$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe9f42f-f924-3717-8008-67f7a3dad58c.roa File: cfe9f42f-f924-3717-8008-67f7a3dad58c.roa (raw, json) Hash identifier: iuP8HmyACXEjh5txyx39uS34l9H8TAvMBGNfxAU0qZ8= Subject key identifier: 29:4D:2E:A2:61:7B:A6:A3:C5:2A:3A:59:EA:BA:90:21:AE:C0:D1:9E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670A428AC99C5CF8D678F8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe9f42f-f924-3717-8008-67f7a3dad58c.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0a:42:8a:c9:9c:5c:f8:d6:78:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=521932db-c80c-4d46-8ca3-721e5cee79e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a1:72:31:6a:99:ff:e7:12:4f:20:b9:dc:11: 4c:01:4c:e4:f6:a2:d8:cd:f4:4a:be:cf:18:5f:b8: 59:f6:8a:dc:55:d7:7f:a3:e2:84:c8:40:a5:70:45: 26:27:f8:26:a6:27:e0:3f:b5:60:b5:7a:51:56:a0: 12:11:28:30:3a:b2:68:e2:6d:d1:28:6e:ea:84:af: 64:77:78:8e:54:02:47:a2:96:8a:91:a2:4f:e6:60: d8:6d:26:eb:e2:1e:35:95:81:ab:c8:71:3d:19:21: 2d:d4:b9:6a:ef:ac:69:a2:cc:34:8f:26:47:ef:e2: ee:98:da:fa:8b:70:aa:d5:b8:73:fb:41:f7:ea:04: 03:cf:ba:7d:0a:65:d0:45:ad:53:17:9c:78:c2:0a: 82:a2:bc:41:d0:90:30:1f:36:93:95:c7:87:bd:cc: 71:03:70:47:0d:53:08:ee:ea:6d:a0:d8:f7:8e:21: 1b:30:20:2c:8a:91:17:43:69:bb:1e:b5:d9:9a:d4: be:3a:6e:c6:2a:b5:6e:64:bb:5f:21:30:71:84:73: a5:3e:ac:30:f7:c3:74:cf:2a:91:e9:62:e5:90:cf: c6:23:1f:27:93:d8:d1:f4:56:2f:2b:a6:97:3d:37: ea:a3:e5:55:86:17:36:74:92:4e:46:59:9c:39:5f: 24:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4D:2E:A2:61:7B:A6:A3:C5:2A:3A:59:EA:BA:90:21:AE:C0:D1:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe9f42f-f924-3717-8008-67f7a3dad58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5a:8b:b3:1c:90:45:bc:b4:ba:c6:09:e5:a6:ce:08:68:13: 0b:e0:b8:c4:dc:02:5a:fa:ca:18:f8:21:72:ea:27:dc:1c:a1: 95:da:fe:57:76:ee:b0:50:b4:e4:21:45:8a:37:1e:d1:59:9f: 46:83:35:b0:12:da:22:33:f0:c7:a1:57:bd:9a:27:58:1f:f8: 78:37:ff:5a:db:d6:e9:56:f8:79:8e:c5:82:45:90:9d:33:81: e8:e0:00:3b:d3:e6:56:76:06:f1:3a:69:63:47:8c:65:55:f2: 28:6d:86:fe:ea:72:e8:09:7f:8a:f2:46:28:b0:14:ee:3c:16: fa:2f:61:ef:b5:5f:83:01:fb:e8:83:3f:1a:24:43:7e:a1:f3: 3b:e7:d0:64:bd:20:6a:07:60:77:ac:ee:c5:99:b4:16:d5:f3: e0:32:9b:6a:29:a7:9c:c2:df:84:36:00:bc:4a:70:83:3a:de: 79:3b:7b:4a:78:ae:41:de:21:c9:3a:be:54:f4:e2:a7:a7:c8: d8:ea:bc:c1:4e:65:71:24:99:ca:46:86:3e:9e:31:a8:d3:c2: 7e:07:1b:3b:91:a4:ba:c0:8f:8b:d2:67:60:bd:47:72:5e:a5: de:4e:63:36:59:00:df:26:94:f7:92:76:69:31:43:9d:3a:32: 2c:89:8c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwpCismcXPjWePgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NTIxOTMyZGItYzgwYy00ZDQ2LThjYTMtNzIxZTVjZWU3OWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36FyMWqZ/+cSTyC53BFMAUzk9qLYzfRKvs8Y X7hZ9orcVdd/o+KEyEClcEUmJ/gmpifgP7VgtXpRVqASESgwOrJo4m3RKG7qhK9k d3iOVAJHopaKkaJP5mDYbSbr4h41lYGryHE9GSEt1Llq76xposw0jyZH7+LumNr6 i3Cq1bhz+0H36gQDz7p9CmXQRa1TF5x4wgqCorxB0JAwHzaTlceHvcxxA3BHDVMI 7uptoNj3jiEbMCAsipEXQ2m7HrXZmtS+Om7GKrVuZLtfITBxhHOlPqww98N0zyqR 6WLlkM/GIx8nk9jR9FYvK6aXPTfqo+VVhhc2dJJORlmcOV8kFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClNLqJhe6ajxSo6Weq6kCGuwNGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ZlOWY0MmYtZjkyNC0z NzE3LTgwMDgtNjdmN2EzZGFkNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5ai7MckEW8tLrGCeWmzghoEwvguMTcAlr6yhj4IXLqJ9wcoZXa/ld2 7rBQtOQhRYo3HtFZn0aDNbAS2iIz8MehV72aJ1gf+Hg3/1rb1ulW+HmOxYJFkJ0z gejgADvT5lZ2BvE6aWNHjGVV8ihthv7qcugJf4ryRiiwFO48FvovYe+1X4MB++iD PxokQ36h8zvn0GS9IGoHYHes7sWZtBbV8+Aym2opp5zC34Q2ALxKcIM63nk7e0p4 rkHeIck6vlT04qenyNjqvMFOZXEkmcpGhj6eMajTwn4HGzuRpLrAj4vSZ2C9R3Je pd5OYzZZAN8mlPeSdmkxQ506MiyJjHc= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:36 2025 by rpki-client