$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf3f5dbd-280b-3b90-801a-649104301a42.roa File: cf3f5dbd-280b-3b90-801a-649104301a42.roa (raw, json) Hash identifier: urScxvxYrRDJ24nCGtNUedg4AKDTZNAjML5YPFjZEBw= Subject key identifier: 8B:1D:01:57:50:A6:D3:44:6B:CC:7B:4F:4F:65:52:D3:37:87:D8:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F018EED6605AE743A328980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf3f5dbd-280b-3b90-801a-649104301a42.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.188.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:8e:ed:66:05:ae:74:3a:32:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=35d4b616-bff0-44f9-9564-d595a534de25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b6:d9:ac:ce:14:0b:98:d5:17:9c:22:07:5f: 81:ee:9d:94:9b:7b:3d:41:85:33:1e:c4:6d:a5:4e: 3e:34:03:23:d6:74:fb:e2:96:a8:7e:fa:af:1d:b0: bc:a1:c1:4b:36:4c:fe:1b:7c:6b:33:c3:48:e7:7a: 75:40:07:23:ed:fd:8b:be:c0:3c:8b:0d:df:a4:1c: 66:ee:d6:f7:fd:83:63:bb:06:67:25:63:b6:43:bc: 5d:74:bf:96:89:52:73:3f:9b:f7:4a:4f:64:ad:78: a6:59:c4:e4:9c:46:9c:c2:0a:4e:ab:c9:92:29:0f: 9d:13:41:e4:fd:9b:f3:9f:76:38:42:f8:e9:37:27: 8e:78:df:6f:38:25:db:e5:d6:ba:18:fc:39:05:0d: 99:2c:f2:11:ab:94:9c:c2:47:2e:dc:ed:1e:bd:f1: 19:1b:b2:26:8c:b3:c1:09:dd:5f:89:12:be:81:42: 36:9d:26:c4:9c:6e:12:11:28:fc:31:65:38:7d:18: 94:05:74:e2:d5:c5:d4:aa:4a:74:bf:1c:d9:61:ce: 04:26:fa:16:8d:83:8c:ac:d6:2f:ba:81:bc:6e:70: 66:ea:c9:c8:7e:c6:a5:55:09:49:17:5e:60:32:05: 5e:30:4e:3c:14:54:d0:38:89:11:37:5a:e4:ff:49: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1D:01:57:50:A6:D3:44:6B:CC:7B:4F:4F:65:52:D3:37:87:D8:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf3f5dbd-280b-3b90-801a-649104301a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:46:d3:cd:ac:da:cd:7c:5b:1e:70:d8:b6:05:62:6e:82:e0: 1a:e1:e7:74:97:8d:c4:c6:cb:fd:7e:66:8d:6f:1a:49:5e:c2: d6:0e:ed:f0:41:39:92:6b:2e:01:a2:28:44:cb:a6:7e:d9:59: 85:3a:64:b9:cd:b1:1c:3e:5c:0c:31:b1:8a:fe:ca:53:14:98: 12:79:87:8b:1e:fd:9b:e9:d4:06:18:9d:af:14:c3:6a:5b:2a: a3:5d:84:36:20:73:13:63:0a:6e:0a:df:07:d1:37:42:92:a1: 64:32:0d:93:2f:ee:e6:7c:75:a0:fa:7f:9d:78:bf:80:82:f3: 42:58:06:b5:d9:db:8e:ff:7c:47:7e:81:5c:6a:86:9d:cd:7c: ce:64:e5:ef:84:ef:d0:12:53:cd:f2:ee:fb:2d:d0:b6:06:db: b3:65:10:fc:f8:7c:db:76:cb:e0:13:8a:75:f2:82:ad:31:a2: b8:69:4d:7a:31:3b:6f:4c:eb:c8:3b:8f:d7:9c:73:49:7e:59: b1:6c:e7:14:c9:04:3a:c0:b3:28:05:85:9b:5f:74:97:ad:41: 03:05:18:51:ab:6e:77:67:3f:4e:3a:57:60:e7:30:a1:53:ca: eb:5a:21:f0:90:df:4d:9e:46:9c:cd:e5:af:f2:4a:fc:42:a6: fe:ba:46:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAY7tZgWudDoyiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzVkNGI2MTYtYmZmMC00NGY5LTk1NjQtZDU5NWE1MzRkZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbbZrM4UC5jVF5wiB1+B7p2Um3s9QYUzHsRt pU4+NAMj1nT74paofvqvHbC8ocFLNkz+G3xrM8NI53p1QAcj7f2LvsA8iw3fpBxm 7tb3/YNjuwZnJWO2Q7xddL+WiVJzP5v3Sk9krXimWcTknEacwgpOq8mSKQ+dE0Hk /Zvzn3Y4QvjpNyeOeN9vOCXb5da6GPw5BQ2ZLPIRq5Scwkcu3O0evfEZG7ImjLPB Cd1fiRK+gUI2nSbEnG4SESj8MWU4fRiUBXTi1cXUqkp0vxzZYc4EJvoWjYOMrNYv uoG8bnBm6snIfsalVQlJF15gMgVeME48FFTQOIkRN1rk/0lygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsdAVdQptNEa8x7T09lUtM3h9hrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2YzZjVkYmQtMjgwYi0z YjkwLTgwMWEtNjQ5MTA0MzAxYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRG082s2s18Wx5w2LYFYm6C4Brh53SXjcTGy/1+Zo1vGklewtYO7fBB OZJrLgGiKETLpn7ZWYU6ZLnNsRw+XAwxsYr+ylMUmBJ5h4se/Zvp1AYYna8Uw2pb KqNdhDYgcxNjCm4K3wfRN0KSoWQyDZMv7uZ8daD6f514v4CC80JYBrXZ247/fEd+ gVxqhp3NfM5k5e+E79ASU83y7vst0LYG27NlEPz4fNt2y+ATinXygq0xorhpTXox O29M68g7j9ecc0l+WbFs5xTJBDrAsygFhZtfdJetQQMFGFGrbndnP046V2DnMKFT yutaIfCQ302eRpzN5a/ySvxCpv66Rhc= -----END CERTIFICATE-----Generated at Thu Oct 16 01:46:53 2025 by rpki-client