$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3033cdb-0b35-3cde-9f56-18db5a766b57.roa File: c3033cdb-0b35-3cde-9f56-18db5a766b57.roa (raw, json) Hash identifier: IzA/vPV3Lc/p5wnUcDMm6c2eFlgTRMKpNDrQUgFViCs= Subject key identifier: 5E:EA:F8:98:C8:E3:AD:5F:C2:8F:E9:A2:CC:8D:78:57:6F:E5:F7:AA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671A5A8270BC40AAA73F40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3033cdb-0b35-3cde-9f56-18db5a766b57.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1a:5a:82:70:bc:40:aa:a7:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=67a37bbd-22c4-4bca-9573-2d75b84e6854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:a7:5e:9d:9d:a1:f1:70:82:69:09:40:be: e2:4b:be:93:77:f8:da:ca:c3:a0:6e:9f:aa:4f:60: c6:ec:8a:bf:2f:bd:a8:e2:fc:88:f9:b2:cf:fc:45: ef:85:c6:8d:9f:1b:17:5d:37:a0:67:49:b1:73:eb: 4a:ed:1d:39:d6:ce:af:8e:4b:a2:28:67:2b:b1:79: 82:8f:88:c0:2e:3e:4c:28:de:17:a2:63:00:71:73: e9:5d:a2:14:6e:a7:cb:f6:15:e1:f1:84:55:b1:04: f7:28:59:ca:2b:d5:c2:ef:27:e9:8b:b9:6d:37:9c: c4:3b:c8:4c:70:31:8b:ef:f6:38:6b:a1:e5:b5:9c: 9f:29:80:75:4d:a1:24:fe:31:13:80:4d:ef:4b:12: df:6e:f7:ed:1c:cb:4d:27:13:60:f4:42:b9:6e:b5: 63:5b:63:57:7e:c0:cf:ab:2a:92:2a:24:8e:0f:58: 59:c5:6b:56:9c:fe:45:2c:c5:87:2b:c6:22:0d:fd: 64:96:ea:fc:ca:08:8d:15:f1:8a:96:ac:03:cc:04: 23:cb:52:da:b1:e4:00:d3:15:95:18:93:f6:74:0e: 0b:15:a6:38:16:35:76:ad:40:4b:98:8c:da:bf:4b: ee:7c:e1:15:0b:65:a9:80:89:e8:b1:96:5e:da:c9: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EA:F8:98:C8:E3:AD:5F:C2:8F:E9:A2:CC:8D:78:57:6F:E5:F7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3033cdb-0b35-3cde-9f56-18db5a766b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c7:3f:d7:d9:ae:e4:1b:19:11:d1:72:b6:65:c8:d6:18:92: 53:a3:78:0d:71:ba:e7:2f:12:4b:b9:04:c2:13:64:9d:64:78: f5:40:7d:b2:ed:61:32:77:48:9c:5b:e1:00:a4:62:bc:8a:ac: 5e:1a:8c:3b:9a:0c:1d:81:c0:e0:0c:22:0d:de:35:a8:47:84: 30:04:cb:63:20:45:a7:71:31:7e:e0:d6:48:14:ec:5f:35:6f: e4:c7:83:b1:26:24:6f:3e:09:b8:3a:22:30:1f:c4:28:3e:c7: 5b:5e:55:63:e9:8f:b8:d0:40:46:47:40:69:a7:9f:c2:ab:7e: 3f:1c:7e:a5:56:ab:df:eb:af:c6:1b:93:5c:a2:73:bd:01:a8: b8:91:e6:4e:6a:b0:e3:9a:b5:de:9b:e0:e9:08:43:2e:c4:7e: 37:d0:35:7c:ac:28:25:63:ae:a4:85:ca:22:f8:6b:04:62:4f: 62:56:8d:eb:af:9d:8c:e4:78:75:b0:85:bf:b3:0e:9a:ca:b1: a1:a3:45:43:4a:9f:cf:ae:cb:0e:cf:ab:a9:16:6b:6e:2d:b9: e4:1d:a5:81:fa:eb:b5:fc:10:86:cd:da:fb:f1:19:ed:79:15: 41:cd:e3:34:3e:23:02:61:b8:9d:6f:2d:76:93:76:6d:4f:ae: f7:6e:f5:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxpagnC8QKqnP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NjdhMzdiYmQtMjJjNC00YmNhLTk1NzMtMmQ3NWI4NGU2ODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob2nXp2dofFwgmkJQL7iS76Td/jaysOgbp+q T2DG7Iq/L72o4vyI+bLP/EXvhcaNnxsXXTegZ0mxc+tK7R051s6vjkuiKGcrsXmC j4jALj5MKN4XomMAcXPpXaIUbqfL9hXh8YRVsQT3KFnKK9XC7yfpi7ltN5zEO8hM cDGL7/Y4a6HltZyfKYB1TaEk/jETgE3vSxLfbvftHMtNJxNg9EK5brVjW2NXfsDP qyqSKiSOD1hZxWtWnP5FLMWHK8YiDf1klur8ygiNFfGKlqwDzAQjy1LaseQA0xWV GJP2dA4LFaY4FjV2rUBLmIzav0vufOEVC2WpgInosZZe2smGCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7q+JjI461fwo/posyNeFdv5feqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzMwMzNjZGItMGIzNS0z Y2RlLTlmNTYtMThkYjVhNzY2YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7HP9fZruQbGRHRcrZlyNYYklOjeA1xuucvEku5BMITZJ1kePVAfbLt YTJ3SJxb4QCkYryKrF4ajDuaDB2BwOAMIg3eNahHhDAEy2MgRadxMX7g1kgU7F81 b+THg7EmJG8+Cbg6IjAfxCg+x1teVWPpj7jQQEZHQGmnn8Krfj8cfqVWq9/rr8Yb k1yic70BqLiR5k5qsOOatd6b4OkIQy7EfjfQNXysKCVjrqSFyiL4awRiT2JWjeuv nYzkeHWwhb+zDprKsaGjRUNKn8+uyw7Pq6kWa24tueQdpYH667X8EIbN2vvxGe15 FUHN4zQ+IwJhuJ1vLXaTdm1Prvdu9ck= -----END CERTIFICATE-----Generated at Wed Oct 15 23:33:26 2025 by rpki-client