-3558-ab7e-6f518ace57f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2e:03:f9:a0:a8:7f:db:8e:1b:b0:e8:d0:40:ba:11:6a:91: fe:33:42:96:df:ae:d7:de:de:7a:0c:81:54:c6:1f:d4:63:d9: 96:30:a3:bc:49:bd:cf:43:b9:02:1c:d3:9c:28:7c:dd:92:7c: 49:01:08:07:18:55:24:80:8f:4b:c2:3e:dc:ae:57:0f:18:14: 73:cf:65:be:52:ce:15:17:5a:14:25:96:a2:9a:c3:a3:cc:20: ed:eb:21:56:aa:db:55:6e:51:ce:87:99:d8:a0:65:c8:aa:e7: 76:6b:2e:c7:36:e2:79:c0:77:fd:fb:25:f8:de:36:01:05:ef: 83:d6:d3:77:64:fd:7d:33:06:fe:a3:18:ee:0e:4c:6b:21:76: 57:38:5f:09:de:dd:0b:58:f6:71:e2:86:96:24:13:db:d9:5e: 74:30:df:78:ea:0e:3b:86:4a:f0:2e:64:d6:93:a8:c6:55:eb: 01:15:cb:cf:c5:bd:d7:e8:57:c3:80:6b:c3:5b:6b:26:dc:c8: d7:61:5a:53:19:3b:f5:61:b4:da:38:1e:7d:c6:93:35:2d:b3: fe:b1:7d:f6:90:41:dd:d9:b2:44:29:50:50:95:18:3d:c0:4e: 9d:65:d8:ed:73:04:1f:37:da:9f:d5:05:fc:2c:41:6e:6b:23: d6:83:53:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHRrPeAzO0y19YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmQxNjcwMWUtNGZmZC00ZTI2LWE4MjktZDllNjQ0Y2YxMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOFcDuWWrZAbB5QB58mNUyz6d9LLVnfd0HWG iINl6WKfgJaMOLGwmwIiv+Y9lQMn0KrohhGcW6JSEMMyKLqKWxZtfetCvKkFcnSB aQ+J5mQTpcevQgQRd0rHa0Kfvmqrjl4zv/7llW3jF6pxoeX/jB2UGqHJMhGRHVyH z7emV9QWU7kg0XfK1v69c/HbK2WFsOnXry/wptBSERhKlC8ppkE4Ru0U+MUJ3Hk4 TyMKTEhtN6uE4ttsuth4Gnbqv+0wef9pBOxWJ14KGsuxbgadEQeUebsgaFpxawpE f3Nb46fBqxaLpFtmnsKJH+Z+1W4kxvjAfobtyI6UsF3HQKmC7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNZCXv29KabdRScLzjAnr3jughYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTk1ODliZGEtM2IzOS0z NTU4LWFiN2UtNmY1MThhY2U1N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4uA/mgqH/bjhuw6NBAuhFqkf4zQpbfrtfe3noMgVTGH9Rj2ZYwo7xJ vc9DuQIc05wofN2SfEkBCAcYVSSAj0vCPtyuVw8YFHPPZb5SzhUXWhQllqKaw6PM IO3rIVaq21VuUc6HmdigZciq53ZrLsc24nnAd/37JfjeNgEF74PW03dk/X0zBv6j GO4OTGshdlc4Xwne3QtY9nHihpYkE9vZXnQw33jqDjuGSvAuZNaTqMZV6wEVy8/F vdfoV8OAa8NbaybcyNdhWlMZO/VhtNo4Hn3GkzUts/6xffaQQd3ZskQpUFCVGD3A Tp1l2O1zBB832p/VBfwsQW5rI9aDUzc= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:23 2025 by rpki-client