$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df37faab-4d60-354a-8f94-dd6487b3edc0.roa File: df37faab-4d60-354a-8f94-dd6487b3edc0.roa (raw, json) Hash identifier: F++V9aJojs1ELKtN6n66fbKxu9KVkyS5Tw9RAnz0dws= Subject key identifier: D7:47:AF:33:B5:CE:51:6B:88:4D:EA:00:D9:5F:F2:CC:8F:BA:49:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671AE77B369B7D1F324FC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df37faab-4d60-354a-8f94-dd6487b3edc0.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1a:e7:7b:36:9b:7d:1f:32:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=9814c71d-2fa1-4f61-a495-9c44c6d472d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:f7:a9:00:7e:d6:c1:04:59:d8:59:d1:ca: 94:d9:ff:dd:59:96:c8:d7:27:56:50:c5:ee:fb:13: c2:96:e3:7d:db:cb:27:5f:1d:05:50:ed:83:c0:ac: cc:9a:2a:de:c6:97:03:ff:0c:9a:b2:91:ac:5e:3c: dc:0a:c3:e2:a1:ea:a7:88:ef:c1:44:31:75:fc:c7: 43:d7:57:3a:59:c0:9d:0d:4b:4e:c3:3e:e0:48:36: a9:8d:56:60:12:51:e9:10:48:df:ba:df:8a:ab:9e: 0f:a4:06:4a:08:46:ae:f1:19:9f:4b:5c:a6:2c:6f: 50:4a:8b:f7:9f:6f:6f:ff:f7:da:ae:75:27:e0:a1: b7:3f:30:96:2a:0b:4d:32:ab:59:16:07:ac:e3:4e: 4c:d6:7f:eb:36:31:08:ba:4d:64:18:eb:cf:28:1b: 4d:79:a2:17:12:38:e9:21:73:9d:6b:df:b4:77:20: ad:7f:a7:78:48:4b:8d:c8:59:41:77:56:89:c6:e6: ff:0f:0b:eb:8d:aa:8b:08:23:5a:a5:e7:28:d3:4f: 5b:ee:16:1c:03:32:42:f1:8c:b6:db:ca:b6:f4:56: a2:65:5d:c3:f5:f3:b3:2e:82:d6:63:df:f1:29:de: d4:d6:ae:77:a8:79:c2:ad:aa:ff:ce:7b:16:8a:23: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:47:AF:33:B5:CE:51:6B:88:4D:EA:00:D9:5F:F2:CC:8F:BA:49:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df37faab-4d60-354a-8f94-dd6487b3edc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d1:22:0e:e7:3e:9b:21:a3:18:e1:f0:ba:0c:fa:21:a2:bc: 35:65:45:d5:ba:27:8f:38:0e:b3:32:30:86:18:e1:ba:dd:0f: 48:3b:0b:33:08:35:d0:60:b7:71:84:8c:77:76:ae:2a:2a:2f: 3c:79:41:fd:88:6f:0b:70:a1:df:80:5b:4d:3f:c7:42:f6:61: 9e:4e:9e:36:e9:89:06:6b:e4:a5:8a:b9:14:11:7b:27:8a:d2: 21:af:17:26:52:e0:c5:63:7a:50:95:91:32:9d:0c:9c:a7:17: ac:53:f3:ce:40:bc:d8:c9:4b:98:07:ff:78:5a:72:8d:a2:83: 69:d9:29:e3:57:76:ab:75:c6:6d:24:65:68:3e:68:15:49:6c: 00:dd:38:bc:93:3f:c6:42:04:6e:38:99:d6:f8:57:33:ee:61: ae:88:ea:e7:5c:ce:62:dc:db:4b:c4:7c:89:63:90:7a:b9:db: 92:b0:51:0c:d7:8e:e6:b9:32:dc:ec:1b:c8:35:23:49:3c:d6: ab:e9:71:1f:21:fc:e0:01:8d:61:91:4e:b8:df:25:cb:f5:70: 0c:0c:64:f3:cb:ae:68:75:e2:fa:63:a1:5b:c3:24:b6:17:90: 14:92:52:eb:e6:a4:b0:e3:a3:ac:02:6b:86:ec:87:10:0e:cc: ee:d3:77:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxrnezabfR8yT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OTgxNGM3MWQtMmZhMS00ZjYxLWE0OTUtOWM0NGM2ZDQ3MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIT3qQB+1sEEWdhZ0cqU2f/dWZbI1ydWUMXu +xPCluN928snXx0FUO2DwKzMmirexpcD/wyaspGsXjzcCsPioeqniO/BRDF1/MdD 11c6WcCdDUtOwz7gSDapjVZgElHpEEjfut+Kq54PpAZKCEau8RmfS1ymLG9QSov3 n29v//farnUn4KG3PzCWKgtNMqtZFges405M1n/rNjEIuk1kGOvPKBtNeaIXEjjp IXOda9+0dyCtf6d4SEuNyFlBd1aJxub/DwvrjaqLCCNapeco009b7hYcAzJC8Yy2 28q29FaiZV3D9fOzLoLWY9/xKd7U1q53qHnCrar/znsWiiMUiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdHrzO1zlFriE3qANlf8syPukloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGYzN2ZhYWItNGQ2MC0z NTRhLThmOTQtZGQ2NDg3YjNlZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXRIg7nPpshoxjh8LoM+iGivDVlRdW6J484DrMyMIYY4brdD0g7CzMI NdBgt3GEjHd2rioqLzx5Qf2Ibwtwod+AW00/x0L2YZ5OnjbpiQZr5KWKuRQReyeK 0iGvFyZS4MVjelCVkTKdDJynF6xT885AvNjJS5gH/3haco2ig2nZKeNXdqt1xm0k ZWg+aBVJbADdOLyTP8ZCBG44mdb4VzPuYa6I6udczmLc20vEfIljkHq525KwUQzX jua5MtzsG8g1I0k81qvpcR8h/OABjWGRTrjfJcv1cAwMZPPLrmh14vpjoVvDJLYX kBSSUuvmpLDjo6wCa4bshxAOzO7Td+U= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:43 2025 by rpki-client