$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df738c76-2fe3-3773-8f7b-f404f8d5033a.roa File: df738c76-2fe3-3773-8f7b-f404f8d5033a.roa (raw, json) Hash identifier: 2NvnzCUIqiDypPizWbKbfRugUm9IWETkPkB6WOec5RA= Subject key identifier: 13:7A:3D:B3:9E:37:05:56:A8:CA:97:86:1A:F1:5B:CB:BD:A3:39:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7581DC655EBCF9684140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df738c76-2fe3-3773-8f7b-f404f8d5033a.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:75:81:dc:65:5e:bc:f9:68:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=661eb568-06d4-44b8-a474-3ab563861f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:b9:c8:cd:b9:7d:01:29:cd:e6:43:43:ec: dd:32:4d:3e:09:8c:af:16:4d:ad:c0:9f:c9:14:1f: 7b:4f:02:57:7d:2a:da:99:ff:42:a6:0c:97:c5:a4: 03:ba:61:4d:ce:62:35:df:f8:69:8c:6e:31:64:4c: 7b:3e:28:69:d4:43:47:8f:10:3e:a4:ba:be:3e:58: a2:49:05:8a:3a:ec:df:6b:6e:19:18:92:4b:dd:b4: 1d:6a:f4:c9:33:9f:0a:7e:00:86:5b:dc:7c:13:ed: 80:57:76:1a:d2:2f:7c:7d:6c:5a:8b:01:ec:a9:f0: bb:f9:61:e7:cc:ab:a4:74:a4:7c:f1:53:88:2f:18: 10:60:7c:0c:f5:64:4f:60:30:22:70:56:b8:bf:51: e0:51:76:9d:74:b4:4e:fd:69:cb:9b:63:de:10:0a: 54:f1:41:8a:6d:55:71:80:66:c8:28:b0:cc:6a:a9: f2:9b:53:fc:d8:99:50:33:2e:7b:a3:70:91:38:45: 19:43:1e:c2:c1:16:e0:8f:26:06:1e:bc:6b:4b:ae: 2a:f1:24:2a:7f:e3:34:9f:dc:84:b7:3a:0d:b8:98: b6:78:11:1a:d7:47:a2:df:cb:cf:71:77:de:94:8a: fb:94:e6:2b:0f:0b:e8:38:8c:27:2f:78:f9:77:74: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7A:3D:B3:9E:37:05:56:A8:CA:97:86:1A:F1:5B:CB:BD:A3:39:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df738c76-2fe3-3773-8f7b-f404f8d5033a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:77:a2:ee:2e:64:4c:1b:21:60:75:a1:07:0b:74:dd:75:6e: 41:1b:6c:12:37:f5:de:68:dd:c5:13:dc:8c:52:2a:b0:1d:78: e4:44:c6:3b:4f:be:3e:7c:f5:8c:47:de:f8:e1:d3:dc:63:db: f9:2b:bd:68:ae:fa:55:f7:a6:76:79:81:03:ee:fb:99:42:3b: 49:f9:1a:33:62:d7:35:22:24:3c:cd:c8:54:76:04:bb:b5:af: b2:b9:e1:d2:50:8e:a3:6c:fa:e3:f0:9c:8b:f9:f1:e8:9e:da: 17:22:52:d5:81:7b:87:a7:46:53:b4:a7:6d:ee:f0:7f:10:ca: fa:56:d5:3e:fb:f8:09:e9:16:80:aa:b4:15:86:50:bc:b5:cc: 34:13:9e:47:0f:61:78:7c:6b:1d:ce:aa:b3:c2:3d:8d:20:70: e3:fa:5e:5b:74:4e:d2:dd:d9:b6:1d:2a:7e:3a:9b:62:23:e5: 83:3a:fa:b2:4c:ea:31:26:9b:a7:93:a7:3d:31:0f:6e:1e:5e: e8:ee:2a:76:92:c0:cc:0f:73:48:c3:97:1b:3b:d0:0b:83:b3: 55:c1:d7:b6:3e:43:b4:2b:a1:13:0d:d8:15:c0:ec:67:81:43: f8:d3:ad:ee:6e:2d:65:c1:42:ef:00:48:0b:0a:dd:7e:7e:df: 60:17:3b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHWB3GVevPloQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NjYxZWI1NjgtMDZkNC00NGI4LWE0NzQtM2FiNTYzODYxZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDi5yM25fQEpzeZDQ+zdMk0+CYyvFk2twJ/J FB97TwJXfSramf9CpgyXxaQDumFNzmI13/hpjG4xZEx7Pihp1ENHjxA+pLq+Plii SQWKOuzfa24ZGJJL3bQdavTJM58KfgCGW9x8E+2AV3Ya0i98fWxaiwHsqfC7+WHn zKukdKR88VOILxgQYHwM9WRPYDAicFa4v1HgUXaddLRO/WnLm2PeEApU8UGKbVVx gGbIKLDMaqnym1P82JlQMy57o3CROEUZQx7CwRbgjyYGHrxrS64q8SQqf+M0n9yE tzoNuJi2eBEa10ei38vPcXfelIr7lOYrDwvoOIwnL3j5d3Q4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN6PbOeNwVWqMqXhhrxW8u9oznxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGY3MzhjNzYtMmZlMy0z NzczLThmN2ItZjQwNGY4ZDUwMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd3ou4uZEwbIWB1oQcLdN11bkEbbBI39d5o3cUT3IxSKrAdeORExjtP vj589YxH3vjh09xj2/krvWiu+lX3pnZ5gQPu+5lCO0n5GjNi1zUiJDzNyFR2BLu1 r7K54dJQjqNs+uPwnIv58eie2hciUtWBe4enRlO0p23u8H8QyvpW1T77+AnpFoCq tBWGULy1zDQTnkcPYXh8ax3OqrPCPY0gcOP6Xlt0TtLd2bYdKn46m2Ij5YM6+rJM 6jEmm6eTpz0xD24eXujuKnaSwMwPc0jDlxs70AuDs1XB17Y+Q7QroRMN2BXA7GeB Q/jTre5uLWXBQu8ASAsK3X5+32AXO1s= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:26 2025 by rpki-client