$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed20b243-4972-3ae5-a8f3-20c72bd40770.roa File: ed20b243-4972-3ae5-a8f3-20c72bd40770.roa (raw, json) Hash identifier: DCu6YrevXyJ8nOYA2B51VolV3Ox08BWqrzgiODWLIN0= Subject key identifier: AD:2F:5C:A5:76:AF:44:EC:86:F1:73:C8:09:1F:F4:2D:78:94:16:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206717A04A77D8AAD0F29620 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed20b243-4972-3ae5-a8f3-20c72bd40770.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:17:a0:4a:77:d8:aa:d0:f2:96:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=5d5e7ae9-fb94-41b0-88ee-6b8008257111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:c0:61:ad:3a:7d:c7:2f:7d:c5:4d:86:ba: c9:84:34:84:aa:03:01:a3:31:b1:4b:dc:a6:bb:9d: 26:fb:53:a1:2a:bf:56:91:f3:fa:36:81:15:a3:b9: 8f:0b:64:65:1f:43:b3:98:8b:08:54:06:32:47:ec: cc:62:81:0e:43:57:f0:a5:9a:8a:7c:43:38:c5:ae: 95:98:44:d7:99:a3:db:c2:82:83:8b:07:5a:40:08: 9c:8a:1a:35:a3:49:23:dc:bb:5f:d0:35:6a:52:67: 4b:6d:cc:4a:9c:fe:a0:36:7c:c0:11:10:3f:5f:9d: fa:92:dd:19:9b:94:ef:a5:de:6d:bf:fe:db:14:b7: 72:8e:6e:34:fe:b3:8e:ca:ac:1a:e5:02:9d:a9:e8: 9e:55:5a:53:58:9a:7a:bd:51:b2:7b:67:dd:fc:38: dc:7c:f9:67:d0:8c:73:b8:dc:e9:74:39:eb:c6:17: 44:9a:a3:21:3b:11:ed:52:b6:9e:1d:00:73:0e:17: 18:dc:45:f2:47:e4:34:40:74:aa:1c:14:08:af:2c: 1d:26:38:37:f6:01:a1:69:27:84:d1:5d:bb:55:b2: fa:e8:f6:fb:85:f7:8d:75:78:f3:19:65:e0:c2:dc: 82:ad:55:f7:c8:66:0d:95:95:89:a5:c4:ba:00:5c: f6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2F:5C:A5:76:AF:44:EC:86:F1:73:C8:09:1F:F4:2D:78:94:16:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed20b243-4972-3ae5-a8f3-20c72bd40770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:98:dd:e7:7c:99:d7:a4:c2:72:7d:11:cc:18:1d:44:a0:3f: 6c:fa:96:f5:57:2a:47:d1:52:db:22:f3:b8:b4:c1:e4:61:6e: 64:83:65:d4:d1:4a:9f:48:6d:b3:f9:2a:5f:76:aa:77:6b:aa: 8c:44:7c:76:d0:d6:34:a9:7b:9a:cc:35:43:88:53:09:e9:8d: 96:ff:44:80:e2:dc:9a:fd:88:52:e0:a5:6c:b3:64:ca:f6:5f: 2c:d4:17:ea:94:54:c6:b1:11:6d:97:80:25:a8:ea:58:a5:8e: 71:40:55:68:60:44:19:d7:fc:d2:c1:f5:56:27:c1:0d:7e:32: 19:00:79:7d:2f:1a:17:3e:b0:d8:02:32:ea:55:5c:46:ed:90: a7:6c:8d:e8:82:c6:d3:4f:9c:46:65:50:0c:e4:17:e7:8c:64: 46:cf:ba:64:13:a9:4a:d7:76:4f:24:bc:ec:23:ba:79:ae:07: e0:69:c3:c6:d7:85:76:5d:f1:ef:7e:c4:bd:8b:d8:d2:05:57: a4:54:5c:7d:d0:63:25:95:e1:43:16:c6:05:77:d2:86:fa:bf: 40:47:14:2d:1e:c7:db:27:35:0b:ff:fd:b5:15:c5:94:f8:b1: 9f:cf:49:70:0b:8e:aa:88:0e:2a:29:e4:2c:24:d7:27:8a:7b: 1d:c2:cc:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxegSnfYqtDyliAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NWQ1ZTdhZTktZmI5NC00MWIwLTg4ZWUtNmI4MDA4MjU3MTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAserAYa06fccvfcVNhrrJhDSEqgMBozGxS9ym u50m+1OhKr9WkfP6NoEVo7mPC2RlH0OzmIsIVAYyR+zMYoEOQ1fwpZqKfEM4xa6V mETXmaPbwoKDiwdaQAiciho1o0kj3Ltf0DVqUmdLbcxKnP6gNnzAERA/X536kt0Z m5Tvpd5tv/7bFLdyjm40/rOOyqwa5QKdqeieVVpTWJp6vVGye2fd/DjcfPln0Ixz uNzpdDnrxhdEmqMhOxHtUraeHQBzDhcY3EXyR+Q0QHSqHBQIrywdJjg39gGhaSeE 0V27VbL66Pb7hfeNdXjzGWXgwtyCrVX3yGYNlZWJpcS6AFz2NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0vXKV2r0TshvFzyAkf9C14lBarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWQyMGIyNDMtNDk3Mi0z YWU1LWE4ZjMtMjBjNzJiZDQwNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmY3ed8mdekwnJ9EcwYHUSgP2z6lvVXKkfRUtsi87i0weRhbmSDZdTR Sp9IbbP5Kl92qndrqoxEfHbQ1jSpe5rMNUOIUwnpjZb/RIDi3Jr9iFLgpWyzZMr2 XyzUF+qUVMaxEW2XgCWo6liljnFAVWhgRBnX/NLB9VYnwQ1+MhkAeX0vGhc+sNgC MupVXEbtkKdsjeiCxtNPnEZlUAzkF+eMZEbPumQTqUrXdk8kvOwjunmuB+Bpw8bX hXZd8e9+xL2L2NIFV6RUXH3QYyWV4UMWxgV30ob6v0BHFC0ex9snNQv//bUVxZT4 sZ/PSXALjqqIDiop5Cwk1yeKex3CzAE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:50 2025 by rpki-client