$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e696ed8b-7967-3936-9e45-2a4c196cd69d.roa File: e696ed8b-7967-3936-9e45-2a4c196cd69d.roa (raw, json) Hash identifier: bWnzVjyD+Zv4PGBal15/OIW33jRt/eaMvZV5V9LgQWw= Subject key identifier: D2:F5:9D:E9:17:7E:F2:25:73:22:2A:F8:78:37:03:07:17:4C:09:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B80B77EB2A0E4AFE157D92780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e696ed8b-7967-3936-9e45-2a4c196cd69d.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 19905 IP address blocks: 70.165.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7e:b2:a0:e4:af:e1:57:d9:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=72b64cb3-c771-400f-806b-ad4f06a608cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0b:29:82:2c:86:67:32:37:7f:3e:0c:64:b0: 14:e9:ae:d7:76:48:31:c1:68:74:69:de:67:f6:cf: cd:1d:74:7f:dd:40:3c:31:ec:0c:f4:61:a2:9c:98: 40:cb:43:0e:40:51:f6:05:11:9f:b5:e5:90:e5:fd: 3f:c9:ea:9a:d4:92:67:26:0d:63:e4:2d:01:b4:6d: ad:72:fa:a4:1a:4e:d9:11:b4:dc:98:ef:47:d6:99: 09:b5:61:20:bf:b4:69:e0:6d:76:df:40:45:aa:aa: 7e:41:e9:d5:86:ac:9f:33:33:0d:66:db:cb:10:20: 5e:34:ef:18:c0:a6:43:56:af:4e:78:99:14:4e:2c: ef:15:1f:b1:be:df:09:3a:71:96:00:28:45:e0:86: 20:76:37:01:04:a1:7e:e5:ec:a0:04:1d:92:59:9a: 9e:22:57:d9:c9:f3:d8:2f:56:62:fe:a3:15:5b:09: 34:38:8d:11:ae:51:3e:dd:2f:87:df:30:7d:95:92: 95:38:ff:74:39:1d:bd:63:84:00:3e:16:fc:cc:2c: c5:d8:20:c5:53:84:74:1e:64:aa:71:ca:2a:53:84: e9:ea:ff:de:27:cd:56:83:fd:d2:cb:45:0b:86:df: f5:04:3a:bb:bd:d9:ee:2e:34:be:e8:75:0f:2b:ff: 8a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F5:9D:E9:17:7E:F2:25:73:22:2A:F8:78:37:03:07:17:4C:09:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e696ed8b-7967-3936-9e45-2a4c196cd69d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:07:01:b4:e6:de:f9:42:4e:9c:42:28:92:b9:10:0e:72:fe: ff:be:16:49:c4:4d:06:df:0b:f2:d9:18:a8:ae:88:33:34:69: f1:a4:7a:e1:9e:64:8c:fb:ee:ec:6c:2f:07:38:78:30:0e:f0: f3:18:97:e8:bc:55:6c:77:33:eb:a6:29:77:76:cc:a5:ae:21: 5b:c7:5e:40:32:db:95:1a:3d:76:1c:02:75:77:14:ae:7d:e4: 95:b8:c0:19:fc:9b:07:1e:c4:83:5b:03:69:7a:87:2c:e4:53: 6f:b2:8e:59:57:dd:8c:7c:57:c0:37:c9:cd:ad:6d:9e:8b:b1: ca:cd:b9:35:ac:6b:99:a9:97:d3:67:a1:43:eb:e3:9a:94:b0: f9:32:bf:2c:0b:9a:9f:de:ee:48:00:7d:8f:e1:6c:f1:3f:2e: ae:47:8b:ef:ea:24:ad:83:65:2d:36:da:b5:52:76:59:2c:fb: 61:ce:f0:b5:8e:6e:b9:ac:c0:d5:7e:1e:9f:1b:08:2a:a5:48: 57:49:d2:fd:22:17:75:7e:5d:ef:64:b6:df:d1:7e:80:b8:a3: 8c:2e:3f:aa:a4:c5:e8:9b:88:76:fa:0c:e7:cf:0a:2a:5d:85: 69:38:62:87:92:f1:a8:8d:80:ab:b0:7d:86:a3:d7:10:3f:b1: cb:d5:ef:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt36yoOSv4VfZJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NzJiNjRjYjMtYzc3MS00MDBmLTgwNmItYWQ0ZjA2YTYwOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAspgiyGZzI3fz4MZLAU6a7XdkgxwWh0ad5n 9s/NHXR/3UA8MewM9GGinJhAy0MOQFH2BRGfteWQ5f0/yeqa1JJnJg1j5C0BtG2t cvqkGk7ZEbTcmO9H1pkJtWEgv7Rp4G1230BFqqp+QenVhqyfMzMNZtvLECBeNO8Y wKZDVq9OeJkUTizvFR+xvt8JOnGWAChF4IYgdjcBBKF+5eygBB2SWZqeIlfZyfPY L1Zi/qMVWwk0OI0RrlE+3S+H3zB9lZKVOP90OR29Y4QAPhb8zCzF2CDFU4R0HmSq ccoqU4Tp6v/eJ81Wg/3Sy0ULht/1BDq7vdnuLjS+6HUPK/+KMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL1nekXfvIlcyIq+Hg3AwcXTAmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTY5NmVkOGItNzk2Ny0z OTM2LTllNDUtMmE0YzE5NmNkNjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8HAbTm3vlCTpxCKJK5EA5y/v++FknETQbfC/LZGKiuiDM0afGkeuGe ZIz77uxsLwc4eDAO8PMYl+i8VWx3M+umKXd2zKWuIVvHXkAy25UaPXYcAnV3FK59 5JW4wBn8mwcexINbA2l6hyzkU2+yjllX3Yx8V8A3yc2tbZ6LscrNuTWsa5mpl9Nn oUPr45qUsPkyvywLmp/e7kgAfY/hbPE/Lq5Hi+/qJK2DZS022rVSdlks+2HO8LWO brmswNV+Hp8bCCqlSFdJ0v0iF3V+Xe9ktt/RfoC4o4wuP6qkxeibiHb6DOfPCipd hWk4YoeS8aiNgKuwfYaj1xA/scvV77M= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:46 2025 by rpki-client