$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3a44a7d-eb8f-3161-97d4-279ef7a8e2af.roa File: c3a44a7d-eb8f-3161-97d4-279ef7a8e2af.roa (raw, json) Hash identifier: Y/Zmf0wbp/Ub+q4JisDULFvtWeWZNN3KpkDcGpizapM= Subject key identifier: E2:30:FF:18:1D:CC:46:89:41:99:44:F6:65:D0:4F:55:C5:24:22:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C6978013F2E3398349F90 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3a44a7d-eb8f-3161-97d4-279ef7a8e2af.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.171.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:69:78:01:3f:2e:33:98:34:9f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=da8ab998-ac92-4d50-a8ed-e35c2073cc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:1c:17:9d:b4:54:d0:22:65:81:72:1b:8b: 66:fb:33:70:c6:a8:e4:70:1b:30:44:42:69:21:93: 31:2b:fb:30:24:a4:47:3b:98:57:f4:cb:ca:8f:63: 62:7b:d1:7a:1c:50:ff:78:33:ca:54:ca:60:c3:e0: 5e:1f:a0:3a:3b:c9:61:24:21:17:25:72:89:03:0e: 60:ff:17:e3:46:f0:2f:99:24:79:af:cf:eb:85:a4: 92:6a:9c:35:6a:28:ea:6c:d8:62:ee:46:58:cc:d8: 72:ae:ab:7e:b7:05:e7:c7:7d:ae:27:8b:d1:cd:81: e5:ea:d5:9c:1a:00:c7:53:e5:ae:f3:4d:42:ed:42: 6f:e4:cd:c6:42:8d:23:bb:b4:b6:81:d4:76:4d:bf: c6:ad:b3:1c:92:68:5f:1b:7c:95:ef:bf:72:82:2d: 73:63:19:35:02:35:12:73:44:30:fc:83:09:4f:15: 07:b4:88:a1:36:dd:ee:d4:07:4f:cb:88:fa:bc:45: 70:7b:54:3b:f6:60:9f:88:ce:4d:57:f3:ab:9d:88: 65:cc:7f:f2:7f:06:6b:7b:79:9b:d1:20:1b:c6:a9: dd:e4:b4:e0:d6:6b:e7:e0:eb:1c:79:d0:da:8c:dd: 35:d5:4a:f5:9b:63:cb:8f:f3:ba:03:ba:62:bc:5d: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:30:FF:18:1D:CC:46:89:41:99:44:F6:65:D0:4F:55:C5:24:22:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3a44a7d-eb8f-3161-97d4-279ef7a8e2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c5:23:5e:3d:77:b5:1c:c8:57:82:41:f9:9c:ac:bc:25:2b: d8:c4:41:db:c4:cf:6e:9a:5c:a5:2f:78:ce:e8:69:09:f1:6e: 69:fa:95:d5:4b:01:bd:af:43:e1:d7:13:f0:6e:e2:7a:72:00: 1f:a2:b6:45:91:1c:87:0e:53:05:6b:97:f8:6e:e5:a0:d2:0f: 03:b1:80:43:6c:e6:54:45:89:2f:3f:f2:97:04:be:2a:28:fe: 0b:2e:69:3b:95:1a:46:d3:3c:52:a2:3e:82:c8:2a:2c:64:22: a1:f3:91:cd:0f:85:1d:20:ff:14:87:c5:d1:96:91:71:0a:b0: 7b:76:3b:97:1a:45:3d:4a:fb:e8:14:3f:e0:3b:a0:fe:02:0b: b6:e9:e7:f7:ed:ee:f2:11:4e:df:09:7b:19:8c:30:e4:98:a8: e2:11:45:98:32:8c:c3:ab:98:58:63:d4:74:65:09:41:20:d8: 45:32:c2:3f:f8:5e:bd:62:db:ec:d2:3b:af:15:1b:2d:f5:2b: 24:31:c2:ad:04:6a:56:01:a0:ec:57:1d:30:25:81:12:a3:89: 61:13:fe:f5:fc:89:82:fa:dd:6b:83:d9:73:99:11:19:f0:e9: e6:39:42:15:02:16:d4:89:47:00:65:8b:0d:df:b1:05:7a:52: 5a:9b:9c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGl4AT8uM5g0n5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZGE4YWI5OTgtYWM5Mi00ZDUwLWE4ZWQtZTM1YzIwNzNjYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdccF520VNAiZYFyG4tm+zNwxqjkcBswREJp IZMxK/swJKRHO5hX9MvKj2Nie9F6HFD/eDPKVMpgw+BeH6A6O8lhJCEXJXKJAw5g /xfjRvAvmSR5r8/rhaSSapw1aijqbNhi7kZYzNhyrqt+twXnx32uJ4vRzYHl6tWc GgDHU+Wu801C7UJv5M3GQo0ju7S2gdR2Tb/GrbMckmhfG3yV779ygi1zYxk1AjUS c0Qw/IMJTxUHtIihNt3u1AdPy4j6vEVwe1Q79mCfiM5NV/OrnYhlzH/yfwZre3mb 0SAbxqnd5LTg1mvn4OscedDajN011Ur1m2PLj/O6A7pivF3k8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIw/xgdzEaJQZlE9mXQT1XFJCJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzNhNDRhN2QtZWI4Zi0z MTYxLTk3ZDQtMjc5ZWY3YThlMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqvlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7FI149d7UcyFeCQfmcrLwlK9jEQdvEz26aXKUveM7oaQnxbmn6ldVL Ab2vQ+HXE/Bu4npyAB+itkWRHIcOUwVrl/hu5aDSDwOxgENs5lRFiS8/8pcEvioo /gsuaTuVGkbTPFKiPoLIKixkIqHzkc0PhR0g/xSHxdGWkXEKsHt2O5caRT1K++gU P+A7oP4CC7bp5/ft7vIRTt8JexmMMOSYqOIRRZgyjMOrmFhj1HRlCUEg2EUywj/4 Xr1i2+zSO68VGy31KyQxwq0EalYBoOxXHTAlgRKjiWET/vX8iYL63WuD2XOZERnw 6eY5QhUCFtSJRwBliw3fsQV6UlqbnME= -----END CERTIFICATE-----Generated at Wed Oct 15 23:27:09 2025 by rpki-client