$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa495ea3-c94b-3f97-b5b8-0e0008b3e377.roa File: aa495ea3-c94b-3f97-b5b8-0e0008b3e377.roa (raw, json) Hash identifier: FuSWU8AGxQJxr/+BWc63Cg9MOuSMJFWe2al4OsyLGk4= Subject key identifier: 6E:41:F1:A6:79:98:E9:27:86:5E:90:6A:85:1D:5D:9C:A1:CA:C7:6D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01942CBC7D416FD7706280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa495ea3-c94b-3f97-b5b8-0e0008b3e377.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.190.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:94:2c:bc:7d:41:6f:d7:70:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=d3dbf0a7-7139-4d05-9120-58cd7e2c13a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e2:1e:11:7b:1d:22:4c:0a:02:66:3d:39:ce: 18:eb:97:70:b6:fc:24:14:d0:1f:9b:4c:49:1a:b9: 34:55:80:f7:72:f9:38:30:bb:62:83:5c:31:b8:82: 76:a2:26:3d:90:eb:14:8a:b0:40:4e:a5:63:05:de: c7:bf:3e:bc:04:49:b0:ef:8d:be:a1:73:aa:58:29: 33:3d:33:94:40:68:73:b1:1c:6b:1b:c4:fc:fd:58: 4a:14:69:3d:f9:82:d8:bf:cd:f0:1c:62:89:40:20: e2:0e:23:6a:73:4d:86:4d:1e:44:32:b1:ae:db:f1: ed:6d:62:0a:63:a5:e4:e6:74:77:c8:28:49:75:dd: 14:97:b4:7e:55:55:29:24:97:58:a9:d4:79:c8:59: 0f:72:2e:9e:94:59:f5:09:cc:db:46:00:40:5c:97: e5:ad:5e:93:35:b9:7e:d8:93:14:4f:40:9b:94:fd: 88:cb:7b:b9:95:2b:53:a1:9a:a2:f6:0b:0c:14:94: f0:29:70:3b:32:83:db:22:84:c0:fa:61:00:d3:49: a2:3b:08:51:b3:8d:04:d7:85:76:54:2b:81:be:06: 06:2f:31:a7:56:a3:05:4f:58:79:44:b2:6c:fd:ba: 36:bf:f5:90:6a:c1:19:6f:35:b0:1c:96:a3:02:3e: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:41:F1:A6:79:98:E9:27:86:5E:90:6A:85:1D:5D:9C:A1:CA:C7:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa495ea3-c94b-3f97-b5b8-0e0008b3e377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:13:d5:29:b1:ba:6e:bd:f7:7f:af:4b:d9:40:be:42:28:14: 72:08:83:a3:d1:74:1a:71:cd:2f:5b:20:12:31:24:8b:77:36: af:f7:2d:80:9b:66:bd:85:0f:4e:a8:8a:41:93:81:8a:a3:66: 8c:ba:9d:85:fa:47:ba:19:ed:75:5a:e4:f9:b0:73:0e:59:8f: 73:73:56:5d:a3:75:b3:0b:19:e6:b0:12:35:f9:05:34:c7:df: 01:eb:1a:18:de:8c:c1:94:df:fc:ff:f5:e4:22:c5:1f:b8:d3: 51:e4:90:8a:e3:4a:65:0f:e8:4c:3e:07:06:71:82:d4:ef:50: 07:24:ce:41:91:a9:af:38:32:fc:ff:00:54:a1:c3:97:61:55: 99:82:b7:71:a5:dc:97:85:78:57:33:a2:f5:d5:e5:b8:6e:a7: cd:0c:46:5e:ef:7c:e3:1d:1d:36:d7:ed:f8:71:6c:39:29:ac: 59:a9:4e:42:1d:02:ae:af:4e:6b:0d:51:23:b6:b3:25:7c:4c: a4:1b:40:34:a7:c4:9e:33:e7:d9:20:9a:f8:e9:1b:d0:f9:14: 07:c6:8c:15:e3:7d:bd:e6:74:bf:3d:bb:7d:ae:79:89:f8:b7: 84:e5:15:f7:a6:cd:2c:ab:c8:65:09:79:05:ec:4a:f5:ec:e1: 92:5e:27:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZQsvH1Bb9dwYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDNkYmYwYTctNzEzOS00ZDA1LTkxMjAtNThjZDdlMmMxM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+IeEXsdIkwKAmY9Oc4Y65dwtvwkFNAfm0xJ Grk0VYD3cvk4MLtig1wxuIJ2oiY9kOsUirBATqVjBd7Hvz68BEmw742+oXOqWCkz PTOUQGhzsRxrG8T8/VhKFGk9+YLYv83wHGKJQCDiDiNqc02GTR5EMrGu2/HtbWIK Y6Xk5nR3yChJdd0Ul7R+VVUpJJdYqdR5yFkPci6elFn1CczbRgBAXJflrV6TNbl+ 2JMUT0CblP2Iy3u5lStToZqi9gsMFJTwKXA7MoPbIoTA+mEA00miOwhRs40E14V2 VCuBvgYGLzGnVqMFT1h5RLJs/bo2v/WQasEZbzWwHJajAj6oPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5B8aZ5mOknhl6QaoUdXZyhysdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWE0OTVlYTMtYzk0Yi0z Zjk3LWI1YjgtMGUwMDA4YjNlMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcT1Smxum6993+vS9lAvkIoFHIIg6PRdBpxzS9bIBIxJIt3Nq/3LYCb Zr2FD06oikGTgYqjZoy6nYX6R7oZ7XVa5Pmwcw5Zj3NzVl2jdbMLGeawEjX5BTTH 3wHrGhjejMGU3/z/9eQixR+401HkkIrjSmUP6Ew+BwZxgtTvUAckzkGRqa84Mvz/ AFShw5dhVZmCt3Gl3JeFeFczovXV5bhup80MRl7vfOMdHTbX7fhxbDkprFmpTkId Aq6vTmsNUSO2syV8TKQbQDSnxJ4z59kgmvjpG9D5FAfGjBXjfb3mdL89u32ueYn4 t4TlFfemzSyryGUJeQXsSvXs4ZJeJ/4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:14 2025 by rpki-client