$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f127fd40-95d8-3291-8bc5-aa116c28b3c4.roa File: f127fd40-95d8-3291-8bc5-aa116c28b3c4.roa (raw, json) Hash identifier: fXt/xP/yafZ170mVVr1cVvKr26Ps2IM4U5q8IMaROKQ= Subject key identifier: 8A:8F:A0:9F:F0:5C:33:C9:22:9E:26:E1:88:A4:57:86:2C:54:F7:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671B4202C1A192E298F740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f127fd40-95d8-3291-8bc5-aa116c28b3c4.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1b:42:02:c1:a1:92:e2:98:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=f07c8a93-98f1-4a2e-b5db-616e311d71c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:06:4c:71:99:8c:7c:6b:f2:84:dd:49:cd: 80:83:cf:f2:5a:72:65:20:15:46:87:58:77:8c:97: 49:1a:2b:c2:56:5b:24:21:4a:32:0d:a6:38:02:91: af:f4:db:60:24:42:bd:b2:d4:3e:46:46:57:9d:c2: 20:40:a3:a9:e7:df:b9:0e:ff:f7:c3:20:87:23:a6: aa:bb:a5:bc:2b:e7:17:78:c9:4a:94:55:86:d4:82: f5:34:c2:64:d3:6d:11:06:ec:58:b7:07:0d:bb:5a: 29:e1:cc:c1:a7:ce:ac:ab:0f:c1:53:46:0f:4a:de: f3:d0:65:6b:a7:3b:33:8b:ab:30:11:d3:f3:04:27: a2:af:b9:2d:bc:ea:d1:5e:9d:6c:f9:a3:0f:df:2e: fa:ab:8b:00:b5:07:70:55:d6:f5:f0:51:74:7b:d9: 23:c6:a6:5b:84:3e:27:63:9c:06:e9:bb:2b:25:3b: d8:7a:01:ee:af:13:f7:bf:7e:14:f2:08:99:2b:af: ff:c7:40:f0:e6:4c:82:1f:36:e4:13:aa:c9:0d:bb: bb:85:40:86:2d:66:a2:50:f2:d2:6d:48:c8:c3:c4: 09:ec:de:ef:b0:0c:8a:5f:b9:26:1f:ca:dd:97:ed: 65:1a:52:3e:c9:e5:39:f8:1e:85:08:36:a0:b3:50: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8F:A0:9F:F0:5C:33:C9:22:9E:26:E1:88:A4:57:86:2C:54:F7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f127fd40-95d8-3291-8bc5-aa116c28b3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e5:5f:2c:a9:32:e6:09:b5:b3:a6:4c:28:96:95:f1:65:23: 3e:0b:fe:04:6d:8a:9d:fe:f1:94:df:d8:13:cd:7f:39:cb:91: 24:69:5e:14:67:4f:52:a8:69:1a:d6:d2:79:c6:52:10:c0:57: ca:f7:30:6d:cf:20:ce:0f:8b:b7:9a:a4:a7:f5:e5:5b:7e:02: e9:32:f7:00:0b:e7:82:f4:78:d0:a2:79:5a:a6:8a:48:48:8c: a4:34:83:67:e1:3b:61:6f:b3:5d:0e:82:73:71:75:91:70:82: aa:22:ba:40:a9:c4:aa:ed:01:07:a8:dc:64:8a:dd:e3:ec:42: e6:ed:95:6b:22:5c:07:57:53:4d:c4:ef:85:6d:03:10:58:7f: dc:08:55:1a:4a:3a:6d:fc:1c:96:76:bb:81:a8:a1:e8:f7:8b: 2e:11:62:92:4b:6a:5e:5b:98:be:cd:8e:25:cb:35:9a:8f:f2: 07:ed:18:15:e4:4c:c8:e8:5c:54:65:e4:e6:92:aa:52:e0:22: 74:a8:10:37:59:df:9d:28:1c:df:dc:72:ea:c5:d9:f9:51:d2: cb:8a:ac:97:f3:d1:9b:37:b5:85:15:d2:e2:3a:93:54:be:38: ca:20:92:91:aa:59:01:bf:01:92:f4:bc:66:9d:f3:9d:73:de: de:d9:ed:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxtCAsGhkuKY90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjA3YzhhOTMtOThmMS00YTJlLWI1ZGItNjE2ZTMxMWQ3MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1gGTHGZjHxr8oTdSc2Ag8/yWnJlIBVGh1h3 jJdJGivCVlskIUoyDaY4ApGv9NtgJEK9stQ+RkZXncIgQKOp59+5Dv/3wyCHI6aq u6W8K+cXeMlKlFWG1IL1NMJk020RBuxYtwcNu1op4czBp86sqw/BU0YPSt7z0GVr pzszi6swEdPzBCeir7ktvOrRXp1s+aMP3y76q4sAtQdwVdb18FF0e9kjxqZbhD4n Y5wG6bsrJTvYegHurxP3v34U8giZK6//x0Dw5kyCHzbkE6rJDbu7hUCGLWaiUPLS bUjIw8QJ7N7vsAyKX7kmH8rdl+1lGlI+yeU5+B6FCDags1ALmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqPoJ/wXDPJIp4m4YikV4YsVPdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjEyN2ZkNDAtOTVkOC0z MjkxLThiYzUtYWExMTZjMjhiM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDlXyypMuYJtbOmTCiWlfFlIz4L/gRtip3+8ZTf2BPNfznLkSRpXhRn T1KoaRrW0nnGUhDAV8r3MG3PIM4Pi7eapKf15Vt+Auky9wAL54L0eNCieVqmikhI jKQ0g2fhO2Fvs10OgnNxdZFwgqoiukCpxKrtAQeo3GSK3ePsQubtlWsiXAdXU03E 74VtAxBYf9wIVRpKOm38HJZ2u4Gooej3iy4RYpJLal5bmL7NjiXLNZqP8gftGBXk TMjoXFRl5OaSqlLgInSoEDdZ350oHN/ccurF2flR0suKrJfz0Zs3tYUV0uI6k1S+ OMogkpGqWQG/AZL0vGad851z3t7Z7S8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:43 2025 by rpki-client