$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/abac0858-de35-32dd-aab3-1a87b2e985f7.roa File: abac0858-de35-32dd-aab3-1a87b2e985f7.roa (raw, json) Hash identifier: zEgaRCy/SRPbcK6uGGMu1QY/Ekjt84Tigo7l/F/Ern0= Subject key identifier: 7F:32:B1:53:EF:A0:91:FE:D2:9D:58:F9:BB:83:B6:7C:80:2C:19:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C733F7175464201BF9680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/abac0858-de35-32dd-aab3-1a87b2e985f7.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:73:3f:71:75:46:42:01:bf:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=fb107b8f-0c96-4085-a15d-45ae2cd59e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:49:62:09:e2:73:25:f6:73:89:96:5b:b4: 07:14:8f:b5:89:1e:56:28:8b:d1:de:92:8a:3b:cc: 13:3e:77:c9:74:4e:56:97:d5:78:88:6b:1b:a9:ba: ec:5b:4e:fc:7d:49:d4:70:8a:d9:69:8b:c5:ea:96: 08:02:e3:4f:47:f0:23:00:3b:7e:ba:03:d6:5f:15: 7b:a7:e6:61:cf:51:9a:01:86:56:af:65:dd:72:f4: bc:d0:dd:75:a9:20:7e:69:eb:f0:09:01:e9:30:4e: df:d9:98:99:07:c1:ba:f8:bd:45:7d:83:5f:f9:cb: 58:d2:ac:4f:f7:96:a0:24:ef:f2:24:db:4e:4a:5b: 6d:7a:ae:2b:71:78:ee:91:bf:ad:a2:bc:f5:c1:2d: 72:52:5d:86:bc:3d:fe:53:13:3b:eb:08:a6:c5:5c: a4:2f:aa:1b:38:57:d3:db:32:44:62:92:46:92:d4: cf:36:98:92:1a:6b:a3:1f:aa:98:9e:df:9e:8a:9d: b5:d8:c2:69:78:bf:78:e3:27:b1:e1:eb:46:23:e3: c8:9e:bf:f3:c0:ca:cd:03:65:c5:57:6e:27:56:d4: c5:57:04:71:87:d6:92:21:c2:8d:a1:e7:ab:d6:ed: 2c:5f:a5:49:3e:1f:a3:c2:5f:53:70:ad:83:67:1e: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:32:B1:53:EF:A0:91:FE:D2:9D:58:F9:BB:83:B6:7C:80:2C:19:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/abac0858-de35-32dd-aab3-1a87b2e985f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a0:42:c6:64:2b:1a:3e:68:78:04:83:d1:bd:7d:3b:f5:41: 53:34:26:2f:77:21:22:dc:81:89:2e:74:46:66:a4:30:40:c3: c3:98:c0:4c:7b:76:32:be:fb:04:b7:9a:f0:78:58:7c:98:de: a3:c7:37:55:e2:24:7c:07:55:33:cf:48:32:5c:58:4f:0b:82: 47:f9:07:8d:b6:45:e6:00:72:30:6b:b7:ba:a0:23:ca:1b:b7: e2:53:4c:ed:18:2c:6e:dc:df:ee:b1:60:da:c9:3e:ff:0e:d7: 0e:70:94:30:e7:e8:bc:4c:b8:0b:43:15:24:34:e0:fc:5e:8c: 1d:b8:28:99:4d:7b:89:02:df:ca:bc:bc:ce:12:7d:8e:89:ce: 83:50:3b:1b:d5:50:25:ee:1d:c4:ca:97:b8:77:9b:1a:93:5d: d0:dd:79:42:ac:2c:8e:f1:ac:b8:29:bb:f3:ff:65:0d:97:a2: ef:1e:a8:9e:e6:a4:d1:93:e9:38:18:16:2d:a5:75:53:86:12: 89:05:6d:14:d6:1a:54:99:01:60:44:91:f2:fb:10:43:b4:5a: d7:68:9a:bc:e7:d0:5e:27:33:ce:2c:13:ed:ba:12:5c:a7:97: a7:56:c1:76:93:b2:72:ba:5c:8c:ac:33:fc:77:06:d0:29:26: 2b:27:8c:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHM/cXVGQgG/loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmIxMDdiOGYtMGM5Ni00MDg1LWExNWQtNDVhZTJjZDU5ZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBFJYgnicyX2c4mWW7QHFI+1iR5WKIvR3pKK O8wTPnfJdE5Wl9V4iGsbqbrsW078fUnUcIrZaYvF6pYIAuNPR/AjADt+ugPWXxV7 p+Zhz1GaAYZWr2XdcvS80N11qSB+aevwCQHpME7f2ZiZB8G6+L1FfYNf+ctY0qxP 95agJO/yJNtOSltteq4rcXjukb+torz1wS1yUl2GvD3+UxM76wimxVykL6obOFfT 2zJEYpJGktTPNpiSGmujH6qYnt+eip212MJpeL944yex4etGI+PInr/zwMrNA2XF V24nVtTFVwRxh9aSIcKNoeer1u0sX6VJPh+jwl9TcK2DZx5/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8ysVPvoJH+0p1Y+buDtnyALBkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWJhYzA4NTgtZGUzNS0z MmRkLWFhYjMtMWE4N2IyZTk4NWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAagQsZkKxo+aHgEg9G9fTv1QVM0Ji93ISLcgYkudEZmpDBAw8OYwEx7 djK++wS3mvB4WHyY3qPHN1XiJHwHVTPPSDJcWE8Lgkf5B422ReYAcjBrt7qgI8ob t+JTTO0YLG7c3+6xYNrJPv8O1w5wlDDn6LxMuAtDFSQ04PxejB24KJlNe4kC38q8 vM4SfY6JzoNQOxvVUCXuHcTKl7h3mxqTXdDdeUKsLI7xrLgpu/P/ZQ2Xou8eqJ7m pNGT6TgYFi2ldVOGEokFbRTWGlSZAWBEkfL7EEO0Wtdomrzn0F4nM84sE+26Elyn l6dWwXaTsnK6XIysM/x3BtApJisnjOA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:48 2025 by rpki-client