$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c24c7930-35ac-30fc-832d-3db5078dffab.roa File: c24c7930-35ac-30fc-832d-3db5078dffab.roa (raw, json) Hash identifier: U4IYOvM4/xgASD/lZAnTMhFhtbwJ0vJW1GzrFsv22m0= Subject key identifier: BC:33:71:DA:98:B4:71:8C:AE:AF:2C:30:F7:48:D6:A6:C5:CF:62:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F018C82526706D00BA2C500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c24c7930-35ac-30fc-832d-3db5078dffab.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.180.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:8c:82:52:67:06:d0:0b:a2:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=532cbd79-69ae-4456-8232-e57278beb2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:2f:e6:c0:54:88:f6:d7:17:ac:1a:2d:5c: b2:08:fd:ef:4c:b5:e9:8e:99:b2:6f:71:96:10:3d: 63:a0:30:5b:8d:b0:04:13:e4:d1:7f:6c:f9:b4:3b: c4:39:a5:92:76:ab:f8:78:93:85:02:85:b8:9e:ad: 44:a8:e0:97:55:23:73:21:e8:1a:1d:3a:81:e2:6a: 22:90:7d:20:41:5c:f2:6f:13:4c:59:af:57:50:94: 78:e8:65:8a:62:69:90:c4:7a:77:fd:7e:ae:fe:88: e4:90:16:9a:d3:d9:d1:79:0e:bb:7d:3a:ac:c5:10: a6:9f:ec:71:08:39:69:14:6d:a0:10:01:04:7b:9a: a4:48:5f:26:e0:65:22:03:5a:3f:9e:f3:e7:63:55: 3d:6c:26:5f:7c:fc:8a:aa:ef:79:be:d6:a6:d8:38: de:cf:40:26:42:ec:f8:e5:45:e7:6b:74:d2:a2:1d: 7c:1f:a3:1a:09:7d:53:2d:f7:b1:10:50:ab:ea:5d: 2f:09:84:96:b0:83:75:a7:a7:77:ef:6c:88:fd:c9: 5d:9e:e6:bf:bf:f3:8e:52:18:21:54:db:e2:92:a7: da:9b:fd:ab:0d:ea:d4:6f:ae:1c:98:72:d8:1e:d7: a2:c7:e4:8d:e8:5f:aa:7e:7e:46:30:ce:d0:44:ff: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:33:71:DA:98:B4:71:8C:AE:AF:2C:30:F7:48:D6:A6:C5:CF:62:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c24c7930-35ac-30fc-832d-3db5078dffab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f5:f3:83:c7:e5:f2:96:dd:e1:72:86:a5:3f:ed:86:c0:1a: 3b:ed:7d:c3:9c:26:a6:dd:d3:ad:7d:d0:dc:3c:ec:18:00:ec: 30:7f:75:2a:f3:3d:41:9f:7f:44:39:b6:15:f6:5e:3d:3f:cb: f3:33:a5:4f:83:cf:d6:03:ce:6b:01:6e:57:c5:66:67:ea:29: 14:94:63:1f:68:96:09:26:9c:b0:41:73:57:af:3c:1e:f4:a0: 5d:c4:b2:e9:87:48:02:a4:04:e6:59:d8:72:9b:70:c6:d2:08: 32:f3:be:c1:99:85:b5:c7:6e:60:63:1b:4a:62:97:cc:cb:58: 17:1f:29:f6:c7:bc:a4:d4:27:d5:36:26:5e:3b:c7:ba:59:62: b3:68:fe:80:7b:64:09:b1:d4:e8:d7:7d:9d:ba:f2:e0:12:14: 61:ed:81:63:ff:fe:20:55:8f:cb:2f:e5:50:f8:8d:c4:99:6f: c9:82:e8:45:1f:02:1a:65:09:26:f6:29:ff:a6:de:72:eb:77: 9a:78:db:a2:73:cf:e1:b0:d0:ea:41:b2:bc:76:d6:96:90:5d: 5e:3c:28:fd:c3:6c:6e:a0:78:33:9a:a3:c9:67:07:3f:de:c7: 6b:b7:3c:98:41:e8:14:9f:53:31:29:a8:07:49:70:84:d7:09: f5:00:e4:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAYyCUmcG0AuixQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NTMyY2JkNzktNjlhZS00NDU2LTgyMzItZTU3Mjc4YmViMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi60v5sBUiPbXF6waLVyyCP3vTLXpjpmyb3GW ED1joDBbjbAEE+TRf2z5tDvEOaWSdqv4eJOFAoW4nq1EqOCXVSNzIegaHTqB4moi kH0gQVzybxNMWa9XUJR46GWKYmmQxHp3/X6u/ojkkBaa09nReQ67fTqsxRCmn+xx CDlpFG2gEAEEe5qkSF8m4GUiA1o/nvPnY1U9bCZffPyKqu95vtam2Djez0AmQuz4 5UXna3TSoh18H6MaCX1TLfexEFCr6l0vCYSWsIN1p6d372yI/cldnua/v/OOUhgh VNvikqfam/2rDerUb64cmHLYHteix+SN6F+qfn5GMM7QRP9L7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwzcdqYtHGMrq8sMPdI1qbFz2KdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzI0Yzc5MzAtMzVhYy0z MGZjLTgzMmQtM2RiNTA3OGRmZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH184PH5fKW3eFyhqU/7YbAGjvtfcOcJqbd06190Nw87BgA7DB/dSrz PUGff0Q5thX2Xj0/y/MzpU+Dz9YDzmsBblfFZmfqKRSUYx9olgkmnLBBc1evPB70 oF3EsumHSAKkBOZZ2HKbcMbSCDLzvsGZhbXHbmBjG0pil8zLWBcfKfbHvKTUJ9U2 Jl47x7pZYrNo/oB7ZAmx1OjXfZ268uASFGHtgWP//iBVj8sv5VD4jcSZb8mC6EUf AhplCSb2Kf+m3nLrd5p426Jzz+Gw0OpBsrx21paQXV48KP3DbG6geDOao8lnBz/e x2u3PJhB6BSfUzEpqAdJcITXCfUA5Eg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:27:16 2025 by rpki-client