$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1c7b38d-26d3-382b-9d16-66db881e4ce4.roa File: c1c7b38d-26d3-382b-9d16-66db881e4ce4.roa (raw, json) Hash identifier: Tv29m8ZFKYg3TzjiPP8EV1cD0Y6nAWhDVNjXuV0Hvjg= Subject key identifier: 3C:9E:70:C6:8A:A2:07:2B:51:84:8F:CB:22:CD:F1:18:18:CE:D1:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23EA8ABF92F8E3251E200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1c7b38d-26d3-382b-9d16-66db881e4ce4.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.172.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:3e:a8:ab:f9:2f:8e:32:51:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c9708433-e579-4f94-99ae-fbeb1b3b8526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:04:a8:98:25:14:fd:aa:8f:12:53:57:24: 05:94:03:53:af:04:50:ab:ef:13:c1:a3:5e:93:dd: 69:cd:2c:cb:9d:de:a6:cb:b3:24:5c:94:62:25:9e: 89:86:11:25:44:8a:84:38:24:24:03:61:72:a0:b7: 67:de:d9:3d:1d:1d:c7:ca:21:d5:ea:8b:8a:af:30: d1:51:66:b6:c5:b5:69:da:48:12:e6:a0:df:8d:99: a8:ba:86:e4:37:99:40:29:0b:d0:89:9c:94:bf:2b: 18:0c:39:5f:6a:9c:4c:90:db:ce:a4:c1:98:0c:82: 03:1d:9f:1f:49:69:82:0f:36:ef:c4:5f:92:20:3d: ef:50:99:b9:b8:1a:b9:73:eb:d8:6b:56:62:cc:e4: c0:e5:8c:0b:62:37:ab:ba:a4:61:2d:07:59:a9:99: 39:1b:51:5f:04:73:bd:82:74:e6:e6:91:ca:d3:27: b4:f4:90:1f:ee:35:c4:fc:66:e1:48:ac:7e:32:03: c8:e2:76:35:d5:a5:d8:81:58:c4:d6:29:1f:96:06: af:1a:49:4d:1c:b8:cd:20:f5:07:ac:e4:cb:2b:82: 54:6e:bd:03:67:a0:93:ce:4d:29:d8:65:8e:53:35: 86:f6:a0:6a:b1:7a:44:2c:60:3f:1d:d2:de:91:9a: 10:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9E:70:C6:8A:A2:07:2B:51:84:8F:CB:22:CD:F1:18:18:CE:D1:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1c7b38d-26d3-382b-9d16-66db881e4ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:50:de:24:8a:75:c8:37:d9:9f:ab:ea:3f:06:41:b2:22:e4: 28:ad:a8:d3:b7:6e:70:e3:e5:12:82:cb:c8:32:61:5e:19:5d: 5f:bc:96:a7:2b:60:60:d7:9d:a8:bd:04:55:2b:9d:fb:3f:05: 22:7e:32:84:e4:81:d1:24:19:67:4e:d1:5e:28:e9:5c:0b:00: 2f:ec:92:19:54:61:0d:67:2b:c1:dc:c8:bb:e1:62:cb:55:3d: c1:16:f0:88:ef:d9:28:e9:b2:04:84:cf:96:78:a5:40:26:df: 86:76:d1:ee:2d:09:38:dd:b9:25:23:3a:1b:3d:b5:8c:f3:9c: 5b:f1:2e:eb:23:36:e9:df:4e:37:6f:5d:53:fb:26:4b:01:7c: bb:68:27:71:2e:bb:75:6f:ec:b8:47:ba:9b:23:e5:8b:f9:28: 47:f9:ff:1f:e2:47:05:59:82:6a:b1:6d:d4:ec:c5:50:f0:de: 03:b9:a4:5c:5b:68:71:55:de:45:35:12:ee:5d:c9:c4:6f:41: 31:15:bf:cc:2f:61:78:69:58:1e:ed:31:48:98:0d:09:7b:8f: e6:fc:cb:ad:56:0b:51:7b:c4:1c:f5:09:f0:96:2d:08:03:34: 0f:1f:dd:01:58:b2:52:0a:7e:44:4b:c2:36:5a:09:63:5d:7a: 4e:b8:88:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28j6oq/kvjjJR4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Yzk3MDg0MzMtZTU3OS00Zjk0LTk5YWUtZmJlYjFiM2I4NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlEEqJglFP2qjxJTVyQFlANTrwRQq+8TwaNe k91pzSzLnd6my7MkXJRiJZ6JhhElRIqEOCQkA2FyoLdn3tk9HR3HyiHV6ouKrzDR UWa2xbVp2kgS5qDfjZmouobkN5lAKQvQiZyUvysYDDlfapxMkNvOpMGYDIIDHZ8f SWmCDzbvxF+SID3vUJm5uBq5c+vYa1ZizOTA5YwLYjeruqRhLQdZqZk5G1FfBHO9 gnTm5pHK0ye09JAf7jXE/GbhSKx+MgPI4nY11aXYgVjE1ikflgavGklNHLjNIPUH rOTLK4JUbr0DZ6CTzk0p2GWOUzWG9qBqsXpELGA/HdLekZoQewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyecMaKogcrUYSPyyLN8RgYztHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzFjN2IzOGQtMjZkMy0z ODJiLTlkMTYtNjZkYjg4MWU0Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhQ3iSKdcg32Z+r6j8GQbIi5CitqNO3bnDj5RKCy8gyYV4ZXV+8lqcr YGDXnai9BFUrnfs/BSJ+MoTkgdEkGWdO0V4o6VwLAC/skhlUYQ1nK8HcyLvhYstV PcEW8Ijv2SjpsgSEz5Z4pUAm34Z20e4tCTjduSUjOhs9tYzznFvxLusjNunfTjdv XVP7JksBfLtoJ3Euu3Vv7LhHupsj5Yv5KEf5/x/iRwVZgmqxbdTsxVDw3gO5pFxb aHFV3kU1Eu5dycRvQTEVv8wvYXhpWB7tMUiYDQl7j+b8y61WC1F7xBz1CfCWLQgD NA8f3QFYslIKfkRLwjZaCWNdek64iDQ= -----END CERTIFICATE-----Generated at Thu Oct 16 01:54:21 2025 by rpki-client