$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9a271d9-3d1b-33d8-9a9f-a1e7d8ecda12.roa File: d9a271d9-3d1b-33d8-9a9f-a1e7d8ecda12.roa (raw, json) Hash identifier: dQSfXBJANWWNsu4bwWfK38xTQP/+l2+y1zSIHEiZU5I= Subject key identifier: 82:7B:C6:F1:A6:DA:28:9D:5C:93:E1:B6:9A:BC:5D:54:9F:A0:CC:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C6C442AE74182EF75F780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9a271d9-3d1b-33d8-9a9f-a1e7d8ecda12.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.172.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:6c:44:2a:e7:41:82:ef:75:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=e0f0863d-9a11-415f-980b-bf5606843834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:bf:b2:1b:f6:30:cf:5c:6d:36:17:94:0d: 7c:bd:d6:ce:26:b7:ca:22:de:69:22:57:d6:1f:dd: 1e:fe:aa:69:72:60:50:31:a5:da:52:43:75:7e:2e: c5:af:99:f4:c7:c8:da:c9:b1:bc:1f:2c:8d:2e:39: 2c:08:29:5b:89:24:e5:55:bb:af:66:18:d7:ac:66: c5:98:8f:f9:9b:37:30:0d:61:a7:89:d5:95:d1:f7: 99:3d:b5:9b:61:48:57:3c:d1:e6:63:6b:81:2f:5d: 77:15:12:b4:bb:9a:df:92:f1:9d:25:b6:39:c1:cc: 94:de:8d:d4:7d:ed:ba:ec:de:ea:3c:2e:c1:65:93: 99:70:13:60:1c:8c:56:5b:76:4c:72:2b:f6:68:c1: 0a:d8:dd:0b:19:84:35:9a:97:1f:0b:82:24:04:8e: c8:dc:9e:c2:4a:8f:36:33:38:19:5d:20:46:82:c3: 5e:bd:13:8b:bd:fa:09:03:cf:9f:4e:27:33:f5:fe: b5:10:f6:e1:c6:26:89:40:e2:ba:ee:7c:c6:23:4e: f1:75:7d:61:c9:1e:f4:77:23:91:74:95:74:3d:9a: b8:06:63:61:9f:a2:3f:c4:77:81:51:b5:ca:76:75: 55:59:72:2b:43:24:9e:a4:46:fc:00:c8:f5:04:e0: 75:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7B:C6:F1:A6:DA:28:9D:5C:93:E1:B6:9A:BC:5D:54:9F:A0:CC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9a271d9-3d1b-33d8-9a9f-a1e7d8ecda12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e5:c8:8d:e3:46:a5:bd:8f:3a:6b:9d:d9:f5:6b:c7:04:37: ba:d4:68:a0:ca:b9:b6:2f:cc:09:8d:9c:9a:d9:05:bb:64:30: fe:73:f8:03:dd:21:d1:c7:43:6d:19:ca:5a:90:54:43:0c:f3: 48:69:e4:52:a8:48:35:18:c9:ac:2d:6e:33:8b:f6:5e:33:f0: b9:d5:be:1b:e4:31:f3:6f:94:fb:91:1f:12:6e:95:87:2f:b5: 22:db:1f:1d:c4:a8:ba:1f:82:4d:3e:8f:71:e1:d4:7f:68:e6: 6b:7f:bb:51:3a:c1:1e:23:c3:df:37:67:2f:25:b8:73:fb:ec: 6b:29:b3:c2:ef:4a:37:2c:17:84:59:08:e7:01:09:ef:d9:ac: bc:42:fb:db:31:9f:14:a7:f9:47:00:0e:4e:89:d8:ca:48:65: c5:75:af:ee:cd:29:d6:b4:0b:6b:06:24:59:f2:25:fd:ef:8c: 33:0b:16:5e:eb:61:f7:d4:1f:31:f2:ca:e5:bc:06:b1:97:b8: dd:65:54:e6:da:10:44:ec:6d:8f:f1:a3:c6:f7:57:a7:bb:0f: a3:05:27:9a:8b:c4:8f:3d:cf:81:70:fb:34:79:14:4b:88:77: f6:6e:40:48:dd:cb:46:20:46:b8:6d:bc:8a:50:0d:e2:5d:c4: bc:3c:2b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGxEKudBgu9194AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTBmMDg2M2QtOWExMS00MTVmLTk4MGItYmY1NjA2ODQzODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNG/shv2MM9cbTYXlA18vdbOJrfKIt5pIlfW H90e/qppcmBQMaXaUkN1fi7Fr5n0x8jaybG8HyyNLjksCClbiSTlVbuvZhjXrGbF mI/5mzcwDWGnidWV0feZPbWbYUhXPNHmY2uBL113FRK0u5rfkvGdJbY5wcyU3o3U fe267N7qPC7BZZOZcBNgHIxWW3ZMciv2aMEK2N0LGYQ1mpcfC4IkBI7I3J7CSo82 MzgZXSBGgsNevROLvfoJA8+fTicz9f61EPbhxiaJQOK67nzGI07xdX1hyR70dyOR dJV0PZq4BmNhn6I/xHeBUbXKdnVVWXIrQySepEb8AMj1BOB1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJ7xvGm2iidXJPhtpq8XVSfoMzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDlhMjcxZDktM2QxYi0z M2Q4LTlhOWYtYTFlN2Q4ZWNkYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjlyI3jRqW9jzprndn1a8cEN7rUaKDKubYvzAmNnJrZBbtkMP5z+APd IdHHQ20ZylqQVEMM80hp5FKoSDUYyawtbjOL9l4z8LnVvhvkMfNvlPuRHxJulYcv tSLbHx3EqLofgk0+j3Hh1H9o5mt/u1E6wR4jw983Zy8luHP77Gsps8LvSjcsF4RZ COcBCe/ZrLxC+9sxnxSn+UcADk6J2MpIZcV1r+7NKda0C2sGJFnyJf3vjDMLFl7r YffUHzHyyuW8BrGXuN1lVObaEETsbY/xo8b3V6e7D6MFJ5qLxI89z4Fw+zR5FEuI d/ZuQEjdy0YgRrhtvIpQDeJdxLw8K50= -----END CERTIFICATE-----Generated at Thu Oct 16 01:30:43 2025 by rpki-client