$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd6a85b-65b0-3031-826b-0acc561474a0.roa File: bdd6a85b-65b0-3031-826b-0acc561474a0.roa (raw, json) Hash identifier: 94uHZ2YdVmGwAwjdhx7tAoo1Kr6KhLR3qZBQfTU0X/s= Subject key identifier: D7:4A:E6:5F:33:2C:9F:D4:09:1A:23:A8:59:8B:1F:EC:F2:B0:A9:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C79BE9EA7773F02921F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd6a85b-65b0-3031-826b-0acc561474a0.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:79:be:9e:a7:77:3f:02:92:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=f74a21ab-98a2-43ee-bb63-b4881548c675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:9e:72:fe:79:95:ed:60:29:94:04:c7:fe: 8b:70:2c:8b:cf:fe:b7:fc:49:2d:74:18:b3:fe:2f: a2:6c:c7:66:6c:ea:63:c4:19:68:aa:59:34:89:de: b0:6f:86:69:ad:8b:6c:b3:96:7c:b0:67:94:59:01: 14:dc:79:19:c6:0b:b5:d6:81:c7:ec:d1:5e:53:77: 9b:31:f2:de:bd:57:de:a3:8e:96:80:20:26:8e:ed: 3a:d3:20:12:95:93:92:8e:49:ed:6d:44:2e:01:30: 29:f0:73:9f:5d:91:7b:f8:1f:09:67:c1:15:51:2a: b5:47:e0:bf:79:5e:d7:b0:b7:d2:c4:b4:2e:fd:e0: e6:8b:9c:d8:da:64:13:2c:97:5a:f1:fa:fe:49:ea: e6:c7:00:f0:a1:a8:c5:90:68:68:f4:a0:1c:87:8f: 4c:3d:19:fd:6f:1a:3c:2b:a6:56:aa:82:34:c2:a2: fc:9d:80:5d:31:1a:54:70:0f:20:62:db:4c:9b:36: fe:45:d7:01:6a:ab:d0:d5:1e:3c:8f:10:a4:78:0b: 84:89:80:8b:26:39:74:5d:d0:38:ae:5b:88:89:fa: 0a:30:58:fb:97:90:f7:b2:2a:f3:df:99:ac:41:b0: c8:39:89:c9:e9:af:e2:36:80:6d:51:1a:bc:05:5e: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4A:E6:5F:33:2C:9F:D4:09:1A:23:A8:59:8B:1F:EC:F2:B0:A9:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd6a85b-65b0-3031-826b-0acc561474a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:23:de:d5:70:9d:6b:cf:8b:e2:04:35:f5:27:b6:d4:a7:d3: e6:5e:33:a1:dc:8d:1f:c7:8d:23:a7:47:b0:0c:06:5b:f6:d6: 42:dc:80:cd:c4:d0:4b:5b:86:c6:d0:c5:20:89:4a:5b:68:5a: 07:29:b8:67:ef:82:fb:20:20:ca:f1:ad:06:cc:77:70:ee:f9: aa:38:98:8b:2f:e0:a9:ae:16:04:84:cb:e9:c7:08:cc:32:e3: 03:f8:e9:c6:54:ce:38:6e:2f:9e:58:c4:56:49:e4:8b:c0:53: 27:88:2a:c5:dc:41:61:ca:bf:73:a3:fe:f0:2d:df:b7:d9:dc: 41:13:e6:76:f1:5e:80:82:8c:df:ae:6a:aa:4e:82:22:ea:d8: cd:32:ec:58:00:28:93:22:cf:44:47:2b:a5:33:c3:9d:81:1a: ab:60:e7:0a:56:5d:82:b0:64:87:94:1c:9a:8e:47:9b:c2:c0: 7e:92:84:ca:38:90:e1:09:2f:4f:d7:4b:2a:58:43:00:fb:65: 6c:b1:36:eb:5c:db:c5:fd:a7:46:e3:c2:be:37:c4:27:82:ed: be:80:21:13:af:7d:86:89:c1:a0:19:e4:98:0d:ea:60:8f:cf: e5:46:5a:da:e6:4a:88:ce:d5:c2:96:c2:fc:47:3c:4d:bb:6b: 6f:f3:fd:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHm+nqd3PwKSHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk Zjc0YTIxYWItOThhMi00M2VlLWJiNjMtYjQ4ODE1NDhjNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlqecv55le1gKZQEx/6LcCyLz/63/EktdBiz /i+ibMdmbOpjxBloqlk0id6wb4ZprYtss5Z8sGeUWQEU3HkZxgu11oHH7NFeU3eb MfLevVfeo46WgCAmju060yASlZOSjkntbUQuATAp8HOfXZF7+B8JZ8EVUSq1R+C/ eV7XsLfSxLQu/eDmi5zY2mQTLJda8fr+SermxwDwoajFkGho9KAch49MPRn9bxo8 K6ZWqoI0wqL8nYBdMRpUcA8gYttMmzb+RdcBaqvQ1R48jxCkeAuEiYCLJjl0XdA4 rluIifoKMFj7l5D3sirz35msQbDIOYnJ6a/iNoBtURq8BV65iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdK5l8zLJ/UCRojqFmLH+zysKlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmRkNmE4NWItNjViMC0z MDMxLTgyNmItMGFjYzU2MTQ3NGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYj3tVwnWvPi+IENfUnttSn0+ZeM6HcjR/HjSOnR7AMBlv21kLcgM3E 0EtbhsbQxSCJSltoWgcpuGfvgvsgIMrxrQbMd3Du+ao4mIsv4KmuFgSEy+nHCMwy 4wP46cZUzjhuL55YxFZJ5IvAUyeIKsXcQWHKv3Oj/vAt37fZ3EET5nbxXoCCjN+u aqpOgiLq2M0y7FgAKJMiz0RHK6Uzw52BGqtg5wpWXYKwZIeUHJqOR5vCwH6ShMo4 kOEJL0/XSypYQwD7ZWyxNutc28X9p0bjwr43xCeC7b6AIROvfYaJwaAZ5JgN6mCP z+VGWtrmSojO1cKWwvxHPE27a2/z/RE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:16 2025 by rpki-client