$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddbb54a1-a7ec-3895-91d5-69d1137e2d34.roa File: ddbb54a1-a7ec-3895-91d5-69d1137e2d34.roa (raw, json) Hash identifier: BiB+2nVXxBh9OEAodKLO9te+/ufma3uSvpnAMBNqVu8= Subject key identifier: 63:56:4B:5C:CA:C7:52:1C:B1:8D:58:77:EF:72:AA:3B:14:81:E3:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C72E7A66D46F05505F380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddbb54a1-a7ec-3895-91d5-69d1137e2d34.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:72:e7:a6:6d:46:f0:55:05:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=399b30ed-d2af-4db3-aac6-15f635a48658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:26:54:29:e6:a1:35:30:63:19:72:c4:25: 55:ff:5c:d5:ed:56:cc:5c:55:98:3a:d9:6b:9e:2a: 22:8d:1e:c8:c3:44:b0:bf:01:f8:2f:d3:5e:11:6d: e3:ac:01:5e:15:54:20:1e:c3:19:79:75:f3:27:35: 95:89:2c:a7:0a:23:21:2e:e0:67:8f:71:f0:6d:ac: 11:53:f9:cb:77:89:1c:05:20:85:67:95:cd:81:a4: 90:62:ac:1a:6a:88:ee:35:4b:11:41:12:fd:39:69: a1:5a:b9:09:32:2c:83:34:a0:81:37:77:6a:29:86: f8:88:68:ca:06:7f:2b:64:55:f7:d8:e0:0c:00:90: 97:f7:32:3a:ad:4d:80:7a:01:10:2c:27:30:9b:e7: 65:18:f8:06:09:c5:c1:b1:67:6c:f0:fc:02:3a:f9: 2e:b6:d7:ad:21:f2:08:57:d6:e3:0a:81:82:dc:47: dc:ab:ec:63:9d:71:26:ff:a4:ac:6a:47:7f:ba:89: a8:c2:1a:40:ef:52:58:2b:72:36:10:a3:29:d3:58: a5:36:d2:3c:b7:67:40:91:0c:ef:03:78:74:71:18: d9:17:c0:7b:22:09:84:29:2b:38:88:41:97:98:63: 45:6d:c4:7e:c0:a0:d1:3a:4e:49:cb:62:5e:39:3d: f5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:56:4B:5C:CA:C7:52:1C:B1:8D:58:77:EF:72:AA:3B:14:81:E3:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddbb54a1-a7ec-3895-91d5-69d1137e2d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bf:89:c4:e3:22:7a:9f:a7:bb:66:2f:ad:3f:c8:7b:fb:9a: 7c:d8:bd:4f:94:86:81:b9:06:94:ea:66:94:50:3f:35:25:fc: 96:8c:97:80:ea:8a:a6:e7:93:9a:1a:37:46:f9:79:d8:fa:74: 6c:4a:21:05:83:e6:44:bc:e0:20:b1:e2:6d:23:e3:47:4d:07: 46:a1:44:1d:72:17:56:90:a5:9c:4b:15:33:e6:bd:24:da:44: 97:93:f8:95:78:dd:20:5a:56:25:29:8b:39:d7:79:41:7a:c9: cc:2f:1c:8f:14:a2:a5:c5:b7:18:3c:09:e4:55:bc:0b:48:a7: ae:b2:54:9e:47:72:24:3f:0e:79:33:3a:91:33:ba:dd:69:d3: 71:b2:2a:14:67:11:45:87:d3:51:16:72:7c:14:e5:5e:8d:be: 2a:2a:ff:2d:24:36:15:a7:f6:a6:0f:92:1f:62:21:64:f7:cc: 58:b0:c8:7c:69:57:8c:d6:5f:52:1f:67:f5:7f:6d:8e:06:b6: 16:ab:c9:31:3f:93:ca:29:77:9e:83:06:dd:a6:9e:1b:09:f5: bb:95:4a:bb:23:f0:3b:71:a2:db:42:4c:45:3c:fb:c8:9c:90: 1b:bf:d8:52:ef:75:34:53:ef:b0:7f:9b:4f:08:f3:d0:f9:ef: cc:d2:c7:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHLnpm1G8FUF84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk Mzk5YjMwZWQtZDJhZi00ZGIzLWFhYzYtMTVmNjM1YTQ4NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqQmVCnmoTUwYxlyxCVV/1zV7VbMXFWYOtlr nioijR7Iw0SwvwH4L9NeEW3jrAFeFVQgHsMZeXXzJzWViSynCiMhLuBnj3HwbawR U/nLd4kcBSCFZ5XNgaSQYqwaaojuNUsRQRL9OWmhWrkJMiyDNKCBN3dqKYb4iGjK Bn8rZFX32OAMAJCX9zI6rU2AegEQLCcwm+dlGPgGCcXBsWds8PwCOvkuttetIfII V9bjCoGC3Efcq+xjnXEm/6Ssakd/uomowhpA71JYK3I2EKMp01ilNtI8t2dAkQzv A3h0cRjZF8B7IgmEKSs4iEGXmGNFbcR+wKDROk5Jy2JeOT31YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNWS1zKx1IcsY1Yd+9yqjsUgeNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRiYjU0YTEtYTdlYy0z ODk1LTkxZDUtNjlkMTEzN2UyZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy/icTjInqfp7tmL60/yHv7mnzYvU+UhoG5BpTqZpRQPzUl/JaMl4Dq iqbnk5oaN0b5edj6dGxKIQWD5kS84CCx4m0j40dNB0ahRB1yF1aQpZxLFTPmvSTa RJeT+JV43SBaViUpiznXeUF6ycwvHI8UoqXFtxg8CeRVvAtIp66yVJ5HciQ/Dnkz OpEzut1p03GyKhRnEUWH01EWcnwU5V6Nvioq/y0kNhWn9qYPkh9iIWT3zFiwyHxp V4zWX1IfZ/V/bY4GtharyTE/k8opd56DBt2mnhsJ9buVSrsj8DtxottCTEU8+8ic kBu/2FLvdTRT77B/m08I89D578zSx1U= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:49 2025 by rpki-client