$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba43ec31-ab45-30e0-a410-78076620f775.roa File: ba43ec31-ab45-30e0-a410-78076620f775.roa (raw, json) Hash identifier: DSrLLKaCaULLBlk/QW7N1ICfA6AdxVU4SIyzf/uF8rQ= Subject key identifier: 92:BE:5E:EF:A5:D0:41:7E:8E:51:7B:33:5C:BF:5F:27:43:E5:31:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671834D60240A66A861E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba43ec31-ab45-30e0-a410-78076620f775.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:18:34:d6:02:40:a6:6a:86:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=3cb7cc14-6e2f-4c37-8cc9-3433b7ca2a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:f9:d4:e9:b6:5b:5a:03:5a:80:80:f4:b6: 06:66:01:a7:0a:a9:e3:38:fc:ee:d3:bb:02:5e:9d: 20:06:17:10:af:d6:a6:d9:b2:aa:d8:91:9e:e8:20: 28:54:36:1b:4b:c5:9c:db:f3:f0:6b:8c:71:6a:af: cf:d7:9b:35:f5:f0:e7:18:98:5d:6d:83:a9:30:5b: a6:b9:d2:c0:dd:33:07:84:98:5e:46:89:27:6b:fe: c1:80:61:86:2c:e2:fe:4a:42:d6:b2:9a:a4:96:c8: a6:a3:6c:43:86:11:ed:42:1d:6f:62:20:87:53:a3: 8e:74:8e:c3:36:2f:94:ec:98:33:0f:1e:05:9d:ce: ae:c6:22:dd:f2:22:97:a3:1c:28:80:63:d4:aa:cb: fe:c4:ca:36:07:22:1f:72:a0:9a:47:3d:27:a5:78: 36:a1:00:83:1d:bd:77:ae:4e:40:39:d4:e1:bb:0c: 33:02:50:6d:99:f2:86:53:e5:ef:fd:2c:47:ab:6f: ca:1d:db:1e:52:fb:0a:05:e6:35:5e:33:69:b1:9f: 23:30:6e:9f:9f:6e:1d:ff:67:cd:9f:6c:4a:1b:ba: 66:5a:7e:76:33:fe:6e:8e:88:4e:1e:98:f2:4f:e9: c6:6e:53:40:bd:fc:77:f7:0b:01:5a:7a:bb:27:d7: ab:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BE:5E:EF:A5:D0:41:7E:8E:51:7B:33:5C:BF:5F:27:43:E5:31:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba43ec31-ab45-30e0-a410-78076620f775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:79:14:2e:bd:bb:76:bf:ba:e3:54:b2:d3:72:33:09:f2:eb: a4:11:c2:c1:21:bb:58:90:d8:de:5a:60:cf:36:d7:30:fb:59: 26:22:81:db:ee:be:b3:06:d5:cb:07:2a:0d:95:de:1d:22:52: 8e:9c:75:6d:4e:85:a7:6e:e3:1c:b9:f8:fb:30:a8:ac:24:99: ce:8a:0a:49:5d:f2:a8:db:ff:16:11:28:8a:95:82:df:88:a6: df:3b:c5:c4:18:fa:64:e5:25:98:aa:b4:ac:dc:d7:04:3e:bb: 6d:b7:9e:88:8b:8d:71:54:d1:03:eb:29:07:d2:36:05:ab:4e: 59:bc:de:96:82:a9:a9:aa:0a:80:8b:6c:44:a9:98:93:fb:e4: d5:49:49:ed:36:9c:7a:b0:27:dd:62:83:c8:9f:90:cf:66:26: c7:f0:fb:4b:0a:74:f3:9e:78:4c:78:d7:40:78:97:ea:65:55: a5:d6:f6:7a:b8:4e:3c:6e:b7:02:d7:43:a1:c1:a7:d0:63:d4: d8:b4:df:bd:d6:c6:07:46:ac:22:78:a6:0b:37:28:dd:df:88: cd:ef:2c:76:d0:56:d6:4b:57:2b:af:ac:85:29:16:c9:1d:10: 42:02:7a:56:d8:8c:da:04:ce:01:2d:e7:2f:20:65:25:de:bc: 2d:b6:70:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxg01gJApmqGHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk M2NiN2NjMTQtNmUyZi00YzM3LThjYzktMzQzM2I3Y2EyYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4P51Om2W1oDWoCA9LYGZgGnCqnjOPzu07sC Xp0gBhcQr9am2bKq2JGe6CAoVDYbS8Wc2/Pwa4xxaq/P15s19fDnGJhdbYOpMFum udLA3TMHhJheRokna/7BgGGGLOL+SkLWspqklsimo2xDhhHtQh1vYiCHU6OOdI7D Ni+U7JgzDx4Fnc6uxiLd8iKXoxwogGPUqsv+xMo2ByIfcqCaRz0npXg2oQCDHb13 rk5AOdThuwwzAlBtmfKGU+Xv/SxHq2/KHdseUvsKBeY1XjNpsZ8jMG6fn24d/2fN n2xKG7pmWn52M/5ujohOHpjyT+nGblNAvfx39wsBWnq7J9eriQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK+Xu+l0EF+jlF7M1y/XydD5THnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE0M2VjMzEtYWI0NS0z MGUwLWE0MTAtNzgwNzY2MjBmNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr2SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHB5FC69u3a/uuNUstNyMwny66QRwsEhu1iQ2N5aYM821zD7WSYigdvu vrMG1csHKg2V3h0iUo6cdW1Ohadu4xy5+PswqKwkmc6KCkld8qjb/xYRKIqVgt+I pt87xcQY+mTlJZiqtKzc1wQ+u223noiLjXFU0QPrKQfSNgWrTlm83paCqamqCoCL bESpmJP75NVJSe02nHqwJ91ig8ifkM9mJsfw+0sKdPOeeEx410B4l+plVaXW9nq4 TjxutwLXQ6HBp9Bj1Ni0373WxgdGrCJ4pgs3KN3fiM3vLHbQVtZLVyuvrIUpFskd EEICelbYjNoEzgEt5y8gZSXevC22cGE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:44 2025 by rpki-client