$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c7da2e-8bb0-3bf0-b3e9-4532a266452b.roa File: d3c7da2e-8bb0-3bf0-b3e9-4532a266452b.roa (raw, json) Hash identifier: 8U3pGrfzgIIP3WfIla8jq2bqrtDKnjKhh56MRo3lxlQ= Subject key identifier: 8F:A7:BB:A4:93:7E:EC:2D:DC:16:21:53:9F:CF:2B:8E:6F:17:62:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F206A58F973CAF3F247700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c7da2e-8bb0-3bf0-b3e9-4532a266452b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.160.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:06:a5:8f:97:3c:af:3f:24:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c7318bd5-6123-4ed6-9dae-c401389cd674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:66:39:f4:1d:69:5e:98:b3:9a:69:d9:39:f1: 83:89:ce:b1:dc:d9:53:fb:20:80:e6:a0:fc:9a:b5: f9:84:b7:bb:d0:ca:95:85:a8:a6:de:ff:24:a8:1e: 74:70:b6:09:41:ce:f1:0e:c6:19:b0:cb:2c:13:b3: 1a:b4:65:41:fe:06:ce:71:a4:43:f0:94:b7:4b:1b: e7:fe:5f:b4:97:3b:60:98:61:b3:15:d9:d7:33:99: aa:93:5c:fd:d7:55:a8:82:dc:fd:47:d4:a5:09:18: 39:6d:87:ef:26:f9:28:52:09:d2:ac:9b:f4:7f:5f: 04:63:d5:ce:2b:7f:0a:e6:36:d7:c6:75:db:5c:e8: 63:0a:d9:52:02:94:1c:b0:05:2c:f9:3d:bd:8a:0c: 82:14:28:3b:f9:25:ea:76:f8:68:0d:e4:73:ba:d9: 70:4b:b3:5a:cd:d6:85:b4:6e:c0:ea:1a:1c:67:2f: 5b:f0:51:5d:e3:a9:8b:f8:97:e8:83:cf:e8:0d:01: 83:27:d1:df:f6:5c:b8:7a:4a:a6:34:2a:5f:3c:90: 6c:a7:ba:00:3d:07:32:6d:c7:2f:d3:e9:45:15:d7: 51:03:14:30:1b:a2:2f:f4:21:25:4e:b3:e7:9f:de: 38:d8:bf:ea:44:07:07:11:ed:9c:3c:cf:be:67:c8: 32:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A7:BB:A4:93:7E:EC:2D:DC:16:21:53:9F:CF:2B:8E:6F:17:62:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c7da2e-8bb0-3bf0-b3e9-4532a266452b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:df:c0:48:f8:23:c6:a0:ef:40:80:90:9d:b2:95:3e:ad:f8: b8:e9:28:1f:8a:8a:c5:20:85:2c:73:28:1a:43:43:9b:e1:45: 4a:8e:13:d0:f7:43:d5:cf:8e:f2:4b:bb:33:68:4f:a2:3d:9f: 6e:82:e4:e0:53:79:3d:4c:5b:33:b7:b3:32:a5:aa:eb:04:dd: c2:a7:d1:8b:a5:6b:61:5b:4c:d5:40:a3:dd:cc:84:27:9c:96: b4:b1:2d:08:a2:f8:f7:b0:42:74:23:7e:33:ca:c3:21:e3:5b: 1c:0b:40:f5:bd:93:6d:90:3e:61:a5:8d:63:e9:4f:a5:2c:5a: e2:8f:f6:1e:82:58:08:87:70:3c:f5:f4:72:b0:8e:60:ea:4a: 7d:a5:07:5e:a4:b1:cb:a8:d3:73:3a:b6:3d:55:31:ac:9a:f0: b7:4a:64:8f:b0:37:71:b3:12:8a:db:17:1c:66:e8:a0:95:d5: 3c:16:68:b2:86:4f:f7:d4:c4:c6:ed:bc:ca:cd:be:fe:e9:9c: ff:d6:f4:7c:83:d8:30:5a:74:f5:65:70:62:78:b3:c2:00:14: c4:70:83:62:ab:7b:2f:02:04:90:9d:18:92:ec:2b:2d:c8:b7: 7d:37:6a:86:bb:7e:d0:17:9f:59:da:d9:d3:07:1b:a4:b3:39: ba:63:30:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28galj5c8rz8kdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzczMThiZDUtNjEyMy00ZWQ2LTlkYWUtYzQwMTM4OWNkNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWY59B1pXpizmmnZOfGDic6x3NlT+yCA5qD8 mrX5hLe70MqVhaim3v8kqB50cLYJQc7xDsYZsMssE7MatGVB/gbOcaRD8JS3Sxvn /l+0lztgmGGzFdnXM5mqk1z911Wogtz9R9SlCRg5bYfvJvkoUgnSrJv0f18EY9XO K38K5jbXxnXbXOhjCtlSApQcsAUs+T29igyCFCg7+SXqdvhoDeRzutlwS7NazdaF tG7A6hocZy9b8FFd46mL+Jfog8/oDQGDJ9Hf9ly4ekqmNCpfPJBsp7oAPQcybccv 0+lFFddRAxQwG6Iv9CElTrPnn9442L/qRAcHEe2cPM++Z8gyBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+nu6STfuwt3BYhU5/PK45vF2KuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNjN2RhMmUtOGJiMC0z YmYwLWIzZTktNDUzMmEyNjY0NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDfwEj4I8ag70CAkJ2ylT6t+LjpKB+KisUghSxzKBpDQ5vhRUqOE9D3 Q9XPjvJLuzNoT6I9n26C5OBTeT1MWzO3szKlqusE3cKn0Yula2FbTNVAo93MhCec lrSxLQii+PewQnQjfjPKwyHjWxwLQPW9k22QPmGljWPpT6UsWuKP9h6CWAiHcDz1 9HKwjmDqSn2lB16kscuo03M6tj1VMaya8LdKZI+wN3GzEorbFxxm6KCV1TwWaLKG T/fUxMbtvMrNvv7pnP/W9HyD2DBadPVlcGJ4s8IAFMRwg2Krey8CBJCdGJLsKy3I t303aoa7ftAXn1na2dMHG6SzObpjMM0= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:09 2025 by rpki-client