$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec959914-dfb4-3a31-9ac4-21d16e29252e.roa File: ec959914-dfb4-3a31-9ac4-21d16e29252e.roa (raw, json) Hash identifier: M4AkI+zPEYKIMJ8o7Y4engoAYrSpqCcHXkiSUAyf/Io= Subject key identifier: 20:9D:74:20:9F:B7:5E:B0:5C:A6:66:98:CF:BF:DD:CD:B6:4C:FE:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670447B290676A56DE5780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec959914-dfb4-3a31-9ac4-21d16e29252e.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:04:47:b2:90:67:6a:56:de:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=986219c6-847a-489e-9d89-918065a940d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:63:a7:f1:e3:7e:98:af:e2:75:1a:2e:2b: f9:d6:09:bb:c4:6f:7d:5f:b2:fa:83:e2:de:94:eb: 1c:8c:93:66:1c:23:4c:ee:47:cd:3b:66:ef:5a:50: 7f:72:cd:1f:46:b8:00:0b:5e:0b:68:7a:c2:b7:c1: d8:19:e4:a2:f3:3e:66:d8:da:b0:da:46:2c:dd:26: ef:47:42:b6:84:3c:83:ed:05:d5:c9:2e:a0:37:f4: af:b5:72:45:04:78:3b:95:7f:9e:d5:bb:30:af:54: d2:bc:3f:dc:76:27:e4:27:1b:00:22:f9:7c:41:18: 2b:f7:12:d4:e6:4f:bc:36:15:49:ce:f3:5f:86:90: 93:40:58:34:91:0b:8c:f9:c0:ea:10:cb:02:10:11: c0:e5:8e:87:4d:24:36:b3:a5:3b:74:d4:da:7a:cf: 96:28:b9:8e:7e:c8:65:06:5b:e6:11:79:6e:3e:0c: 87:d3:4c:a3:3c:54:7f:6c:91:02:a9:0a:17:69:e9: aa:b4:83:69:10:9d:7b:bc:fa:8f:39:b9:1c:02:28: d3:d7:0f:ef:a9:79:0a:fa:f1:5e:f1:84:63:ad:6c: 76:24:b8:21:1f:3a:ac:d8:7e:81:2e:09:49:57:df: 1d:ea:28:23:09:be:74:a1:3a:d0:78:5e:a5:ff:a8: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9D:74:20:9F:B7:5E:B0:5C:A6:66:98:CF:BF:DD:CD:B6:4C:FE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec959914-dfb4-3a31-9ac4-21d16e29252e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:95:30:69:42:b8:4b:c4:7e:9e:46:b7:d0:fe:72:dc:c9:2d: 3c:6d:e5:d2:49:b4:48:2c:5a:de:2d:6d:f4:ea:9b:14:1a:65: 65:34:41:f7:1e:11:60:51:a7:6c:42:89:21:f0:94:5a:4f:de: 77:c1:ff:50:b3:d8:1b:bb:97:3e:57:c5:ed:cf:6c:71:a0:5d: b5:de:24:0e:3a:0d:f0:86:bc:1c:4a:d8:5b:dd:65:ee:ed:b4: 43:f5:bf:af:a2:1c:46:87:06:9e:4d:7e:99:67:16:8d:b6:ee: 76:5f:04:c2:3e:d2:9b:bb:13:86:17:b7:5f:7f:b7:ef:95:fe: c3:e6:d8:44:16:0b:ac:69:64:45:be:6e:da:2b:2a:dc:90:82: 03:59:6d:e7:cd:24:f3:a4:fe:40:19:77:94:c6:a4:57:55:18: 6a:0a:10:0a:d0:4a:8b:dc:bd:73:c4:27:3f:01:64:7a:a7:96: 11:0e:03:42:6f:16:c9:86:e3:94:7a:45:ca:cb:37:24:ee:bb: df:2c:d4:74:cb:4b:04:4e:e8:87:d4:83:ca:bd:66:02:f5:4f: 7b:39:64:46:4e:90:6d:d1:fb:f7:e7:97:43:22:97:ce:be:8f: 17:66:11:cf:bc:6b:75:3b:f8:11:06:f8:ff:8e:05:d8:b6:5c: a0:48:3f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwRHspBnalbeV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OTg2MjE5YzYtODQ3YS00ODllLTlkODktOTE4MDY1YTk0MGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1ljp/Hjfpiv4nUaLiv51gm7xG99X7L6g+Le lOscjJNmHCNM7kfNO2bvWlB/cs0fRrgAC14LaHrCt8HYGeSi8z5m2Nqw2kYs3Sbv R0K2hDyD7QXVyS6gN/SvtXJFBHg7lX+e1bswr1TSvD/cdifkJxsAIvl8QRgr9xLU 5k+8NhVJzvNfhpCTQFg0kQuM+cDqEMsCEBHA5Y6HTSQ2s6U7dNTaes+WKLmOfshl BlvmEXluPgyH00yjPFR/bJECqQoXaemqtINpEJ17vPqPObkcAijT1w/vqXkK+vFe 8YRjrWx2JLghHzqs2H6BLglJV98d6igjCb50oTrQeF6l/6j6nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCddCCft16wXKZmmM+/3c22TP6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWM5NTk5MTQtZGZiNC0z YTMxLTlhYzQtMjFkMTZlMjkyNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECVMGlCuEvEfp5Gt9D+ctzJLTxt5dJJtEgsWt4tbfTqmxQaZWU0Qfce EWBRp2xCiSHwlFpP3nfB/1Cz2Bu7lz5Xxe3PbHGgXbXeJA46DfCGvBxK2FvdZe7t tEP1v6+iHEaHBp5NfplnFo227nZfBMI+0pu7E4YXt19/t++V/sPm2EQWC6xpZEW+ btorKtyQggNZbefNJPOk/kAZd5TGpFdVGGoKEArQSovcvXPEJz8BZHqnlhEOA0Jv FsmG45R6RcrLNyTuu98s1HTLSwRO6IfUg8q9ZgL1T3s5ZEZOkG3R+/fnl0Mil86+ jxdmEc+8a3U7+BEG+P+OBdi2XKBIP5k= -----END CERTIFICATE-----Generated at Thu Oct 16 01:33:30 2025 by rpki-client