$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de1bc61f-f581-35cb-8ea3-ea98a068e898.roa File: de1bc61f-f581-35cb-8ea3-ea98a068e898.roa (raw, json) Hash identifier: a/IuP3IpoiWr276sN3gKZwL2Ng0S3ejhRCgybq075zg= Subject key identifier: 95:5A:FB:AB:84:7C:C5:FB:0E:34:B2:2C:71:0C:37:A3:3B:D9:FB:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2409A4AAB50B86AABEA20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de1bc61f-f581-35cb-8ea3-ea98a068e898.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.172.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:40:9a:4a:ab:50:b8:6a:ab:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6e0e9770-c6a0-4e3f-b9b9-5f09d2acd872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9d:7e:2c:27:07:97:80:77:4e:2c:53:96:d8: 16:99:08:d4:2b:b4:c5:21:11:2c:1a:82:7b:20:2c: 2e:9c:7a:5d:5a:3f:a8:07:90:32:f0:4a:6c:42:fc: e0:c5:b0:68:76:3b:63:36:e5:df:8c:6b:d2:3a:98: 68:17:aa:9c:20:79:15:c5:c0:0d:a9:ee:ea:25:e3: 57:e7:60:84:9d:41:4b:33:e8:d3:7f:38:f7:ec:f7: 42:49:8b:c7:54:d3:3a:04:76:d9:29:9a:84:0e:62: b2:9e:90:24:88:a3:89:b6:12:9f:fc:f0:b3:54:dc: 19:bc:a9:ce:50:40:a2:a9:19:f0:2c:22:65:14:d3: 05:cb:c0:ad:cb:1b:47:3d:14:f3:cf:40:39:86:ca: 8e:f3:19:40:04:00:8b:2a:38:76:79:88:7b:9e:b0: 08:e1:88:8d:c7:60:ef:f1:33:48:ee:8e:40:b5:b3: fd:f3:bf:08:2d:43:f9:e9:2c:11:0e:a5:40:d9:29: 78:95:28:d1:68:ec:50:6b:2b:33:e7:99:17:7f:7b: f2:0c:1a:8c:fe:22:f2:d6:e1:d8:78:0d:77:c3:5e: ac:db:05:92:47:d4:ce:e3:01:32:69:f8:69:b4:55: 2f:03:c2:05:fe:b8:bd:26:e5:02:d4:5d:b2:53:b9: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5A:FB:AB:84:7C:C5:FB:0E:34:B2:2C:71:0C:37:A3:3B:D9:FB:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de1bc61f-f581-35cb-8ea3-ea98a068e898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d7:da:4c:7f:d3:48:f5:b3:2a:be:f0:78:d9:96:e7:88:ea: df:7b:3d:8d:eb:67:c6:de:a0:a5:81:d9:b9:0b:45:3c:99:36: d5:82:88:83:fa:05:2c:b1:93:f0:7f:4c:3c:ea:c9:7b:03:7c: 30:b1:82:9c:14:a2:21:dd:d0:cd:11:a6:a7:5e:e3:bb:27:d1: 8a:53:d7:96:b5:00:9d:b9:37:40:e1:3a:10:8e:06:23:b6:e4: 9a:32:38:0c:97:e2:07:0a:35:9f:aa:1a:24:4d:33:f3:d2:1b: 8d:95:b4:8d:2e:bf:c2:7d:65:ca:9d:1e:47:bb:a9:1d:be:21: 61:af:16:1f:a2:f1:9e:2c:66:f8:cb:31:8c:f0:14:87:1b:58: 6d:08:24:78:2f:6a:9d:07:89:62:8d:63:30:51:6b:5b:42:d4: 8d:71:a5:c0:13:dc:7a:7a:a0:16:10:d3:19:b9:29:8e:42:de: f5:63:44:17:35:4d:b8:b9:44:74:50:30:47:6f:60:2e:ed:0b: 73:bd:cb:3b:c5:17:32:ff:6b:2d:d6:90:56:5f:99:9b:c2:0d: 7e:d3:68:19:85:8d:63:37:ad:f6:5a:04:e0:24:f9:88:c7:8d: 6f:e7:82:40:80:b8:55:01:e2:77:25:09:d0:b4:41:2f:b8:85: e1:2f:7a:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kCaSqtQuGqr6iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NmUwZTk3NzAtYzZhMC00ZTNmLWI5YjktNWYwOWQyYWNkODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z1+LCcHl4B3TixTltgWmQjUK7TFIREsGoJ7 ICwunHpdWj+oB5Ay8EpsQvzgxbBodjtjNuXfjGvSOphoF6qcIHkVxcANqe7qJeNX 52CEnUFLM+jTfzj37PdCSYvHVNM6BHbZKZqEDmKynpAkiKOJthKf/PCzVNwZvKnO UECiqRnwLCJlFNMFy8CtyxtHPRTzz0A5hsqO8xlABACLKjh2eYh7nrAI4YiNx2Dv 8TNI7o5AtbP9878ILUP56SwRDqVA2Sl4lSjRaOxQaysz55kXf3vyDBqM/iLy1uHY eA13w16s2wWSR9TO4wEyafhptFUvA8IF/ri9JuUC1F2yU7nLwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVa+6uEfMX7DjSyLHEMN6M72fuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGUxYmM2MWYtZjU4MS0z NWNiLThlYTMtZWE5OGEwNjhlODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrX2kx/00j1syq+8HjZlueI6t97PY3rZ8beoKWB2bkLRTyZNtWCiIP6 BSyxk/B/TDzqyXsDfDCxgpwUoiHd0M0Rpqde47sn0YpT15a1AJ25N0DhOhCOBiO2 5JoyOAyX4gcKNZ+qGiRNM/PSG42VtI0uv8J9ZcqdHke7qR2+IWGvFh+i8Z4sZvjL MYzwFIcbWG0IJHgvap0HiWKNYzBRa1tC1I1xpcAT3Hp6oBYQ0xm5KY5C3vVjRBc1 Tbi5RHRQMEdvYC7tC3O9yzvFFzL/ay3WkFZfmZvCDX7TaBmFjWM3rfZaBOAk+YjH jW/ngkCAuFUB4nclCdC0QS+4heEvel4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:54:23 2025 by rpki-client