$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1bf57d9-00ad-342c-84d7-f305c959155b.roa File: f1bf57d9-00ad-342c-84d7-f305c959155b.roa (raw, json) Hash identifier: yPo4qBddzrhcIiLqHk8N0TOKLQTuo4JmNt7mpWkHt24= Subject key identifier: 82:42:0A:34:CA:CE:AB:CC:18:E9:9A:B8:6D:26:D4:D6:94:AC:71:33 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C6C664AB0C5B0C1E93D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1bf57d9-00ad-342c-84d7-f305c959155b.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.172.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:6c:66:4a:b0:c5:b0:c1:e9:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=8e64d1f0-cbe4-4a5c-adcf-f4c0f667e71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:90:d1:2c:f4:bd:a6:5a:39:e2:19:66:10: 08:6e:42:2a:56:1e:ae:8b:95:e3:d4:cc:3f:7c:7a: dc:6d:29:b3:fc:f1:19:6b:db:34:17:d1:b9:c0:5f: 80:9b:79:dd:6d:68:2b:65:18:60:e8:9d:13:fe:4c: b7:22:e1:f3:92:f1:37:88:72:81:fe:77:32:4d:0f: 81:25:0d:3d:6d:01:3b:26:0a:d8:66:e7:49:4f:b0: 56:31:76:c6:ef:b7:d5:75:a2:cd:09:17:d8:c9:99: cb:20:64:5e:ec:aa:fd:b5:60:7d:00:00:7c:aa:99: d3:74:85:b1:36:be:42:ed:99:c5:8d:21:d6:9a:74: ed:fd:86:43:a6:b7:d1:1e:45:ab:f2:9e:17:e4:9a: 4c:bd:1b:ce:48:ec:39:65:35:85:7d:51:40:4b:f9: 1b:cb:4c:f7:f4:2a:30:4b:25:ed:e9:e2:77:4b:cd: 90:ea:7e:59:d0:76:57:97:84:be:d1:03:03:7e:c4: 29:47:06:55:c6:94:61:c1:e0:2c:c7:12:d8:2e:38: 9d:75:3f:e5:c9:80:88:d7:42:f9:81:1b:ce:2a:31: bc:53:12:c0:32:e6:5f:c1:16:1e:e2:27:ad:b8:87: b2:c6:4d:49:fe:36:17:0e:91:39:67:34:b0:fd:e1: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:42:0A:34:CA:CE:AB:CC:18:E9:9A:B8:6D:26:D4:D6:94:AC:71:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1bf57d9-00ad-342c-84d7-f305c959155b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1b:13:c8:e5:52:82:22:3f:63:f4:31:6f:7f:a8:9d:ba:0e: 86:ec:00:73:47:20:a6:96:c8:74:c7:1e:9f:a1:48:01:2a:34: b8:a5:4d:a8:91:9f:14:bb:38:dd:bf:32:3c:da:58:e9:44:a9: 7f:a2:89:f2:b7:4f:97:1b:5c:db:a7:42:3a:a0:3d:9e:e8:fb: 26:ef:81:48:e2:ce:3d:fc:a0:9b:b1:8a:30:5e:72:39:0f:65: ef:be:e0:36:f2:97:de:e7:d7:b8:02:7a:ba:55:1a:94:af:d5: 1e:cd:13:3d:0c:72:95:a9:00:97:da:ba:b7:09:fb:ff:d3:f3: a9:e2:1c:19:2f:fc:17:a4:4e:8d:82:af:cd:93:bc:9e:9d:57: b8:4e:cb:30:e4:4e:56:43:31:0a:08:c7:55:a6:37:69:a3:90: 52:47:d4:0d:93:a2:a6:1e:2d:87:bf:c6:85:91:1c:74:d9:27: 16:09:a3:9f:f0:58:cf:35:db:9a:e0:40:8b:44:84:6e:dc:0e: 03:21:67:b3:c8:58:6e:37:5b:2b:a9:70:0b:ca:e6:48:b0:9d: 45:5e:b5:c5:ba:c2:ab:f7:4b:32:bc:ed:d7:64:3c:b5:5c:41: 8e:47:9c:df:42:c9:64:1d:8a:ce:3a:a1:e3:61:da:c3:5e:b8: ad:64:c4:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGxmSrDFsMHpPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk OGU2NGQxZjAtY2JlNC00YTVjLWFkY2YtZjRjMGY2NjdlNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHOQ0Sz0vaZaOeIZZhAIbkIqVh6ui5Xj1Mw/ fHrcbSmz/PEZa9s0F9G5wF+Am3ndbWgrZRhg6J0T/ky3IuHzkvE3iHKB/ncyTQ+B JQ09bQE7JgrYZudJT7BWMXbG77fVdaLNCRfYyZnLIGRe7Kr9tWB9AAB8qpnTdIWx Nr5C7ZnFjSHWmnTt/YZDprfRHkWr8p4X5JpMvRvOSOw5ZTWFfVFAS/kby0z39Cow SyXt6eJ3S82Q6n5Z0HZXl4S+0QMDfsQpRwZVxpRhweAsxxLYLjiddT/lyYCI10L5 gRvOKjG8UxLAMuZfwRYe4ietuIeyxk1J/jYXDpE5ZzSw/eHbSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJCCjTKzqvMGOmauG0m1NaUrHEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjFiZjU3ZDktMDBhZC0z NDJjLTg0ZDctZjMwNWM5NTkxNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAbE8jlUoIiP2P0MW9/qJ26DobsAHNHIKaWyHTHHp+hSAEqNLilTaiR nxS7ON2/MjzaWOlEqX+iifK3T5cbXNunQjqgPZ7o+ybvgUjizj38oJuxijBecjkP Ze++4Dbyl97n17gCerpVGpSv1R7NEz0McpWpAJfaurcJ+//T86niHBkv/BekTo2C r82TvJ6dV7hOyzDkTlZDMQoIx1WmN2mjkFJH1A2ToqYeLYe/xoWRHHTZJxYJo5/w WM8125rgQItEhG7cDgMhZ7PIWG43WyupcAvK5kiwnUVetcW6wqv3SzK87ddkPLVc QY5HnN9CyWQdis46oeNh2sNeuK1kxFg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:09 2025 by rpki-client