$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c069b44c-e761-30c0-9c6a-d9598e9e32aa.roa File: c069b44c-e761-30c0-9c6a-d9598e9e32aa.roa (raw, json) Hash identifier: nkO0Ytc1dQLRAGeDCxSRWsRHxXGptVWVfowgZH7YzV4= Subject key identifier: 92:27:63:5C:65:DF:D1:DA:4F:3A:D5:C4:D2:7F:05:C2:F3:F4:50:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B7427534C0655C14E7315C820 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c069b44c-e761-30c0-9c6a-d9598e9e32aa.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 22773 IP address blocks: 70.174.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:53:4c:06:55:c1:4e:73:15:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=a63e2b8c-f64a-4abd-b667-80fdb0143fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:20:09:94:d7:30:6e:80:03:3a:46:da:61: 73:34:18:7e:7d:2e:17:06:25:70:80:b8:65:db:9a: 57:93:06:54:7c:94:00:bd:b8:c8:d9:a6:f1:85:75: ca:99:89:95:8d:0c:b2:27:2d:2e:c7:58:e9:bc:9a: 70:69:9d:e4:4f:cc:a1:97:f6:75:29:6a:73:8f:ab: 2b:91:26:6c:d1:67:32:1e:ab:78:17:00:2f:55:0d: 24:d0:25:a7:61:54:e1:89:87:f0:0a:c2:7c:4e:60: 43:d2:95:c4:0c:32:74:41:37:04:47:76:48:b6:54: ca:15:5f:a9:2e:23:df:b4:0e:1c:c2:0c:45:b8:2a: 1f:92:fc:15:df:22:4c:e3:27:b9:95:55:6d:35:fb: 4c:79:85:1b:51:25:3f:e4:4f:f2:5c:9b:e7:ef:08: 1c:88:f9:09:3a:5a:6f:da:31:a5:9e:80:ba:8c:e7: 3f:71:5c:b4:f1:04:8c:f1:9d:91:b4:ae:b9:51:f8: 40:fa:8b:c2:8f:ed:c0:18:3e:20:82:13:84:3a:8c: a2:00:f6:1c:54:8a:5d:a9:7a:34:a1:4b:7d:bc:41: e2:64:cd:ed:24:1a:27:60:8c:ce:42:5b:67:fd:6f: 6f:67:3c:66:e7:f2:7d:5d:a7:73:3a:7b:17:ea:50: 1b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:27:63:5C:65:DF:D1:DA:4F:3A:D5:C4:D2:7F:05:C2:F3:F4:50:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c069b44c-e761-30c0-9c6a-d9598e9e32aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:70:94:72:c4:42:0d:85:db:d9:ea:9c:cc:cc:00:5c:76:fc: 2f:ca:7b:60:1b:04:f9:a6:a8:88:00:98:1e:f8:e9:62:18:25: 9e:3f:b7:f4:de:7d:e6:79:e3:23:db:50:3b:e6:41:63:b7:ab: 5e:88:95:19:ef:2c:09:38:25:4d:5d:86:70:f0:21:1a:6a:78: 94:c9:b6:8f:ae:9f:f5:0c:94:dc:47:e7:97:60:85:29:46:56: d6:b6:c1:38:14:37:eb:bd:a4:5c:ef:4a:30:56:58:e8:2a:ca: 76:21:7b:88:19:16:3e:78:13:c5:d2:cb:eb:0c:dd:37:ed:0a: fe:57:13:a5:b5:60:ca:f6:43:92:5e:01:ec:4c:b4:ce:e3:e9: 9b:a6:67:60:39:06:4e:3d:40:f6:76:20:36:9f:d4:10:e6:68: 7b:93:57:d8:6f:76:0a:81:22:80:82:1d:9a:41:d8:49:f0:3e: be:a6:d9:2f:47:bc:89:c2:37:df:27:e3:e1:26:82:c9:e0:e5: a0:8f:1d:65:a6:b1:be:e6:fc:d2:7f:46:e6:d5:b2:d8:2d:23: 5c:20:45:9f:5d:9f:88:f6:eb:e4:fc:94:ff:da:33:11:eb:6f: 8a:cb:f7:d1:89:b0:d8:92:e6:3e:83:82:ca:b0:b8:64:7a:ae: 14:4d:5d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J1NMBlXBTnMVyCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk YTYzZTJiOGMtZjY0YS00YWJkLWI2NjctODBmZGIwMTQzZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9cgCZTXMG6AAzpG2mFzNBh+fS4XBiVwgLhl 25pXkwZUfJQAvbjI2abxhXXKmYmVjQyyJy0ux1jpvJpwaZ3kT8yhl/Z1KWpzj6sr kSZs0WcyHqt4FwAvVQ0k0CWnYVThiYfwCsJ8TmBD0pXEDDJ0QTcER3ZItlTKFV+p LiPftA4cwgxFuCofkvwV3yJM4ye5lVVtNftMeYUbUSU/5E/yXJvn7wgciPkJOlpv 2jGlnoC6jOc/cVy08QSM8Z2RtK65UfhA+ovCj+3AGD4gghOEOoyiAPYcVIpdqXo0 oUt9vEHiZM3tJBonYIzOQltn/W9vZzxm5/J9XadzOnsX6lAbiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJInY1xl39HaTzrVxNJ/BcLz9FDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzA2OWI0NGMtZTc2MS0z MGMwLTljNmEtZDk1OThlOWUzMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlwlHLEQg2F29nqnMzMAFx2/C/Ke2AbBPmmqIgAmB746WIYJZ4/t/Te feZ54yPbUDvmQWO3q16IlRnvLAk4JU1dhnDwIRpqeJTJto+un/UMlNxH55dghSlG Vta2wTgUN+u9pFzvSjBWWOgqynYhe4gZFj54E8XSy+sM3TftCv5XE6W1YMr2Q5Je AexMtM7j6ZumZ2A5Bk49QPZ2IDaf1BDmaHuTV9hvdgqBIoCCHZpB2EnwPr6m2S9H vInCN98n4+Emgsng5aCPHWWmsb7m/NJ/RubVstgtI1wgRZ9dn4j26+T8lP/aMxHr b4rL99GJsNiS5j6DgsqwuGR6rhRNXSE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:23 2025 by rpki-client