$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae3b9374-241f-36d6-aec8-fa0bb3a9f21a.roa File: ae3b9374-241f-36d6-aec8-fa0bb3a9f21a.roa (raw, json) Hash identifier: Inmf+ZMIrA3p7CcRrztu12zTXmP63f1ae6mnm12ZdZk= Subject key identifier: CF:79:9B:3C:97:71:62:16:52:2B:75:59:A0:33:1D:C4:BA:4F:7E:2B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2067073B5BA9D5C60D74F040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae3b9374-241f-36d6-aec8-fa0bb3a9f21a.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:07:3b:5b:a9:d5:c6:0d:74:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=da51e2e8-9d99-4e9f-a910-d3b5140233fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f5:8c:d9:c0:66:5c:85:db:ad:cb:c6:8d:d6: 5f:e9:f4:1a:19:b1:b0:73:29:1b:34:6d:93:63:eb: 9d:bd:f7:b0:a8:2f:dd:30:a4:e8:27:73:bf:84:33: 67:1f:49:75:21:2e:e2:fe:7b:11:90:9f:3d:78:7f: f6:9a:b7:7d:f7:04:67:18:0a:83:8b:5a:5e:8b:48: 6b:86:23:10:37:df:3c:5d:89:db:2b:e8:31:9b:86: 23:89:04:d3:34:78:32:12:52:4f:70:91:6a:c2:54: 3b:99:e3:05:6c:d7:9a:40:85:5d:0f:a5:3b:e6:fb: 3f:0a:be:0d:8d:88:02:80:7e:3d:42:5f:5a:12:ac: 43:5d:e8:e9:ba:83:b3:36:e9:8a:7e:57:c7:d0:81: c5:15:3d:61:a9:1f:4c:71:03:75:97:d8:9f:31:cd: 0d:29:d3:7f:35:57:cb:73:e1:68:c4:6d:b7:f1:b0: 81:61:93:eb:63:0b:19:92:64:80:08:2c:37:8a:f1: 0e:67:8f:bb:d1:33:1b:fc:95:70:b0:26:54:5b:4f: 5a:09:37:6f:85:13:fa:dc:af:64:e1:af:a7:34:b2: 1b:ea:6c:55:8d:9e:0b:7b:a7:53:1f:88:32:10:7a: ee:da:46:dc:2a:ee:56:2b:01:c4:29:c9:16:a7:ba: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:79:9B:3C:97:71:62:16:52:2B:75:59:A0:33:1D:C4:BA:4F:7E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae3b9374-241f-36d6-aec8-fa0bb3a9f21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:79:01:81:a6:be:c7:b9:41:fd:fc:2b:c8:1c:66:34:8d:47: 9a:03:c2:6d:11:ef:42:35:ec:a8:09:97:25:1c:c4:ff:e7:e0: d2:75:00:2f:3b:8b:de:5f:5b:48:04:51:dc:c1:33:48:48:fb: 63:a4:b5:10:c4:2f:9d:6a:64:f9:7e:ba:79:c7:b6:43:10:87: 58:13:30:fa:74:d8:ba:51:bc:d7:88:32:21:51:69:d3:d3:54: 6c:2f:ff:6b:98:53:a8:74:4f:14:1d:20:3c:da:56:ca:47:2a: 8f:d5:70:0b:76:ad:be:d7:99:45:62:3f:88:c0:48:fb:8f:74: 68:19:f6:ab:2a:af:2d:da:ce:d6:cf:0d:d6:61:73:39:58:8e: af:a8:ce:82:bd:65:3c:00:4b:0f:08:f8:d3:6a:9e:0a:c9:bc: f3:be:75:f3:77:5e:c0:99:14:04:03:13:6c:c1:27:98:8f:76: d1:63:69:65:7b:97:08:fe:9c:24:86:7f:83:6c:1f:a7:36:cd: 0c:2e:5e:0a:d2:21:44:75:82:3d:ea:1e:87:ac:1b:40:44:4b: 5f:44:86:69:2f:5a:fa:70:42:92:ac:4a:db:70:5f:81:50:40: d9:88:50:c7:65:2a:13:f1:fb:a4:4d:c4:83:b3:c0:1e:66:aa: cf:ae:21:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwc7W6nVxg108EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGE1MWUyZTgtOWQ5OS00ZTlmLWE5MTAtZDNiNTE0MDIzM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfWM2cBmXIXbrcvGjdZf6fQaGbGwcykbNG2T Y+udvfewqC/dMKToJ3O/hDNnH0l1IS7i/nsRkJ89eH/2mrd99wRnGAqDi1pei0hr hiMQN988XYnbK+gxm4YjiQTTNHgyElJPcJFqwlQ7meMFbNeaQIVdD6U75vs/Cr4N jYgCgH49Ql9aEqxDXejpuoOzNumKflfH0IHFFT1hqR9McQN1l9ifMc0NKdN/NVfL c+FoxG238bCBYZPrYwsZkmSACCw3ivEOZ4+70TMb/JVwsCZUW09aCTdvhRP63K9k 4a+nNLIb6mxVjZ4Le6dTH4gyEHru2kbcKu5WKwHEKckWp7pRywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM95mzyXcWIWUit1WaAzHcS6T34rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWUzYjkzNzQtMjQxZi0z NmQ2LWFlYzgtZmEwYmIzYTlmMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqp2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB5AYGmvse5Qf38K8gcZjSNR5oDwm0R70I17KgJlyUcxP/n4NJ1AC87 i95fW0gEUdzBM0hI+2OktRDEL51qZPl+unnHtkMQh1gTMPp02LpRvNeIMiFRadPT VGwv/2uYU6h0TxQdIDzaVspHKo/VcAt2rb7XmUViP4jASPuPdGgZ9qsqry3aztbP DdZhczlYjq+ozoK9ZTwASw8I+NNqngrJvPO+dfN3XsCZFAQDE2zBJ5iPdtFjaWV7 lwj+nCSGf4NsH6c2zQwuXgrSIUR1gj3qHoesG0BES19EhmkvWvpwQpKsSttwX4FQ QNmIUMdlKhPx+6RNxIOzwB5mqs+uIZ8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:36 2025 by rpki-client