$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2a19628-6c78-3716-84e2-cad3444ddb91.roa File: b2a19628-6c78-3716-84e2-cad3444ddb91.roa (raw, json) Hash identifier: DIKv//y3dm8OsqeVprawvVB/e3eMU3CEUMg7gw2oNro= Subject key identifier: 71:E8:D9:86:F0:91:D5:83:32:DF:60:B5:54:98:65:E3:57:E3:20:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670F663CAB6049CE2586C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2a19628-6c78-3716-84e2-cad3444ddb91.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0f:66:3c:ab:60:49:ce:25:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=5f87a917-b506-4d8c-ba8c-8e46a7ecf3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:53:cf:21:be:2c:d0:28:7f:f2:ef:85:63: 6c:c5:c1:a8:62:4d:29:7d:00:94:b0:0b:a6:cf:42: 6b:6d:17:a3:8f:9a:3b:4d:59:68:12:6e:93:6c:f3: 19:24:5f:10:7c:0a:bd:be:09:d8:d9:51:63:57:68: 5b:5c:6e:bc:6d:3d:98:f9:fc:57:ad:98:d4:ac:78: 64:53:e2:06:21:49:79:46:b9:90:38:14:d7:df:5f: b9:0f:5b:fa:be:5c:b4:79:e3:d1:a8:61:21:0f:f9: 89:4c:6c:3b:73:d5:d7:24:eb:a9:60:c0:ba:57:c9: de:33:f3:60:e7:a1:a5:4f:58:f6:d8:cd:74:56:0d: 33:c9:c7:3c:b7:43:63:19:1f:ae:66:5f:bb:03:62: 0f:db:19:1c:68:d1:29:09:a5:04:0a:64:11:70:81: 5f:a5:a3:fe:f8:7b:39:c4:e1:17:0e:fb:4f:b2:02: 06:2d:2c:c2:29:a0:89:b3:22:f5:17:5c:3f:b6:91: 9b:eb:c2:30:1b:4e:6b:c7:cf:50:a6:68:3b:c7:c8: 0c:05:90:44:6e:ed:b4:b9:0f:db:cd:6e:50:95:26: 5f:45:2d:1b:8f:8f:1a:80:9d:93:48:59:9b:a5:66: 09:ae:a3:98:f2:96:c6:0b:fd:28:df:dd:98:cc:94: 1e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E8:D9:86:F0:91:D5:83:32:DF:60:B5:54:98:65:E3:57:E3:20:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2a19628-6c78-3716-84e2-cad3444ddb91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ea:b8:dd:f8:a3:40:e7:f3:ba:84:47:73:65:e8:c6:6d:35: c6:c4:12:51:4a:13:4b:47:22:b5:95:52:74:9d:fa:90:5b:34: d6:3a:b4:4d:7e:aa:d4:f3:ba:af:0e:69:5a:d3:9b:41:4a:44: e2:ee:4f:b7:a6:e2:38:0a:ff:b9:4a:c3:13:40:1a:2d:68:29: 44:ab:b2:13:61:f5:fc:b0:03:0b:25:7c:f2:66:a4:b8:78:cb: 7c:42:eb:90:64:9b:5d:d5:25:ee:b0:10:3f:09:43:3a:0e:4f: e3:fd:d1:0f:9f:df:65:12:7a:8e:18:44:c9:d9:7f:ad:78:4d: 3f:86:dd:51:3c:c7:eb:b2:e1:06:bd:ab:04:a8:aa:5b:f7:f7: 0c:6f:eb:8c:7c:f8:d3:fe:21:7d:1b:3e:98:f9:3b:fb:22:f1: 6e:6d:23:18:ec:1e:71:7f:60:91:6f:ba:18:44:fe:c4:ad:5e: 2c:b5:ac:1e:33:32:3c:35:a6:af:ba:eb:2c:62:d7:53:80:fe: 35:a6:a2:f9:18:09:01:c1:d4:6d:6b:f4:48:06:b7:ac:bb:1b: 6a:eb:a4:33:bc:35:a7:cb:7d:56:12:9d:e8:7f:77:7d:16:f8: 49:3f:15:26:9d:07:58:a1:cf:79:c4:e5:e3:0f:76:ad:73:cf: 0d:36:48:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZw9mPKtgSc4lhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NWY4N2E5MTctYjUwNi00ZDhjLWJhOGMtOGU0NmE3ZWNmM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGZTzyG+LNAof/LvhWNsxcGoYk0pfQCUsAum z0JrbRejj5o7TVloEm6TbPMZJF8QfAq9vgnY2VFjV2hbXG68bT2Y+fxXrZjUrHhk U+IGIUl5RrmQOBTX31+5D1v6vly0eePRqGEhD/mJTGw7c9XXJOupYMC6V8neM/Ng 56GlT1j22M10Vg0zycc8t0NjGR+uZl+7A2IP2xkcaNEpCaUECmQRcIFfpaP++Hs5 xOEXDvtPsgIGLSzCKaCJsyL1F1w/tpGb68IwG05rx89Qpmg7x8gMBZBEbu20uQ/b zW5QlSZfRS0bj48agJ2TSFmbpWYJrqOY8pbGC/0o392YzJQejwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHo2YbwkdWDMt9gtVSYZeNX4yACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjJhMTk2MjgtNmM3OC0z NzE2LTg0ZTItY2FkMzQ0NGRkYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzquN34o0Dn87qER3Nl6MZtNcbEElFKE0tHIrWVUnSd+pBbNNY6tE1+ qtTzuq8OaVrTm0FKROLuT7em4jgK/7lKwxNAGi1oKUSrshNh9fywAwslfPJmpLh4 y3xC65Bkm13VJe6wED8JQzoOT+P90Q+f32USeo4YRMnZf614TT+G3VE8x+uy4Qa9 qwSoqlv39wxv64x8+NP+IX0bPpj5O/si8W5tIxjsHnF/YJFvuhhE/sStXiy1rB4z Mjw1pq+66yxi11OA/jWmovkYCQHB1G1r9EgGt6y7G2rrpDO8NafLfVYSneh/d30W +Ek/FSadB1ihz3nE5eMPdq1zzw02SHg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:41:34 2025 by rpki-client