$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baa734a0-2e34-383b-b452-fdc5034ff608.roa File: baa734a0-2e34-383b-b452-fdc5034ff608.roa (raw, json) Hash identifier: a1/npxrxZPoi3vQ2BZ+AvzEZ88+si/MiMRKTYcXKobY= Subject key identifier: 3D:BA:BD:97:44:13:54:E5:85:61:19:3F:C0:59:8D:CA:45:3D:5A:9E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670CC5860B69913D8E3D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baa734a0-2e34-383b-b452-fdc5034ff608.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0c:c5:86:0b:69:91:3d:8e:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=7390fcb0-63f3-4057-a76d-e88b4f10e187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:75:e8:de:6b:7c:64:54:82:15:f8:8b:c9: 98:38:c5:c4:05:62:4e:3a:ca:4c:bf:19:33:ec:ec: 12:f9:a6:0a:8c:01:c4:3f:c4:a2:44:d9:63:09:fc: a7:80:1c:d5:8c:9a:4e:cf:aa:f3:14:fc:0d:a9:68: 40:88:b6:d2:3d:8d:77:26:5b:5c:18:30:06:5e:4a: 80:c1:19:a1:1c:8b:df:30:e3:99:77:a5:6f:fc:6c: 9f:e2:ec:59:b1:2f:13:87:c8:8d:c5:f8:4e:fa:1f: 0d:2f:f1:04:6e:f6:e8:ed:a8:f7:c5:ed:04:6d:3e: bf:0d:80:3d:85:71:b1:d6:74:90:0f:c6:cb:d7:53: c4:0c:c3:b8:1d:26:77:42:22:cd:90:56:ed:d7:8c: e4:03:0d:56:9d:62:be:bb:36:f8:7e:93:46:6e:bb: 7f:ad:98:98:26:5d:8c:71:8c:f9:65:93:37:dc:13: 76:7f:dc:56:34:0f:f5:c3:db:22:16:dc:5c:62:8e: ab:87:bc:be:53:07:cb:63:3b:36:53:cd:dc:f9:df: ea:cc:e7:f6:67:ac:4b:7c:96:35:63:d0:eb:5e:3a: 95:0b:75:29:91:14:ef:39:2e:b1:59:aa:8b:9a:4e: dc:73:85:00:c1:3b:63:dc:85:77:ff:b5:5d:2a:29: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BA:BD:97:44:13:54:E5:85:61:19:3F:C0:59:8D:CA:45:3D:5A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baa734a0-2e34-383b-b452-fdc5034ff608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b0:6a:51:b8:5f:24:27:26:55:61:b4:94:72:da:e6:5c:a8: ce:e5:c4:2f:f7:10:b1:77:95:66:e3:df:2f:eb:37:5d:ac:8d: b4:89:2a:7a:ed:50:e6:af:56:bb:be:50:5d:77:9b:c9:a5:cb: 13:70:9e:45:da:c2:46:ba:fe:65:ad:0f:03:d1:2a:9a:c8:79: 62:d8:4a:57:e9:d1:af:6d:ff:e2:02:80:02:84:90:ff:b7:4a: fe:19:d5:9c:41:26:30:f4:aa:10:76:5f:2c:23:2a:f0:0e:b3: e3:55:6e:55:1a:9e:f5:81:0f:dd:b4:09:c4:f0:4b:cf:8b:61: 79:d7:81:42:d1:47:65:ab:ec:63:a2:bb:fe:86:65:c7:37:8d: a8:72:40:50:8b:5b:eb:cf:12:93:46:1c:1d:50:4c:e4:bd:c1: d2:85:89:db:a1:4f:b0:cd:2a:13:1d:60:7d:b4:62:fc:29:56: c1:8e:a5:70:ee:e5:55:78:f0:7b:7e:2f:fe:cb:22:eb:ba:8f: c8:a7:f9:31:97:8d:24:2f:a5:71:e4:0b:45:97:9f:f7:83:a2: b0:d5:5a:fe:23:7e:08:40:5d:df:54:5c:71:d4:fb:a2:0d:5d: fa:75:9c:00:1f:e2:b9:d5:ae:fa:46:b0:29:69:02:15:33:88: 2e:1e:4d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwzFhgtpkT2OPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NzM5MGZjYjAtNjNmMy00MDU3LWE3NmQtZTg4YjRmMTBlMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlJ16N5rfGRUghX4i8mYOMXEBWJOOspMvxkz 7OwS+aYKjAHEP8SiRNljCfyngBzVjJpOz6rzFPwNqWhAiLbSPY13JltcGDAGXkqA wRmhHIvfMOOZd6Vv/Gyf4uxZsS8Th8iNxfhO+h8NL/EEbvbo7aj3xe0EbT6/DYA9 hXGx1nSQD8bL11PEDMO4HSZ3QiLNkFbt14zkAw1WnWK+uzb4fpNGbrt/rZiYJl2M cYz5ZZM33BN2f9xWNA/1w9siFtxcYo6rh7y+UwfLYzs2U83c+d/qzOf2Z6xLfJY1 Y9DrXjqVC3UpkRTvOS6xWaqLmk7cc4UAwTtj3IV3/7VdKimUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD26vZdEE1TlhWEZP8BZjcpFPVqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFhNzM0YTAtMmUzNC0z ODNiLWI0NTItZmRjNTAzNGZmNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuwalG4XyQnJlVhtJRy2uZcqM7lxC/3ELF3lWbj3y/rN12sjbSJKnrt UOavVru+UF13m8mlyxNwnkXawka6/mWtDwPRKprIeWLYSlfp0a9t/+ICgAKEkP+3 Sv4Z1ZxBJjD0qhB2XywjKvAOs+NVblUanvWBD920CcTwS8+LYXnXgULRR2Wr7GOi u/6GZcc3jahyQFCLW+vPEpNGHB1QTOS9wdKFiduhT7DNKhMdYH20YvwpVsGOpXDu 5VV48Ht+L/7LIuu6j8in+TGXjSQvpXHkC0WXn/eDorDVWv4jfghAXd9UXHHU+6IN Xfp1nAAf4rnVrvpGsClpAhUziC4eTVE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:16 2025 by rpki-client