$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8088829-9bd7-355c-b08f-609ec5a15656.roa File: b8088829-9bd7-355c-b08f-609ec5a15656.roa (raw, json) Hash identifier: RhH/dWpXsbYyqTF12mBEh8KSYe8bR/iADBOs+hKV9ec= Subject key identifier: D8:A2:1D:BC:59:F5:26:E3:10:D2:A1:0A:78:24:16:58:30:96:1A:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F018F27F1E0DADF78763900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8088829-9bd7-355c-b08f-609ec5a15656.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.188.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:8f:27:f1:e0:da:df:78:76:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=9e7ea72e-840c-4ac6-bee3-6dc82df4c203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:91:d3:d3:ae:eb:6a:7a:99:0d:cb:0d:51: ea:07:84:d2:36:d9:66:32:7a:44:0f:66:9b:76:2f: 63:3b:d8:a3:1f:7d:89:6c:6d:18:c2:8d:57:b6:4c: ba:2b:5b:d8:3d:d3:2f:52:ce:86:2a:46:df:6e:c4: da:87:e1:f4:69:94:29:d9:b3:04:03:b1:cd:94:37: 79:77:a6:4f:9d:4b:67:9c:fd:14:f5:97:64:19:38: ce:ae:84:ff:c4:23:01:86:8c:af:62:38:56:c3:8a: f9:52:57:58:bc:fe:1d:96:b4:90:22:34:cc:07:aa: 07:f1:b3:a4:4e:05:1f:5a:15:1f:1e:c7:b1:0e:1c: db:df:1e:27:fd:42:ba:0b:e9:db:88:30:c4:f8:83: bf:56:4d:08:e9:eb:95:90:70:80:16:ca:ab:23:31: 61:fb:9a:b8:bb:17:04:2e:d2:61:73:62:5d:31:2f: ee:0f:a5:61:30:f6:c9:39:ac:e9:11:61:ad:7d:9d: 56:82:e2:05:94:38:8c:5b:5b:ab:1b:5f:2a:a1:34: 60:98:60:99:12:e4:36:69:0e:2e:b2:cd:3e:12:a8: 2c:25:f7:75:be:d0:50:54:d4:8b:3e:ba:29:19:c8: 69:d8:69:e6:3d:6a:67:c8:71:bc:3e:3b:24:81:2a: c1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A2:1D:BC:59:F5:26:E3:10:D2:A1:0A:78:24:16:58:30:96:1A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8088829-9bd7-355c-b08f-609ec5a15656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9f:ba:7f:83:5c:7e:79:13:c9:97:66:ad:ed:f4:b7:1a:35: ff:5b:b9:b0:8e:13:57:02:ed:74:4f:10:fe:ff:40:7c:37:ce: 07:6e:7f:59:03:67:dd:be:50:c0:d4:02:0a:18:03:7b:f3:a7: 11:74:ea:d0:fc:70:d8:f0:ff:1b:4f:ae:5f:91:60:3e:3d:3d: e9:f9:8d:78:60:9e:21:9d:8e:a7:63:ca:93:29:ea:50:cc:e1: 8c:12:71:e4:45:19:67:35:50:9a:7c:e3:11:f1:b5:8f:37:5f: 9b:9d:49:d1:bf:d6:46:eb:4a:b2:95:45:b9:3a:3a:28:5b:7d: c0:55:ab:e1:f3:b4:31:fe:50:a7:57:ad:b3:7e:ed:cb:3c:79: 2f:63:9f:67:11:c4:d3:0d:c1:68:3d:41:f1:1b:ab:c6:95:b8: a8:ef:f0:8b:1d:e7:39:ee:d3:28:31:87:39:04:11:92:e1:3a: 21:92:1e:d8:e4:a3:35:fe:95:ca:15:e6:c6:1d:31:6b:0f:3d: 31:8a:06:71:54:c2:97:59:1b:6c:97:a7:18:50:3a:ad:73:e6: 36:0d:dc:61:9a:91:b8:42:b4:41:e9:d4:73:35:cb:e3:0c:0d: 2c:f1:7b:21:8c:ea:ff:14:61:07:a2:09:20:32:ea:89:67:6e: 07:48:38:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAY8n8eDa33h2OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OWU3ZWE3MmUtODQwYy00YWM2LWJlZTMtNmRjODJkZjRjMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqWR09Ou62p6mQ3LDVHqB4TSNtlmMnpED2ab di9jO9ijH32JbG0Ywo1Xtky6K1vYPdMvUs6GKkbfbsTah+H0aZQp2bMEA7HNlDd5 d6ZPnUtnnP0U9ZdkGTjOroT/xCMBhoyvYjhWw4r5UldYvP4dlrSQIjTMB6oH8bOk TgUfWhUfHsexDhzb3x4n/UK6C+nbiDDE+IO/Vk0I6euVkHCAFsqrIzFh+5q4uxcE LtJhc2JdMS/uD6VhMPbJOazpEWGtfZ1WguIFlDiMW1urG18qoTRgmGCZEuQ2aQ4u ss0+EqgsJfd1vtBQVNSLPropGchp2GnmPWpnyHG8PjskgSrBDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiiHbxZ9SbjENKhCngkFlgwlhqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjgwODg4MjktOWJkNy0z NTVjLWIwOGYtNjA5ZWM1YTE1NjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGfun+DXH55E8mXZq3t9LcaNf9bubCOE1cC7XRPEP7/QHw3zgduf1kD Z92+UMDUAgoYA3vzpxF06tD8cNjw/xtPrl+RYD49Pen5jXhgniGdjqdjypMp6lDM 4YwSceRFGWc1UJp84xHxtY83X5udSdG/1kbrSrKVRbk6OihbfcBVq+HztDH+UKdX rbN+7cs8eS9jn2cRxNMNwWg9QfEbq8aVuKjv8Isd5znu0ygxhzkEEZLhOiGSHtjk ozX+lcoV5sYdMWsPPTGKBnFUwpdZG2yXpxhQOq1z5jYN3GGakbhCtEHp1HM1y+MM DSzxeyGM6v8UYQeiCSAy6olnbgdIOPE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:28 2025 by rpki-client