$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae91e922-5a13-3be6-afdf-ab879717c6f7.roa File: ae91e922-5a13-3be6-afdf-ab879717c6f7.roa (raw, json) Hash identifier: B2+Qox5Xltm2HQG78YSNPaaljwCiPb48I/Ux6jVwqpY= Subject key identifier: 9D:13:62:71:B2:AE:83:5D:DE:6E:D5:ED:68:4A:00:CE:53:09:A5:18 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F247A210B48D478707E4D0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae91e922-5a13-3be6-afdf-ab879717c6f7.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.161.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:47:a2:10:b4:8d:47:87:07:e4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=8baa0a63-2ff0-4e84-ac82-6157a6216d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:0d:72:08:5c:72:bf:f7:38:d3:bd:d3:3d: 26:81:b6:39:6f:08:0b:cc:27:d4:87:8f:11:62:bb: b0:9c:32:7d:d0:88:ed:04:c5:44:b1:e6:07:9e:68: ed:dd:7e:0d:37:0d:3f:31:e1:e4:da:5e:da:08:51: 30:ff:a3:cf:4d:b0:5f:d3:f3:6b:8f:e0:4f:cd:e3: 45:67:16:27:d4:08:09:6b:9f:23:d8:87:ee:04:06: a5:3d:e0:f9:88:de:9e:36:db:43:2f:4e:96:fb:0a: 6b:fb:6d:5d:62:ae:60:6d:d2:dd:96:15:81:a0:6d: 2a:53:71:15:d2:e3:a4:9d:06:b7:12:56:5b:6f:fa: 27:ca:48:eb:aa:7d:97:ee:7f:e3:03:06:f1:1f:18: ab:94:62:68:15:5c:c2:57:d1:d6:f4:22:4b:b9:59: e6:90:46:42:45:00:74:cf:be:f4:13:f7:b1:5a:2b: 2a:01:d9:e7:2b:34:e0:97:bc:ca:e4:e9:59:17:0e: dd:3e:c7:be:5d:cf:c5:f0:03:9f:e0:ac:2a:87:a2: 5c:e7:52:ea:8b:e3:bd:94:3d:03:75:a1:29:14:bf: 0b:82:30:21:7b:67:6f:95:d6:b9:28:ea:59:9f:96: e0:18:c0:ff:44:7a:11:f9:d5:18:a7:be:8a:5b:34: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:13:62:71:B2:AE:83:5D:DE:6E:D5:ED:68:4A:00:CE:53:09:A5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae91e922-5a13-3be6-afdf-ab879717c6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f2:80:4b:29:39:0e:b2:fe:81:2c:08:ca:3d:14:49:11:bb: 72:7f:dd:f0:67:77:19:60:2f:cd:e6:21:47:25:4e:da:57:6d: 28:b0:af:36:57:89:11:8e:b7:80:62:6f:4c:fd:6d:c3:83:d3: 71:e9:c6:f8:7a:72:0c:1e:60:ff:21:cd:f8:e5:bc:65:da:bf: 10:5a:7f:3a:01:15:3a:84:f5:94:9a:12:7b:79:be:09:b3:76: 0d:dc:46:30:e4:21:0f:c6:6e:c1:70:e7:0b:07:3d:bb:c8:6e: 03:ff:4e:42:2a:40:3b:4f:dc:e2:50:64:24:66:1c:57:68:cf: 7f:87:31:d0:04:32:a1:d7:0b:c6:93:53:2f:2e:be:77:ed:92: 76:03:98:50:55:18:3c:c9:9f:7c:12:be:71:cf:ab:4d:87:49: af:49:15:a6:39:34:fa:15:99:67:1e:f0:fd:9b:f9:00:74:59: b3:92:15:18:88:22:87:39:fd:fd:8c:4d:23:78:14:d3:59:61: 11:24:4b:2b:aa:aa:f7:be:a9:af:a6:07:8d:73:69:cf:7c:8f: e7:cb:c1:6a:4c:3b:e8:de:6c:13:85:8c:5d:ac:d9:c1:f4:bf: 84:28:44:98:a9:39:9d:0e:fe:46:a6:0a:e0:06:6c:55:a2:3f: 5d:44:81:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28keiELSNR4cH5NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OGJhYTBhNjMtMmZmMC00ZTg0LWFjODItNjE1N2E2MjE2ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/INcghccr/3ONO90z0mgbY5bwgLzCfUh48R YruwnDJ90IjtBMVEseYHnmjt3X4NNw0/MeHk2l7aCFEw/6PPTbBf0/Nrj+BPzeNF ZxYn1AgJa58j2IfuBAalPeD5iN6eNttDL06W+wpr+21dYq5gbdLdlhWBoG0qU3EV 0uOknQa3ElZbb/onykjrqn2X7n/jAwbxHxirlGJoFVzCV9HW9CJLuVnmkEZCRQB0 z770E/exWisqAdnnKzTgl7zK5OlZFw7dPse+Xc/F8AOf4Kwqh6Jc51Lqi+O9lD0D daEpFL8LgjAhe2dvlda5KOpZn5bgGMD/RHoR+dUYp76KWzQ4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0TYnGyroNd3m7V7WhKAM5TCaUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWU5MWU5MjItNWExMy0z YmU2LWFmZGYtYWI4Nzk3MTdjNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPygEspOQ6y/oEsCMo9FEkRu3J/3fBndxlgL83mIUclTtpXbSiwrzZX iRGOt4Bib0z9bcOD03Hpxvh6cgweYP8hzfjlvGXavxBafzoBFTqE9ZSaEnt5vgmz dg3cRjDkIQ/GbsFw5wsHPbvIbgP/TkIqQDtP3OJQZCRmHFdoz3+HMdAEMqHXC8aT Uy8uvnftknYDmFBVGDzJn3wSvnHPq02HSa9JFaY5NPoVmWce8P2b+QB0WbOSFRiI Ioc5/f2MTSN4FNNZYREkSyuqqve+qa+mB41zac98j+fLwWpMO+jebBOFjF2s2cH0 v4QoRJipOZ0O/kamCuAGbFWiP11EgcM= -----END CERTIFICATE-----Generated at Thu Oct 16 01:40:04 2025 by rpki-client