$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb3c45a1-be23-3edb-a40a-e01e9d6001f6.roa File: cb3c45a1-be23-3edb-a40a-e01e9d6001f6.roa (raw, json) Hash identifier: Arf2pTZZGaUHEoQBadCYCNlBoLvy5RMIcRnVn1IMqAk= Subject key identifier: 9D:41:A7:11:53:68:5F:09:5B:46:BC:16:3B:D5:56:0D:86:05:C7:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01953E75A5036661EBEFA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb3c45a1-be23-3edb-a40a-e01e9d6001f6.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.190.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:95:3e:75:a5:03:66:61:eb:ef:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=4d0a262e-eae0-4b77-b657-89fc5150595f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1a:fc:43:5b:75:e9:17:68:93:58:fe:ef:bb: 49:47:da:9b:c8:2d:ec:2e:d1:f1:08:05:07:78:b1: e3:2a:7c:37:1e:3f:ab:b8:81:4f:18:98:c9:42:40: 9f:c6:76:b2:30:57:29:83:a1:d6:54:5a:f9:2f:51: 8b:f7:8c:ef:8f:2c:d8:79:39:48:b7:0a:c4:04:85: 48:b3:eb:91:63:1f:1b:65:4b:99:0d:df:56:ce:16: 18:b5:c3:a0:fd:e1:c4:ca:fe:2d:5b:df:72:52:52: c3:8b:45:b0:cf:5e:1b:ac:ea:aa:12:4b:8f:25:54: 48:90:13:5c:66:48:2a:d5:4e:5d:72:a0:fa:b5:d9: 53:0f:b3:a8:38:42:90:ac:22:0e:9a:94:c7:24:7b: 85:d2:99:fa:e9:9f:52:83:f3:9e:e5:6f:20:a8:be: ef:98:ae:ad:b2:69:35:48:ef:6f:30:d3:e4:a6:0c: 01:6a:7b:19:e6:67:31:70:78:f6:ba:ae:11:f1:33: da:d0:5c:fe:3e:2f:c8:4a:67:1c:11:46:35:87:92: 7a:87:d4:03:95:2f:9d:b5:c6:4f:43:29:8f:8c:94: 2c:c3:9e:43:6b:92:8c:e4:94:31:34:d1:04:59:21: d3:69:ee:db:2e:1b:e7:5a:4a:5e:fc:03:5a:9f:9a: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:41:A7:11:53:68:5F:09:5B:46:BC:16:3B:D5:56:0D:86:05:C7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb3c45a1-be23-3edb-a40a-e01e9d6001f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:28:11:40:89:cf:21:60:2b:e5:f7:04:3b:43:b7:b4:21:46: c0:35:75:1e:2b:19:ef:83:72:d0:7c:40:b5:d4:22:fc:86:00: 24:08:e2:35:cc:92:2f:50:4f:74:0b:85:8d:af:81:3a:93:92: 52:fe:f7:7c:23:13:5a:1d:3c:6b:7e:2c:74:c7:8a:52:de:85: 08:e1:39:54:38:21:01:d9:31:76:3d:15:5e:4c:4c:58:f6:15: 9d:1c:d0:2e:b0:e9:87:4b:d2:c9:8e:22:e7:b4:1b:10:0d:95: 83:23:13:3d:6a:62:53:74:11:fd:a2:60:51:a6:e3:3e:8c:db: 1f:d2:26:bb:57:cd:ca:3d:93:12:27:19:4c:72:3f:ba:2a:05: 74:01:71:fb:f8:01:42:d4:76:cf:ce:cc:dc:a6:a7:e8:f6:de: 52:57:c4:36:cc:0c:c7:3a:e4:ac:e3:91:91:47:0a:5c:46:56: 47:c9:cb:b4:53:0c:f3:c6:65:24:e2:b9:36:2f:cf:44:64:fd: f9:a9:0a:30:d1:94:e1:36:5e:db:8e:8d:cd:ec:c0:f4:8f:d9: 8f:96:78:7e:d0:b9:d1:36:a7:fe:ba:f6:54:90:26:a7:56:04: cf:2f:85:eb:20:cc:26:7f:27:1d:45:be:95:80:55:2b:f4:6e: c8:36:b1:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZU+daUDZmHr76AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NGQwYTI2MmUtZWFlMC00Yjc3LWI2NTctODlmYzUxNTA1OTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghr8Q1t16Rdok1j+77tJR9qbyC3sLtHxCAUH eLHjKnw3Hj+ruIFPGJjJQkCfxnayMFcpg6HWVFr5L1GL94zvjyzYeTlItwrEBIVI s+uRYx8bZUuZDd9WzhYYtcOg/eHEyv4tW99yUlLDi0Wwz14brOqqEkuPJVRIkBNc Zkgq1U5dcqD6tdlTD7OoOEKQrCIOmpTHJHuF0pn66Z9Sg/Oe5W8gqL7vmK6tsmk1 SO9vMNPkpgwBansZ5mcxcHj2uq4R8TPa0Fz+Pi/ISmccEUY1h5J6h9QDlS+dtcZP QymPjJQsw55Da5KM5JQxNNEEWSHTae7bLhvnWkpe/ANan5pT9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1BpxFTaF8JW0a8FjvVVg2GBcfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2IzYzQ1YTEtYmUyMy0z ZWRiLWE0MGEtZTAxZTlkNjAwMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgoEUCJzyFgK+X3BDtDt7QhRsA1dR4rGe+DctB8QLXUIvyGACQI4jXM ki9QT3QLhY2vgTqTklL+93wjE1odPGt+LHTHilLehQjhOVQ4IQHZMXY9FV5MTFj2 FZ0c0C6w6YdL0smOIue0GxANlYMjEz1qYlN0Ef2iYFGm4z6M2x/SJrtXzco9kxIn GUxyP7oqBXQBcfv4AULUds/OzNymp+j23lJXxDbMDMc65KzjkZFHClxGVkfJy7RT DPPGZSTiuTYvz0Rk/fmpCjDRlOE2XtuOjc3swPSP2Y+WeH7QudE2p/669lSQJqdW BM8vhesgzCZ/Jx1FvpWAVSv0bsg2sc0= -----END CERTIFICATE-----Generated at Thu Oct 16 01:54:12 2025 by rpki-client