$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7da248-524d-3bf8-a7d1-341e26104528.roa File: af7da248-524d-3bf8-a7d1-341e26104528.roa (raw, json) Hash identifier: 9j9E59onE8TyMlb51VExK5aKrYf9Qay50/piLaz1qfo= Subject key identifier: 11:86:D5:0B:DA:7A:11:CE:87:B4:99:AA:86:71:3A:94:B3:31:FA:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B6797F7208C54A9C3DFCD9AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7da248-524d-3bf8-a7d1-341e26104528.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 22773 IP address blocks: 70.190.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f7:20:8c:54:a9:c3:df:cd:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9bb8e58b-ec8c-4cc8-97a6-4185547c679d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:30:be:0b:41:26:b2:33:f5:52:7d:de:67: 3d:18:d8:bb:e0:fa:e6:02:55:4b:d2:93:40:79:2f: 87:72:c5:84:4d:06:84:0a:3a:2f:fa:db:bf:11:e4: a3:bb:a0:7f:46:3e:60:04:01:5e:40:fa:62:34:45: ea:4d:ff:3d:57:86:70:84:ce:ec:d6:8f:06:77:08: 28:00:60:f3:19:4c:0b:8f:79:35:5a:ae:a2:cc:ca: 9f:e9:d2:4d:a7:a3:e0:c3:df:d1:c6:be:89:d3:7d: 91:95:75:03:b1:a0:a4:9f:4f:ee:f6:c4:40:62:00: c7:04:69:9e:66:37:c9:b9:49:f7:af:48:bc:be:6d: a3:30:82:33:00:88:e3:f9:d5:2a:31:ae:77:de:22: ce:da:ec:3c:46:64:19:c4:55:84:ee:ab:61:2b:f1: cd:5d:73:12:c5:9b:4e:a0:f9:2f:9d:64:f3:4b:2a: 3e:11:80:c3:d8:7c:64:c7:30:89:ab:1e:d1:04:2c: 77:53:57:28:a8:7d:d7:29:58:bc:50:02:40:49:e5: d9:22:03:86:77:47:e5:d4:28:2a:7c:95:81:af:12: 2a:e6:a2:ca:b8:83:5d:22:dd:62:44:f3:93:11:ee: 03:bf:94:ff:9f:8b:84:68:85:98:33:d4:e7:03:20: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:86:D5:0B:DA:7A:11:CE:87:B4:99:AA:86:71:3A:94:B3:31:FA:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7da248-524d-3bf8-a7d1-341e26104528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e0:30:35:23:e3:51:44:e1:92:22:01:2e:08:a7:a4:3a:5a: ed:c0:ba:f3:3b:98:f1:4e:66:bb:72:f2:1a:44:a4:5b:7d:88: 2e:e6:4a:87:1a:0a:0e:69:ae:cb:5f:6d:27:26:ed:8e:9c:fa: f1:a6:9d:f4:94:16:0f:af:98:77:73:41:09:fb:78:c1:e5:a9: 98:86:96:24:c8:e4:d9:c9:55:63:82:86:49:f2:08:86:95:82: 07:37:4b:ef:93:e2:50:3d:3f:4a:9a:db:08:35:58:60:c9:49: 53:6b:b8:79:59:0f:16:ee:0b:88:87:28:b7:94:78:dd:71:a8: 03:75:20:3d:28:94:83:e1:63:dc:70:dd:f6:31:86:57:56:5c: f6:68:a5:be:a8:52:1d:e8:8a:c3:5b:1e:e7:13:a1:f5:f4:fb: 37:7b:87:8e:73:37:2f:bd:f5:78:53:6b:c1:c0:86:b6:bb:e8: b8:50:b8:b0:d4:ab:1a:34:9f:f4:5a:8a:5b:9d:98:13:e8:da: b2:82:69:93:db:0f:34:bb:4a:a1:16:a2:d3:23:bd:33:48:71: 6a:92:91:23:55:4f:1a:15:c3:ea:75:f8:1b:3b:0b:af:49:99: f7:41:79:c8:16:7e:8f:9f:43:4c:e9:9a:63:f3:1d:03:13:d5: ca:0a:54:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/cgjFSpw9/NmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWJiOGU1OGItZWM4Yy00Y2M4LTk3YTYtNDE4NTU0N2M2NzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRYwvgtBJrIz9VJ93mc9GNi74PrmAlVL0pNA eS+HcsWETQaECjov+tu/EeSju6B/Rj5gBAFeQPpiNEXqTf89V4ZwhM7s1o8Gdwgo AGDzGUwLj3k1Wq6izMqf6dJNp6Pgw9/Rxr6J032RlXUDsaCkn0/u9sRAYgDHBGme ZjfJuUn3r0i8vm2jMIIzAIjj+dUqMa533iLO2uw8RmQZxFWE7qthK/HNXXMSxZtO oPkvnWTzSyo+EYDD2HxkxzCJqx7RBCx3U1coqH3XKVi8UAJASeXZIgOGd0fl1Cgq fJWBrxIq5qLKuINdIt1iRPOTEe4Dv5T/n4uEaIWYM9TnAyAVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGG1QvaehHOh7SZqoZxOpSzMfraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY3ZGEyNDgtNTI0ZC0z YmY4LWE3ZDEtMzQxZTI2MTA0NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTgMDUj41FE4ZIiAS4Ip6Q6Wu3AuvM7mPFOZrty8hpEpFt9iC7mSoca Cg5prstfbScm7Y6c+vGmnfSUFg+vmHdzQQn7eMHlqZiGliTI5NnJVWOChknyCIaV ggc3S++T4lA9P0qa2wg1WGDJSVNruHlZDxbuC4iHKLeUeN1xqAN1ID0olIPhY9xw 3fYxhldWXPZopb6oUh3oisNbHucTofX0+zd7h45zNy+99XhTa8HAhra76LhQuLDU qxo0n/RailudmBPo2rKCaZPbDzS7SqEWotMjvTNIcWqSkSNVTxoVw+p1+Bs7C69J mfdBecgWfo+fQ0zpmmPzHQMT1coKVEQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:39 2025 by rpki-client