$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6b86280-0a74-32d4-ade7-a12934889d6e.roa File: d6b86280-0a74-32d4-ade7-a12934889d6e.roa (raw, json) Hash identifier: PgA/Zzvsa5u3pGlsZhn7Licb141PmtXTnKZAR3QW5fM= Subject key identifier: C7:8C:FD:7C:9E:47:5B:4F:6B:28:4D:26:1A:C9:3E:12:AC:77:E1:1C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670728EA2903F89AC78680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6b86280-0a74-32d4-ade7-a12934889d6e.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:07:28:ea:29:03:f8:9a:c7:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=f8966d8e-cff0-4fb9-83e2-81b2799e53da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:f8:de:e7:7b:ca:f1:7e:f9:7e:04:e1:bf: 23:5d:e4:65:0f:17:b5:f7:e7:46:82:0e:32:76:59: 55:15:ac:48:bf:87:0a:b7:7f:a4:8e:2c:99:6e:87: c0:50:f5:ef:25:19:6a:22:94:8c:14:57:3e:b4:82: a4:5f:7a:6a:2a:b7:73:56:68:51:5d:e6:58:a2:0c: a1:98:2d:d7:4d:fc:2d:ab:7d:1c:68:cf:7e:29:a0: 9c:e5:3b:cd:a6:68:40:54:fc:fb:53:07:33:7a:3b: 46:02:8a:bb:17:f9:d3:da:e8:5d:a8:f3:71:28:9c: a6:4b:ed:f9:63:4d:21:4c:fe:d2:63:2b:84:ed:ee: a8:3f:55:3f:ba:bf:db:55:9c:4a:ee:86:68:b2:42: ff:10:2b:62:0a:33:91:81:5d:67:f9:91:4b:80:7a: 9c:b0:6f:68:46:31:e6:f1:45:55:a7:26:9f:29:b0: c3:52:44:0a:46:32:57:d2:20:7b:e0:c8:d9:0c:4d: dd:ed:f3:76:61:49:d2:49:8f:19:8f:53:7b:89:4f: aa:3a:2a:e0:5e:cc:c1:b3:ec:52:09:46:c6:2a:ac: 2e:f2:dc:28:4e:0b:a8:d4:c2:76:1e:f5:b1:99:aa: 9f:db:bb:3c:75:55:6f:b1:a0:6e:c8:9f:a6:0e:42: c0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8C:FD:7C:9E:47:5B:4F:6B:28:4D:26:1A:C9:3E:12:AC:77:E1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6b86280-0a74-32d4-ade7-a12934889d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:82:bc:d3:a4:de:cd:8d:6e:03:4f:b5:75:d7:04:96:82:dd: ae:12:01:a0:6d:bd:00:01:19:68:d0:d6:be:9b:92:06:79:fb: 38:44:62:ad:b0:85:e7:e6:d9:23:3c:32:7f:83:35:b9:29:af: 64:3e:31:6b:30:14:de:4f:1d:0c:48:39:2c:0d:7c:73:67:03: ba:84:69:50:82:0c:5b:82:f6:ab:25:09:ce:5d:53:a3:ee:a4: 65:a2:22:5b:be:86:a7:62:a9:7f:ca:ff:40:8c:e6:40:4f:da: 7a:b1:56:07:59:38:2d:7a:dc:11:8f:ac:b6:6c:4e:21:49:d6: 0f:c1:7a:d5:13:59:b4:1b:d9:b3:60:73:d8:e5:01:21:78:60: 5e:77:90:70:ec:fd:a9:37:aa:01:a4:25:8f:b6:b0:cc:91:93: 1a:9b:66:56:de:f8:9a:ca:74:2c:b1:c6:56:af:fc:12:6a:f2: 6a:ce:87:ee:c8:3a:92:83:3c:fc:19:04:3e:82:44:9d:0f:98: fa:e1:6e:86:f3:38:a0:a5:81:74:15:81:e7:ef:28:57:91:bf: bb:8e:f5:15:dd:b4:e9:eb:2d:1b:48:83:e6:64:95:9a:67:7f: a5:87:f0:8d:07:13:b6:d3:5f:a7:aa:fd:45:4a:4c:b9:2d:00: 0c:32:d6:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwco6ikD+JrHhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk Zjg5NjZkOGUtY2ZmMC00ZmI5LTgzZTItODFiMjc5OWU1M2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2H43ud7yvF++X4E4b8jXeRlDxe19+dGgg4y dllVFaxIv4cKt3+kjiyZbofAUPXvJRlqIpSMFFc+tIKkX3pqKrdzVmhRXeZYogyh mC3XTfwtq30caM9+KaCc5TvNpmhAVPz7UwczejtGAoq7F/nT2uhdqPNxKJymS+35 Y00hTP7SYyuE7e6oP1U/ur/bVZxK7oZoskL/ECtiCjORgV1n+ZFLgHqcsG9oRjHm 8UVVpyafKbDDUkQKRjJX0iB74MjZDE3d7fN2YUnSSY8Zj1N7iU+qOirgXszBs+xS CUbGKqwu8twoTguo1MJ2HvWxmaqf27s8dVVvsaBuyJ+mDkLAgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeM/XyeR1tPayhNJhrJPhKsd+EcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDZiODYyODAtMGE3NC0z MmQ0LWFkZTctYTEyOTM0ODg5ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqp0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyCvNOk3s2NbgNPtXXXBJaC3a4SAaBtvQABGWjQ1r6bkgZ5+zhEYq2w hefm2SM8Mn+DNbkpr2Q+MWswFN5PHQxIOSwNfHNnA7qEaVCCDFuC9qslCc5dU6Pu pGWiIlu+hqdiqX/K/0CM5kBP2nqxVgdZOC163BGPrLZsTiFJ1g/BetUTWbQb2bNg c9jlASF4YF53kHDs/ak3qgGkJY+2sMyRkxqbZlbe+JrKdCyxxlav/BJq8mrOh+7I OpKDPPwZBD6CRJ0PmPrhbobzOKClgXQVgefvKFeRv7uO9RXdtOnrLRtIg+ZklZpn f6WH8I0HE7bTX6eq/UVKTLktAAwy1ks= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:14 2025 by rpki-client