$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d39daf8d-90cd-3181-957c-553f881c7ea6.roa File: d39daf8d-90cd-3181-957c-553f881c7ea6.roa (raw, json) Hash identifier: vtC/bnOgCCcwFNL/bZw8KHAWmawAjkR+tfNiRrvBlc0= Subject key identifier: D3:81:56:57:AF:D3:FE:26:0F:01:CE:CA:CB:1E:7C:23:A1:13:6C:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F019720676D3E0447287D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d39daf8d-90cd-3181-957c-553f881c7ea6.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.190.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:97:20:67:6d:3e:04:47:28:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=3fd96c55-d04f-42fa-a4bc-628867a57317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:8f:b1:a1:6a:e9:d4:1f:a5:14:59:85:a1: bd:43:a3:0f:22:7b:21:7c:9d:0e:e4:f4:f4:6f:ff: 1b:58:4c:24:e5:3e:20:22:7d:0c:ae:81:f9:05:78: 8b:01:7b:83:cc:52:8a:5c:59:25:cf:74:9a:7a:98: 32:eb:1d:a0:11:05:52:80:d6:3f:87:cd:c6:17:ca: 99:61:95:80:e6:cc:5f:57:0a:8e:8b:95:ea:4c:70: 23:51:0b:64:d1:86:4f:d4:6b:2f:58:9d:18:ed:1b: 0b:e7:1d:aa:9f:a4:42:b0:e1:15:8e:c7:58:1e:21: cf:be:ec:43:ea:c9:a7:85:20:a4:88:5b:6f:e5:7d: be:e3:af:b6:8d:23:51:b8:82:8c:86:ae:55:db:70: 1f:6b:20:4e:00:ed:bc:92:c0:60:72:1b:dc:b2:3f: 04:74:65:b2:55:36:fc:26:21:da:16:45:a7:96:13: 0e:32:04:0e:a4:9a:13:08:77:8a:f7:53:13:c2:6d: bf:75:01:55:d5:b6:e3:f4:99:d7:e4:7a:75:f7:16: 24:a0:9b:f1:c0:bf:1a:6a:57:0c:e2:f9:27:7b:51: ec:d8:7c:b8:b1:1e:fe:38:ee:98:bd:05:3e:e2:bd: d2:79:c6:02:40:50:d6:3b:96:31:04:4e:ae:be:f0: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:81:56:57:AF:D3:FE:26:0F:01:CE:CA:CB:1E:7C:23:A1:13:6C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d39daf8d-90cd-3181-957c-553f881c7ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:85:60:e2:f0:7c:b0:a6:db:3e:c2:5b:4b:3b:16:d9:2b:9a: 3e:ba:3e:15:be:80:78:2a:1d:4f:cb:b6:68:01:19:8c:ce:2c: a0:14:d2:5d:14:f1:40:e0:6a:ef:15:02:50:75:cc:0d:bc:0e: 9a:e6:29:a5:e6:52:a5:64:26:51:28:b3:8b:78:e1:0b:a2:a0: 98:db:20:25:13:df:1f:99:cc:c4:b8:df:2c:06:c2:96:5c:71: 0f:cd:55:cb:54:ae:c0:9c:28:3d:fd:5c:ec:37:c3:6b:10:65: 93:4b:fb:24:e8:69:be:12:89:ac:f8:ab:48:17:70:05:ef:7c: e1:c0:bc:82:76:0e:7f:b9:92:a4:38:c6:ce:56:49:ac:55:be: 18:57:8c:ff:4e:d9:83:0c:ab:1c:c6:67:84:e6:7a:ad:23:b8: 12:1d:e0:c7:aa:72:46:dd:24:36:37:f7:1b:4a:a5:fa:18:ed: 99:72:dc:74:e7:5b:98:18:8a:79:3d:f1:fa:a6:67:63:98:dd: b5:5a:a4:13:5d:d7:b6:ae:4b:cb:fc:a7:bd:89:b1:1e:c9:03: 13:1f:9b:c1:f5:2b:37:64:06:a2:2a:94:9c:78:26:ca:59:0b: 99:47:18:d0:f9:22:65:a0:a7:5d:62:fc:07:d3:27:b7:20:d7: bc:89:39:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZcgZ20+BEcofQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2ZkOTZjNTUtZDA0Zi00MmZhLWE0YmMtNjI4ODY3YTU3MzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj++PsaFq6dQfpRRZhaG9Q6MPInshfJ0O5PT0 b/8bWEwk5T4gIn0MroH5BXiLAXuDzFKKXFklz3Saepgy6x2gEQVSgNY/h83GF8qZ YZWA5sxfVwqOi5XqTHAjUQtk0YZP1GsvWJ0Y7RsL5x2qn6RCsOEVjsdYHiHPvuxD 6smnhSCkiFtv5X2+46+2jSNRuIKMhq5V23AfayBOAO28ksBgchvcsj8EdGWyVTb8 JiHaFkWnlhMOMgQOpJoTCHeK91MTwm2/dQFV1bbj9JnX5Hp19xYkoJvxwL8aalcM 4vkne1Hs2Hy4sR7+OO6YvQU+4r3SecYCQFDWO5YxBE6uvvC1SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOBVlev0/4mDwHOyssefCOhE2znMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDM5ZGFmOGQtOTBjZC0z MTgxLTk1N2MtNTUzZjg4MWM3ZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr6uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGFYOLwfLCm2z7CW0s7Ftkrmj66PhW+gHgqHU/LtmgBGYzOLKAU0l0U 8UDgau8VAlB1zA28DprmKaXmUqVkJlEos4t44QuioJjbICUT3x+ZzMS43ywGwpZc cQ/NVctUrsCcKD39XOw3w2sQZZNL+yToab4Siaz4q0gXcAXvfOHAvIJ2Dn+5kqQ4 xs5WSaxVvhhXjP9O2YMMqxzGZ4Tmeq0juBId4MeqckbdJDY39xtKpfoY7Zly3HTn W5gYink98fqmZ2OY3bVapBNd17auS8v8p72JsR7JAxMfm8H1KzdkBqIqlJx4JspZ C5lHGND5ImWgp11i/AfTJ7cg17yJOW0= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:01 2025 by rpki-client