$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbac2318-0677-377a-a318-5d1808b71f2a.roa File: cbac2318-0677-377a-a318-5d1808b71f2a.roa (raw, json) Hash identifier: XNUAp9aP4sfQbI447hxwPy+bHpcgX29je+d1cRuRWwc= Subject key identifier: F5:7A:0A:2B:EE:F4:BA:76:D7:D0:AB:80:A6:8A:1A:05:A9:C5:0F:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C72D4A8AF228C87DBE580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbac2318-0677-377a-a318-5d1808b71f2a.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:72:d4:a8:af:22:8c:87:db:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=a9bb45f8-ae55-4d0d-8858-fe162a5e28d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:0d:f7:c5:fb:db:25:e8:4b:eb:11:f6:f2: 80:75:6a:1e:98:dc:9a:9d:f1:1a:9a:7a:23:12:4a: cd:cd:10:5d:2b:73:c7:18:c7:30:e3:dd:e6:fe:8b: b1:15:bb:14:53:d0:35:5f:e0:76:54:e6:7c:2d:4e: a3:07:13:91:40:8b:bb:07:e2:52:5b:31:25:cb:6c: 1f:41:e1:eb:05:6d:91:93:9a:c9:b2:76:ae:b0:e3: ba:4b:a3:d2:c0:2d:3b:7b:2c:88:3f:2d:b6:05:f4: 27:16:27:6f:9e:8b:f4:93:74:9b:2a:c2:1b:ee:34: 66:e2:17:18:33:8a:58:43:15:f1:22:7e:0a:6a:42: 78:58:e0:9e:ad:cf:46:2b:0c:3f:c9:3b:15:c7:77: c1:27:47:b6:76:22:04:79:fd:22:dd:01:db:48:18: 66:84:42:fa:ef:e9:5b:e8:c3:56:a7:0c:00:f9:57: 98:7f:9f:65:3c:e2:af:ed:03:f4:9a:33:9c:c3:84: c4:51:b0:b6:2d:23:2d:94:86:38:73:6f:d6:53:ed: d5:0e:24:7e:f0:d7:59:dc:17:9c:6b:e5:71:7b:a2: 0e:4d:b2:ea:a1:31:a2:3f:10:06:b5:62:ff:ce:ea: 35:9e:b4:b4:ae:7b:5a:a5:c7:b8:7f:71:9d:de:a9: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7A:0A:2B:EE:F4:BA:76:D7:D0:AB:80:A6:8A:1A:05:A9:C5:0F:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbac2318-0677-377a-a318-5d1808b71f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bb:ea:6a:6c:80:7e:49:35:dd:2c:a5:05:4d:7d:30:87:90: 3a:e3:0a:f2:bf:51:61:f3:ce:a4:3d:e8:a3:97:ea:d4:67:d9: 17:08:d6:9b:e7:c1:fa:1f:63:75:7c:55:ef:c8:c5:56:fd:a5: eb:3a:6b:e2:5e:4d:2d:50:0c:d4:b6:04:61:e4:8c:68:dc:40: 4c:00:9d:97:11:7a:ff:69:1b:51:54:34:90:a7:11:f5:70:51: 77:fa:52:b8:3c:45:f2:a0:9b:6b:c4:41:d2:91:3e:43:34:42: 3c:06:90:8a:25:1a:16:c0:33:5f:6e:3c:02:2f:aa:88:f1:2b: 1b:5c:b9:e5:96:cf:b0:8e:c7:3c:85:25:bb:a1:79:6b:50:5a: 5c:98:58:8c:9d:78:d2:a7:3b:e0:15:67:ce:42:c6:da:d1:e7: b9:f4:2b:33:11:0c:a7:75:3d:01:f3:70:58:55:2d:eb:06:95: e3:be:37:26:b0:e2:3e:a4:9d:b3:53:86:fc:a1:c3:fe:53:86: e6:c5:0c:2a:c5:5e:63:3c:71:80:d0:1a:d4:b1:f7:bd:39:7b: 14:d4:6c:73:0b:1f:00:70:c7:a5:49:bc:44:14:a3:11:78:63: 4b:89:28:89:f3:0b:a5:42:73:6c:fb:96:d1:f0:10:ad:6c:80: 5b:92:93:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHLUqK8ijIfb5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YTliYjQ1ZjgtYWU1NS00ZDBkLTg4NTgtZmUxNjJhNWUyOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXoN98X72yXoS+sR9vKAdWoemNyanfEamnoj EkrNzRBdK3PHGMcw493m/ouxFbsUU9A1X+B2VOZ8LU6jBxORQIu7B+JSWzEly2wf QeHrBW2Rk5rJsnausOO6S6PSwC07eyyIPy22BfQnFidvnov0k3SbKsIb7jRm4hcY M4pYQxXxIn4KakJ4WOCerc9GKww/yTsVx3fBJ0e2diIEef0i3QHbSBhmhEL67+lb 6MNWpwwA+VeYf59lPOKv7QP0mjOcw4TEUbC2LSMtlIY4c2/WU+3VDiR+8NdZ3Bec a+Vxe6IOTbLqoTGiPxAGtWL/zuo1nrS0rntapce4f3Gd3qn1uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPV6Civu9Lp219CrgKaKGgWpxQ+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2JhYzIzMTgtMDY3Ny0z NzdhLWEzMTgtNWQxODA4YjcxZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC76mpsgH5JNd0spQVNfTCHkDrjCvK/UWHzzqQ96KOX6tRn2RcI1pvn wfofY3V8Ve/IxVb9pes6a+JeTS1QDNS2BGHkjGjcQEwAnZcRev9pG1FUNJCnEfVw UXf6Urg8RfKgm2vEQdKRPkM0QjwGkIolGhbAM19uPAIvqojxKxtcueWWz7COxzyF JbuheWtQWlyYWIydeNKnO+AVZ85CxtrR57n0KzMRDKd1PQHzcFhVLesGleO+Nyaw 4j6knbNThvyhw/5ThubFDCrFXmM8cYDQGtSx9705exTUbHMLHwBwx6VJvEQUoxF4 Y0uJKInzC6VCc2z7ltHwEK1sgFuSk0o= -----END CERTIFICATE-----Generated at Thu Oct 16 04:56:41 2025 by rpki-client