$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0647f52-153b-30d2-a94e-3d0853e81cc5.roa File: c0647f52-153b-30d2-a94e-3d0853e81cc5.roa (raw, json) Hash identifier: 3BocNPCfz6RZa44drqbTUW6xuOt92EuTbMnb+qBu0ko= Subject key identifier: 64:DF:44:92:AF:47:6B:54:7A:B1:62:18:E7:35:B3:32:7B:CD:C4:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01997765B099A97A9405C8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0647f52-153b-30d2-a94e-3d0853e81cc5.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.190.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:99:77:65:b0:99:a9:7a:94:05:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=9c7f30fe-fb2f-4cb1-9c19-8dacd97503f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c2:da:0e:4c:26:33:a6:d5:e1:04:b0:6e:a6: 80:91:00:3e:47:39:29:94:f4:7c:de:05:ae:43:68: 8c:70:6a:15:cc:f8:51:23:db:51:bb:77:11:6a:00: c0:f0:ea:be:5a:8e:af:ea:64:b2:bb:1d:5b:c1:fb: 07:c2:e8:c5:42:bd:fc:b5:e9:49:f8:0a:73:1f:2a: 60:05:a6:1a:a3:f7:d3:2d:d1:a5:81:4b:0d:47:97: 36:9f:e0:da:98:a9:4c:56:84:b1:24:5b:92:76:32: b6:b9:24:10:59:81:fb:cb:54:7a:62:7c:99:3c:fa: 26:be:12:44:a8:f3:9c:d7:82:c5:ea:94:00:02:fd: eb:6c:d5:47:5c:fa:18:d5:ad:52:a2:58:55:65:26: f2:a0:3b:a7:2b:be:ad:0b:ca:10:4c:0d:94:d8:42: f5:20:6a:63:69:7e:4c:9e:ff:cf:8e:50:3a:41:11: 3c:00:65:0b:47:28:53:b1:71:cc:7f:29:71:7f:bc: 13:67:ea:5c:39:f5:e0:0f:b2:fe:1a:1d:fc:50:85: 78:35:06:19:16:d0:e3:c6:82:97:79:b5:ca:58:1c: 17:40:77:38:93:c2:7e:f5:bd:81:8f:2e:b6:56:b7: d2:fb:9d:e3:39:12:cd:11:01:b0:95:4a:0a:2a:7e: 52:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DF:44:92:AF:47:6B:54:7A:B1:62:18:E7:35:B3:32:7B:CD:C4:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0647f52-153b-30d2-a94e-3d0853e81cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:fc:14:dc:6a:4d:75:b5:d8:5b:b3:51:d0:74:4a:a2:65:5e: 7b:4b:e9:be:08:04:47:e7:6a:b8:15:5c:c7:ad:5b:89:6b:f2: 09:e6:ac:d7:2b:c9:96:ed:63:a1:ba:72:1e:a9:6f:05:08:60: 30:29:cb:c6:be:c7:d3:1b:c5:0a:dd:62:34:2c:46:21:be:6e: 93:ae:21:cc:bb:69:7d:66:b4:5e:eb:fc:b8:17:b7:bc:df:b4: 53:ca:34:71:f0:b0:0e:f3:14:e8:fc:fe:ac:ce:d0:53:ef:82: 15:9c:94:9e:06:a0:23:d2:72:3f:1d:22:4f:c5:f4:4a:a5:8e: 30:15:c5:4f:2c:69:79:30:95:56:75:86:30:dd:cf:ce:71:27: 8c:a8:69:74:e1:10:ea:8b:c4:53:cf:d8:8b:ea:ea:15:94:e8: 8b:4a:c2:0f:fc:33:32:27:4c:8a:4d:c8:56:2f:98:7d:82:b6: 29:de:8a:5c:bf:c0:20:c9:a3:b0:a0:d2:e5:c5:3b:25:93:51: f2:1e:55:16:dc:99:61:0f:92:a8:89:d0:87:c0:22:5a:85:96: 34:18:69:0e:a9:54:a9:76:50:24:c1:32:1a:72:3d:53:96:74: 85:9e:a9:77:b2:16:3b:44:91:1f:20:7b:79:ab:73:0b:2c:55: f7:82:e4:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZl3ZbCZqXqUBcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OWM3ZjMwZmUtZmIyZi00Y2IxLTljMTktOGRhY2Q5NzUwM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MLaDkwmM6bV4QSwbqaAkQA+RzkplPR83gWu Q2iMcGoVzPhRI9tRu3cRagDA8Oq+Wo6v6mSyux1bwfsHwujFQr38telJ+ApzHypg BaYao/fTLdGlgUsNR5c2n+DamKlMVoSxJFuSdjK2uSQQWYH7y1R6YnyZPPomvhJE qPOc14LF6pQAAv3rbNVHXPoY1a1SolhVZSbyoDunK76tC8oQTA2U2EL1IGpjaX5M nv/PjlA6QRE8AGULRyhTsXHMfylxf7wTZ+pcOfXgD7L+Gh38UIV4NQYZFtDjxoKX ebXKWBwXQHc4k8J+9b2Bjy62VrfS+53jORLNEQGwlUoKKn5SpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTfRJKvR2tUerFiGOc1szJ7zcQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzA2NDdmNTItMTUzYi0z MGQyLWE5NGUtM2QwODUzZTgxY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv8FNxqTXW12FuzUdB0SqJlXntL6b4IBEfnargVXMetW4lr8gnmrNcr yZbtY6G6ch6pbwUIYDApy8a+x9MbxQrdYjQsRiG+bpOuIcy7aX1mtF7r/LgXt7zf tFPKNHHwsA7zFOj8/qzO0FPvghWclJ4GoCPScj8dIk/F9EqljjAVxU8saXkwlVZ1 hjDdz85xJ4yoaXThEOqLxFPP2Ivq6hWU6ItKwg/8MzInTIpNyFYvmH2Ctineily/ wCDJo7Cg0uXFOyWTUfIeVRbcmWEPkqiJ0IfAIlqFljQYaQ6pVKl2UCTBMhpyPVOW dIWeqXeyFjtEkR8ge3mrcwssVfeC5CI= -----END CERTIFICATE-----Generated at Thu Oct 16 01:30:50 2025 by rpki-client