$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9938efe-f79b-3a6a-90b7-3d635911fa26.roa File: c9938efe-f79b-3a6a-90b7-3d635911fa26.roa (raw, json) Hash identifier: MAGrdtCWnEtDEd7jzzYa940b5F9VdYUAewc1+V7o8dU= Subject key identifier: E2:A2:A9:98:96:65:5C:94:FF:98:B1:1F:E6:ED:05:6A:A0:C4:9B:BF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F247E66846C87FBC8EF900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9938efe-f79b-3a6a-90b7-3d635911fa26.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.188.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:47:e6:68:46:c8:7f:bc:8e:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ba34ed81-3cdc-4fb2-b7e4-808d259e798c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:2c:40:82:2c:3d:da:6e:93:fd:cc:37:1b: 6e:fb:d4:98:94:26:7e:23:83:01:b6:ab:b0:b8:34: 52:51:b5:6b:6c:b6:60:0d:2a:ad:0d:41:96:47:f2: 71:0d:62:5d:7d:e6:63:e6:a7:a6:25:2e:2c:db:6e: 9c:9a:71:9c:72:c1:98:8f:36:c9:a5:37:57:3e:c0: 41:c4:e2:2f:d3:02:a1:05:90:7c:ec:81:28:21:40: 98:ba:02:22:33:1d:70:6f:76:d9:30:33:a3:b5:2d: dc:7a:f8:8a:4b:92:f6:83:d4:45:f5:e3:7d:9c:cf: 0c:72:2f:59:16:21:41:c4:b3:f9:8c:75:3a:18:54: 9e:19:2c:d9:1c:e8:97:83:a1:14:a5:ce:81:ea:88: 93:cb:93:3a:1f:1f:91:7c:14:c5:f2:e2:6a:4f:27: 58:c0:cd:06:3d:36:dc:40:e3:e4:70:11:5a:53:37: bf:5d:c2:6a:02:54:67:32:5d:4f:c9:4d:1c:fa:20: 31:45:be:7a:60:13:e9:51:96:56:67:22:d3:a7:90: dc:f5:b7:12:42:da:6d:b1:24:d7:a1:37:79:96:21: 44:f9:fc:ea:e9:05:52:ad:8d:5f:03:af:7e:c1:66: b1:cc:7d:2a:62:41:26:69:49:69:b8:24:28:11:52: ac:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A2:A9:98:96:65:5C:94:FF:98:B1:1F:E6:ED:05:6A:A0:C4:9B:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9938efe-f79b-3a6a-90b7-3d635911fa26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:3b:5c:6d:be:27:17:48:d0:de:1a:24:f6:99:ec:53:1a:c3: 5e:a4:aa:c8:6a:e9:40:25:2b:b8:83:1b:c7:8d:21:8f:f7:83: ad:c4:63:0c:0b:2b:a7:f1:26:72:2c:75:df:07:ae:65:57:7a: 6f:aa:13:da:50:cc:75:4f:5c:73:e1:a0:36:e0:43:81:65:b3: 97:42:26:f8:7e:68:59:52:8e:b9:d2:0f:b2:04:1f:30:88:7f: 9a:62:cf:68:37:f0:4c:d4:05:52:00:e3:ed:6d:ee:a2:63:e0: 1d:56:05:6d:a5:77:8b:2c:8c:32:86:9c:08:3c:b1:00:64:fd: f4:fd:35:5f:03:e4:f4:d6:c8:77:45:cd:e9:ff:b1:ae:fa:a1: f1:e8:19:68:07:4d:0d:af:72:dc:60:91:6b:e7:87:af:5f:2a: c3:0b:2e:4c:b3:18:0e:ae:27:66:5b:d1:4a:d2:2b:37:38:8e: 5e:7d:a2:9d:a4:c6:d1:a5:7e:10:74:e7:20:1e:22:05:28:6e: 46:c9:ca:05:65:71:9d:a1:fa:11:a4:2e:39:ce:22:e3:c5:5a: a5:ba:05:c4:61:11:65:7f:a6:02:c5:40:32:b4:cd:b9:5a:49: 1b:73:d5:73:37:d1:3f:3b:11:60:72:f6:0d:79:63:13:08:96: 5c:19:bc:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kfmaEbIf7yO+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmEzNGVkODEtM2NkYy00ZmIyLWI3ZTQtODA4ZDI1OWU3OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOEsQIIsPdpuk/3MNxtu+9SYlCZ+I4MBtquw uDRSUbVrbLZgDSqtDUGWR/JxDWJdfeZj5qemJS4s226cmnGccsGYjzbJpTdXPsBB xOIv0wKhBZB87IEoIUCYugIiMx1wb3bZMDOjtS3ceviKS5L2g9RF9eN9nM8Mci9Z FiFBxLP5jHU6GFSeGSzZHOiXg6EUpc6B6oiTy5M6Hx+RfBTF8uJqTydYwM0GPTbc QOPkcBFaUze/XcJqAlRnMl1PyU0c+iAxRb56YBPpUZZWZyLTp5Dc9bcSQtptsSTX oTd5liFE+fzq6QVSrY1fA69+wWaxzH0qYkEmaUlpuCQoEVKs1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKiqZiWZVyU/5ixH+btBWqgxJu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzk5MzhlZmUtZjc5Yi0z YTZhLTkwYjctM2Q2MzU5MTFmYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRryqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA7XG2+JxdI0N4aJPaZ7FMaw16kqshq6UAlK7iDG8eNIY/3g63EYwwL K6fxJnIsdd8HrmVXem+qE9pQzHVPXHPhoDbgQ4Fls5dCJvh+aFlSjrnSD7IEHzCI f5piz2g38EzUBVIA4+1t7qJj4B1WBW2ld4ssjDKGnAg8sQBk/fT9NV8D5PTWyHdF zen/sa76ofHoGWgHTQ2vctxgkWvnh69fKsMLLkyzGA6uJ2Zb0UrSKzc4jl59op2k xtGlfhB05yAeIgUobkbJygVlcZ2h+hGkLjnOIuPFWqW6BcRhEWV/pgLFQDK0zbla SRtz1XM30T87EWBy9g15YxMIllwZvFQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:32 2025 by rpki-client