$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dfff669d-c7d3-3993-8802-3bcd73e650e8.roa File: dfff669d-c7d3-3993-8802-3bcd73e650e8.roa (raw, json) Hash identifier: ZOn+m/rroxw/CpzVzZVH7qoZ6FQJJwdVt5mQPKtG65Y= Subject key identifier: 17:B4:8F:BC:4F:65:3E:75:06:04:45:07:53:BF:CE:EE:1F:94:5F:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C659F0D41AE2E15061B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dfff669d-c7d3-3993-8802-3bcd73e650e8.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.163.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:65:9f:0d:41:ae:2e:15:06:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=d99de140-8907-413e-85e7-d5c32a963b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cb:6e:47:cd:f8:0b:31:43:5f:bc:bd:21:6a: 19:45:d7:cd:dd:d2:87:8a:53:db:fa:06:18:6b:4d: 6d:35:d9:1f:fb:bf:a8:a3:f8:bc:b4:c6:87:f0:72: 43:03:a1:80:a1:b1:b8:c1:50:bf:26:db:f5:a6:ba: 3c:81:51:b4:a3:2a:dc:e8:e1:34:44:b9:a8:c6:53: 41:f9:43:dd:27:6b:86:76:d0:bc:a7:df:c8:c1:18: 9a:cc:aa:2f:56:63:65:82:3c:c6:81:d5:22:3c:f1: 3f:dc:c1:17:8a:e4:1b:b9:a2:69:ee:15:96:ce:2e: 4b:2c:1b:53:af:35:96:fe:67:7d:88:4a:86:92:1a: 26:b7:5e:9a:0d:07:72:2f:17:9d:3f:c7:4a:ca:98: ac:92:1a:d4:e6:ba:4a:62:a3:9e:8f:45:01:1f:ed: cf:93:88:81:21:3f:4b:f4:2e:5d:9e:0c:bc:f5:95: 67:55:5d:0f:1b:16:c9:41:09:5f:cf:00:55:bc:a0: c3:69:8f:cb:5d:b0:a7:ed:91:ab:e8:11:22:53:e3: 22:a1:55:7a:2b:3e:1e:b7:67:4e:f3:1c:0b:0b:01: cd:d4:86:65:8d:8f:96:19:5a:94:1f:8c:23:a8:78: dc:b4:d1:ca:9e:e6:80:e3:22:7f:e2:c4:c9:58:29: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:8F:BC:4F:65:3E:75:06:04:45:07:53:BF:CE:EE:1F:94:5F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dfff669d-c7d3-3993-8802-3bcd73e650e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.163.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:29:af:ac:2f:23:da:fb:9f:cd:1c:22:81:56:41:1a:2b:c1: 8a:e2:8f:af:20:38:18:ba:a9:fb:62:bd:77:cf:a8:f0:4c:3c: da:dd:74:b0:50:eb:1d:00:2b:d3:df:8b:d8:ae:6d:6b:7f:f9: 71:b4:a8:1c:aa:ff:19:bd:65:fe:bc:04:17:89:52:a8:94:e8: 8b:f8:11:31:8a:e9:32:98:ff:4b:64:4a:19:09:c2:34:67:ec: 56:ea:95:d5:c8:9c:c6:49:01:88:76:93:5e:24:a8:ac:72:1a: 8b:fe:af:9b:bf:29:ff:ff:db:52:35:d0:9a:2f:f5:6a:33:c5: 7e:ba:4b:e8:38:8e:8e:a9:18:c0:62:5a:75:56:84:0c:8a:86: a2:15:64:fe:06:e5:28:d8:8f:b6:90:e6:2d:e1:12:72:3f:00: 55:89:dd:93:50:e1:ee:bc:86:a9:d4:ae:60:6c:04:20:86:63: 3f:f8:ff:51:a9:ce:e5:e9:bb:59:40:54:fe:67:7c:a4:6d:9c: 3e:a2:34:22:0e:56:06:f2:8f:65:cb:c9:93:cb:46:16:e8:34: 16:2b:6d:62:c9:c0:26:3c:29:c5:2c:bc:9d:e9:9b:50:6b:97: b5:a9:71:20:8d:05:d4:a5:e6:be:3f:b1:a1:50:65:5d:63:ac: d3:b7:ad:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGWfDUGuLhUGG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDk5ZGUxNDAtODkwNy00MTNlLTg1ZTctZDVjMzJhOTYzYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMtuR834CzFDX7y9IWoZRdfN3dKHilPb+gYY a01tNdkf+7+oo/i8tMaH8HJDA6GAobG4wVC/Jtv1pro8gVG0oyrc6OE0RLmoxlNB +UPdJ2uGdtC8p9/IwRiazKovVmNlgjzGgdUiPPE/3MEXiuQbuaJp7hWWzi5LLBtT rzWW/md9iEqGkhomt16aDQdyLxedP8dKypiskhrU5rpKYqOej0UBH+3Pk4iBIT9L 9C5dngy89ZVnVV0PGxbJQQlfzwBVvKDDaY/LXbCn7ZGr6BEiU+MioVV6Kz4et2dO 8xwLCwHN1IZljY+WGVqUH4wjqHjctNHKnuaA4yJ/4sTJWCnn1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe0j7xPZT51BgRFB1O/zu4flF+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGZmZjY2OWQtYzdkMy0z OTkzLTg4MDItM2JjZDczZTY1MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqOWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4pr6wvI9r7n80cIoFWQRorwYrij68gOBi6qftivXfPqPBMPNrddLBQ 6x0AK9Pfi9iubWt/+XG0qByq/xm9Zf68BBeJUqiU6Iv4ETGK6TKY/0tkShkJwjRn 7FbqldXInMZJAYh2k14kqKxyGov+r5u/Kf//21I10Jov9WozxX66S+g4jo6pGMBi WnVWhAyKhqIVZP4G5SjYj7aQ5i3hEnI/AFWJ3ZNQ4e68hqnUrmBsBCCGYz/4/1Gp zuXpu1lAVP5nfKRtnD6iNCIOVgbyj2XLyZPLRhboNBYrbWLJwCY8KcUsvJ3pm1Br l7WpcSCNBdSl5r4/saFQZV1jrNO3reY= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:43 2025 by rpki-client