$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9798fe0-d07d-3ec9-a86f-6fd9bc60a320.roa File: d9798fe0-d07d-3ec9-a86f-6fd9bc60a320.roa (raw, json) Hash identifier: PYW00BvVdCdCaZIn0ldmeBPxhbcZ8siYUlHMoF4gEgQ= Subject key identifier: 01:A7:9D:7C:E6:61:CB:86:81:B5:97:A5:49:E2:D5:8E:12:7D:A2:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2912C33705ACCEF696980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9798fe0-d07d-3ec9-a86f-6fd9bc60a320.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.70.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:91:2c:33:70:5a:cc:ef:69:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6976f300-392b-45d4-b7f6-1ba14dfea84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:92:c4:9f:b9:04:da:49:0d:f7:4a:d2:e7: b3:10:ea:02:d2:5b:84:c4:9c:32:3c:30:47:b0:52: e2:03:61:75:fa:db:d0:15:9d:81:65:68:40:51:50: ae:3e:8c:c8:15:11:43:9f:c2:3b:bc:7e:9c:b5:04: 7c:cf:43:34:25:98:fd:da:7c:39:a9:3b:a8:a6:ba: 64:c7:19:79:cd:d1:26:3a:20:84:4d:f7:73:ac:58: 3d:f5:42:9b:d2:1d:2e:28:4c:80:3a:44:ef:83:95: d6:90:66:fd:5d:ea:2f:9f:2b:e1:38:13:41:73:1d: c3:fb:09:e2:d0:11:81:d4:63:0a:6b:77:e6:20:ce: d5:35:e8:fd:84:49:f2:fb:8b:9a:a2:6c:00:73:73: 6d:7e:0c:68:a1:80:58:24:85:b6:fe:18:0b:ff:55: f7:b6:e0:b9:0e:81:31:5f:65:86:d8:16:94:cf:b5: 80:2c:b3:7c:de:8f:13:40:64:ae:b6:82:51:84:d7: 2d:21:e3:b4:9e:bb:d9:b6:97:fb:d5:79:07:44:32: e2:7c:ec:da:b4:d4:01:9f:6a:27:a6:e1:55:be:42: c7:bd:e3:91:29:9c:b7:31:da:8e:16:27:07:6c:6f: 7c:2e:69:e6:cd:97:4b:6a:7a:8e:0a:d7:1a:f8:30: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A7:9D:7C:E6:61:CB:86:81:B5:97:A5:49:E2:D5:8E:12:7D:A2:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9798fe0-d07d-3ec9-a86f-6fd9bc60a320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.70.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8b:81:35:0b:47:f8:b7:28:13:99:6d:02:b7:22:0c:86:42: 61:86:e9:9f:9f:0a:a7:cf:26:8a:a9:7c:b2:19:0d:a5:4a:48: fa:71:25:0d:8f:b2:49:71:f8:cd:1c:ea:cc:42:ec:76:28:bd: d9:d7:8d:62:e6:3e:e3:72:94:25:bd:b3:8a:c3:76:3b:64:69: dc:ea:3d:03:0e:d8:b3:fc:c9:10:36:81:86:d4:76:5e:06:75: 9d:70:2a:e1:05:37:9f:7c:60:29:50:8d:69:76:fd:8b:24:1f: e8:4e:cb:e2:17:cb:d4:48:02:2f:18:2f:c2:af:fc:8a:14:53: 3d:ae:b1:36:b8:b2:8b:88:17:a3:d8:8e:a6:2c:41:a8:df:de: fa:53:db:cc:95:ec:0b:3e:fe:01:d2:5b:c5:d6:d4:0b:63:8d: 53:98:91:ed:70:48:39:31:c1:ad:51:dd:da:82:e3:da:27:e1: 85:28:8e:d0:d8:84:41:12:1d:3e:8e:24:a5:31:58:66:a0:ee: df:95:33:88:cf:df:46:ef:20:f7:9b:78:ae:8d:e7:09:95:a5: 8b:a0:36:d5:6c:e4:4d:06:62:0e:4b:1a:0f:3f:2d:30:ed:cb: 21:e8:9d:5b:d3:97:09:28:be:d7:b2:80:27:b0:5e:26:6a:82: de:fe:f5:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pEsM3BazO9paYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Njk3NmYzMDAtMzkyYi00NWQ0LWI3ZjYtMWJhMTRkZmVhODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1GSxJ+5BNpJDfdK0uezEOoC0luExJwyPDBH sFLiA2F1+tvQFZ2BZWhAUVCuPozIFRFDn8I7vH6ctQR8z0M0JZj92nw5qTuoprpk xxl5zdEmOiCETfdzrFg99UKb0h0uKEyAOkTvg5XWkGb9XeovnyvhOBNBcx3D+wni 0BGB1GMKa3fmIM7VNej9hEny+4uaomwAc3NtfgxooYBYJIW2/hgL/1X3tuC5DoEx X2WG2BaUz7WALLN83o8TQGSutoJRhNctIeO0nrvZtpf71XkHRDLifOzatNQBn2on puFVvkLHveORKZy3MdqOFicHbG98LmnmzZdLanqOCtca+DALsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGnnXzmYcuGgbWXpUni1Y4SfaJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDk3OThmZTAtZDA3ZC0z ZWM5LWE4NmYtNmZkOWJjNjBhMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkb6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASLgTULR/i3KBOZbQK3IgyGQmGG6Z+fCqfPJoqpfLIZDaVKSPpxJQ2P sklx+M0c6sxC7HYovdnXjWLmPuNylCW9s4rDdjtkadzqPQMO2LP8yRA2gYbUdl4G dZ1wKuEFN598YClQjWl2/YskH+hOy+IXy9RIAi8YL8Kv/IoUUz2usTa4souIF6PY jqYsQajf3vpT28yV7As+/gHSW8XW1AtjjVOYke1wSDkxwa1R3dqC49on4YUojtDY hEESHT6OJKUxWGag7t+VM4jP30bvIPebeK6N5wmVpYugNtVs5E0GYg5LGg8/LTDt yyHonVvTlwkovteygCewXiZqgt7+9XU= -----END CERTIFICATE-----Generated at Thu Oct 16 01:57:36 2025 by rpki-client