$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f06d8591-e9ab-3f02-bdd7-4ea851bc6466.roa File: f06d8591-e9ab-3f02-bdd7-4ea851bc6466.roa (raw, json) Hash identifier: zQkOa6vQlDciAUr50Gg+WEvKJvqNXf3Ujj69UI4bOE4= Subject key identifier: 43:8C:84:22:BD:BF:09:4E:66:B6:17:29:9C:9A:72:43:68:F5:6A:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206703A3F7969D94CB0F7400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f06d8591-e9ab-3f02-bdd7-4ea851bc6466.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.170.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:03:a3:f7:96:9d:94:cb:0f:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=19e6ef0f-730b-4383-b62b-8a475d798496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e8:cf:ab:6c:43:8d:04:66:d2:e3:ab:25:50: 05:1f:e8:d5:33:fb:31:e0:33:85:fe:cd:bd:93:f9: fa:7c:c9:fa:95:c2:27:d9:29:eb:1a:ae:40:39:f7: ee:04:5d:27:7c:d6:f6:46:1f:c0:1d:58:1c:b5:b3: 78:4d:a9:21:4d:c4:16:ae:76:46:93:1b:b7:41:7e: c0:62:83:b6:79:41:ba:75:b0:47:f8:45:d3:9c:3c: 60:1b:41:b3:9e:df:01:1d:03:ba:6d:e6:7d:21:d2: 5c:f6:8c:00:40:6d:31:a2:0f:3e:d3:45:b9:82:a9: c5:68:ea:ed:00:21:91:03:e9:8f:db:b3:da:df:7c: 25:61:f5:0d:e8:51:b6:94:32:0e:59:24:94:be:ae: 53:79:f0:0e:fc:ca:a0:ae:6d:b7:9a:61:90:34:2c: 83:0a:87:7b:cf:c1:59:56:12:17:40:25:70:f3:79: ed:cf:c3:d3:63:61:90:0d:9d:8d:b2:f8:72:8d:80: 65:12:b4:49:6e:c8:8d:5e:24:d5:c6:07:4a:15:05: f5:ad:d0:36:ae:9f:c8:79:65:c8:74:77:05:fe:a5: 39:cc:22:39:df:a6:e7:93:bd:4e:e8:71:c1:70:b9: 2b:f1:ca:c6:8f:ab:63:c4:85:ae:92:99:f1:1d:b5: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8C:84:22:BD:BF:09:4E:66:B6:17:29:9C:9A:72:43:68:F5:6A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f06d8591-e9ab-3f02-bdd7-4ea851bc6466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bf:db:4d:b7:a3:95:5e:f0:c4:49:8c:30:87:4a:f2:7f:a6: d5:8f:aa:0c:51:9d:ba:95:58:75:8a:26:df:b3:ee:02:03:76: 6c:97:1a:ad:88:31:e9:0e:0c:13:87:5a:7e:5f:c6:d3:6a:10: 38:86:b2:fd:8d:d1:b9:5c:b3:52:5c:a7:d0:11:6e:f8:42:56: cf:6e:3e:b9:03:98:75:42:38:92:ab:d3:75:54:f0:ff:98:73: f3:36:88:60:32:2e:48:a1:38:1e:e4:aa:e0:41:69:c7:ca:23: a3:b9:7e:f9:d6:57:fb:4d:b5:32:11:d2:9e:6a:64:1f:7f:d1: 6d:06:f2:92:23:70:1b:56:70:a1:d1:ce:3c:50:cf:d5:6d:79: 78:c3:74:25:e5:a2:56:f9:d4:ae:07:29:b0:f9:5d:1d:a1:43: 98:e4:83:e1:df:35:04:c5:6f:e3:46:88:32:0f:ec:ce:17:3e: 64:90:42:dc:76:7e:9a:4b:67:1a:06:e6:3b:05:9b:06:7d:72: f3:e0:88:96:b4:d1:49:6c:3b:2e:aa:ea:04:33:1a:c1:08:31: 7a:37:31:dc:4c:df:fa:86:75:70:58:81:5d:1e:c5:b5:64:c2: b0:87:74:06:f5:f5:d8:4a:31:59:b4:81:83:ac:e1:8d:d8:ba: 60:d3:01:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwOj95adlMsPdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MTllNmVmMGYtNzMwYi00MzgzLWI2MmItOGE0NzVkNzk4NDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+jPq2xDjQRm0uOrJVAFH+jVM/sx4DOF/s29 k/n6fMn6lcIn2SnrGq5AOffuBF0nfNb2Rh/AHVgctbN4TakhTcQWrnZGkxu3QX7A YoO2eUG6dbBH+EXTnDxgG0Gznt8BHQO6beZ9IdJc9owAQG0xog8+00W5gqnFaOrt ACGRA+mP27Pa33wlYfUN6FG2lDIOWSSUvq5TefAO/Mqgrm23mmGQNCyDCod7z8FZ VhIXQCVw83ntz8PTY2GQDZ2NsvhyjYBlErRJbsiNXiTVxgdKFQX1rdA2rp/IeWXI dHcF/qU5zCI536bnk71O6HHBcLkr8crGj6tjxIWukpnxHbW9TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOMhCK9vwlOZrYXKZyackNo9WpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjA2ZDg1OTEtZTlhYi0z ZjAyLWJkZDctNGVhODUxYmM2NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqoMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO/2023o5Ve8MRJjDCHSvJ/ptWPqgxRnbqVWHWKJt+z7gIDdmyXGq2I MekODBOHWn5fxtNqEDiGsv2N0blcs1Jcp9ARbvhCVs9uPrkDmHVCOJKr03VU8P+Y c/M2iGAyLkihOB7kquBBacfKI6O5fvnWV/tNtTIR0p5qZB9/0W0G8pIjcBtWcKHR zjxQz9VteXjDdCXlolb51K4HKbD5XR2hQ5jkg+HfNQTFb+NGiDIP7M4XPmSQQtx2 fppLZxoG5jsFmwZ9cvPgiJa00UlsOy6q6gQzGsEIMXo3MdxM3/qGdXBYgV0exbVk wrCHdAb19dhKMVm0gYOs4Y3YumDTASY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:58 2025 by rpki-client