$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5958988-d066-3576-b42f-2cae14edf3d8.roa File: b5958988-d066-3576-b42f-2cae14edf3d8.roa (raw, json) Hash identifier: lqQe7oUOuT/N9j/b44TFhI5Yvb7MRID2WmMUQdtEDok= Subject key identifier: 7C:BA:24:8D:A0:E4:BD:8D:CC:8B:E3:DE:90:12:BD:C9:CB:7F:21:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2850028343B256A1845A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5958988-d066-3576-b42f-2cae14edf3d8.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.160.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:85:00:28:34:3b:25:6a:18:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=949e6c2a-22e8-45d2-b228-487caf0f1755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:d4:d5:12:39:c4:24:fd:d0:a3:0c:9c:0b: 6a:a0:99:b7:98:c9:39:2e:a1:fa:a7:31:7f:f5:32: e7:d1:7d:74:8d:33:e6:2e:96:3e:88:f8:5f:f0:02: ab:4e:c0:0b:bc:aa:3d:75:ec:34:bb:6d:e0:8d:1a: a5:34:61:75:3b:1d:01:e9:37:c7:da:2b:ba:ec:6d: 99:b5:76:7b:46:ee:c4:61:2c:78:bc:81:47:b0:c7: 0b:c6:7a:be:a8:7f:3b:10:40:a6:0d:61:69:79:b7: bc:dd:51:ec:d8:f0:62:1f:b3:33:ed:ed:43:a0:78: 0b:dd:69:8c:b2:c7:ea:41:ff:4d:85:ef:35:98:af: 80:bd:3b:bf:27:44:8f:55:22:4e:09:ae:f9:63:ae: 8a:be:48:ba:89:21:65:71:b1:0e:e0:61:94:d5:43: 36:14:bc:7f:47:dd:0c:9c:59:7b:f3:1f:32:06:fc: 5e:52:fc:17:ba:a6:af:4e:20:fb:eb:6c:de:1d:f9: 21:7a:3b:4f:6f:1e:e6:fe:dc:32:84:fe:4e:34:a6: a6:6b:61:0c:8a:3e:cd:2c:14:de:0a:74:e6:55:0a: d3:7c:5a:d4:51:af:06:c4:1c:33:ae:a4:de:e3:78: 27:3c:8d:98:99:e6:83:3b:42:af:00:a4:3f:4b:b5: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BA:24:8D:A0:E4:BD:8D:CC:8B:E3:DE:90:12:BD:C9:CB:7F:21:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5958988-d066-3576-b42f-2cae14edf3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6a:35:30:46:32:03:ba:60:0f:98:f1:35:a0:22:e9:00:c5: aa:72:a7:1c:64:14:ea:1b:f3:39:a0:54:d4:8d:b2:4e:c8:20: ce:a8:28:a3:2d:89:14:38:a8:4a:83:46:e4:35:a5:ac:c7:30: 37:82:26:30:7c:26:53:5c:81:ac:81:a5:aa:85:89:ca:17:97: 5d:80:a4:4b:9a:87:8f:35:42:1c:1d:d8:6b:5b:09:05:49:8d: 51:da:da:84:01:80:ea:d9:17:b4:aa:da:03:a8:34:fb:42:e2: d8:1a:31:6c:93:8d:b9:91:e4:36:78:3d:c5:86:3e:89:95:d1: d8:d0:ff:b0:09:01:fb:d8:eb:c8:20:e5:1e:a6:08:95:8f:92: 29:4b:02:63:8f:e5:71:2b:a8:ce:a5:96:4c:3a:ff:f0:1b:13: 4a:6b:4f:dd:ac:a5:67:74:5f:4e:8c:49:23:9f:4b:0f:94:48: 66:29:61:c5:59:4e:1a:38:30:a8:db:4f:16:cb:83:a7:94:dc: 6b:5e:c1:1a:25:6d:f6:b3:56:85:1e:28:ee:56:43:bc:63:ab: 7a:d3:76:04:71:52:c5:1a:4c:a5:9f:7f:6b:0f:54:a8:49:c3: 4f:b0:59:96:bf:6c:ad:5a:3c:08:53:e3:09:8b:93:75:91:85: c2:02:32:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oUAKDQ7JWoYRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OTQ5ZTZjMmEtMjJlOC00NWQyLWIyMjgtNDg3Y2FmMGYxNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/U1RI5xCT90KMMnAtqoJm3mMk5LqH6pzF/ 9TLn0X10jTPmLpY+iPhf8AKrTsALvKo9dew0u23gjRqlNGF1Ox0B6TfH2iu67G2Z tXZ7Ru7EYSx4vIFHsMcLxnq+qH87EECmDWFpebe83VHs2PBiH7Mz7e1DoHgL3WmM ssfqQf9Nhe81mK+AvTu/J0SPVSJOCa75Y66Kvki6iSFlcbEO4GGU1UM2FLx/R90M nFl78x8yBvxeUvwXuqavTiD762zeHfkhejtPbx7m/twyhP5ONKama2EMij7NLBTe CnTmVQrTfFrUUa8GxBwzrqTe43gnPI2YmeaDO0KvAKQ/S7W8bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy6JI2g5L2NzIvj3pASvcnLfyGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjU5NTg5ODgtZDA2Ni0z NTc2LWI0MmYtMmNhZTE0ZWRmM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFqNTBGMgO6YA+Y8TWgIukAxapypxxkFOob8zmgVNSNsk7IIM6oKKMt iRQ4qEqDRuQ1pazHMDeCJjB8JlNcgayBpaqFicoXl12ApEuah481Qhwd2GtbCQVJ jVHa2oQBgOrZF7Sq2gOoNPtC4tgaMWyTjbmR5DZ4PcWGPomV0djQ/7AJAfvY68gg 5R6mCJWPkilLAmOP5XErqM6llkw6//AbE0prT92spWd0X06MSSOfSw+USGYpYcVZ Tho4MKjbTxbLg6eU3GtewRolbfazVoUeKO5WQ7xjq3rTdgRxUsUaTKWff2sPVKhJ w0+wWZa/bK1aPAhT4wmLk3WRhcICMlk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:06 2025 by rpki-client