$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f23924b6-22c4-36c5-b640-eabc3c13b8d5.roa File: f23924b6-22c4-36c5-b640-eabc3c13b8d5.roa (raw, json) Hash identifier: RoE7ARMMbYloUIUsLLHB4XXXtMl8A/y6ivuHHW5Wgyc= Subject key identifier: 24:B8:74:60:98:D5:09:72:3A:BF:88:03:9E:9F:D0:A4:70:60:53:D0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F22509C30F1F5A4579E940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f23924b6-22c4-36c5-b640-eabc3c13b8d5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.161.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:25:09:c3:0f:1f:5a:45:79:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2cab619a-48f6-4d44-8536-ae46c5907c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:c3:81:aa:0a:18:8e:38:dc:1e:d2:d2:7d: 5f:76:19:4b:de:aa:4f:7e:83:ea:ea:a0:71:77:ca: 88:c5:2e:c7:eb:3a:ee:4a:ed:66:e0:6b:e1:08:64: db:df:d8:82:63:4b:74:69:04:a4:b0:f3:3a:2f:35: 87:7b:27:f6:9c:56:8a:16:57:d3:ce:31:8a:97:0e: 72:11:a5:d9:1d:e7:1c:b0:65:56:f8:d6:40:9e:cb: 46:ea:3d:03:f4:21:0a:c7:bc:32:57:bd:b7:fa:e7: c9:e5:f9:36:d1:b5:14:e3:b2:f4:53:47:68:f9:31: 8c:92:0c:80:86:73:43:3b:fb:d8:ff:65:ac:56:05: e3:43:34:2c:6a:f1:b1:f8:b5:2b:3e:8e:09:bb:83: a8:2d:06:14:a3:7c:51:83:7e:27:b1:30:7f:c8:88: 59:8d:43:db:75:01:7f:e9:2a:5b:68:e7:7d:90:e6: 53:79:0a:c2:da:13:88:ab:9c:30:b6:e6:70:e4:24: b5:83:6f:8e:fe:94:d9:cc:95:d6:93:8d:b5:f7:a2: 3e:cb:d7:ef:c0:f7:02:7d:dd:86:82:cb:37:d3:36: df:e6:cf:a5:21:f5:01:d2:9a:6d:eb:7b:18:b1:41: c8:71:a2:0c:30:f5:d0:f8:56:f1:1c:89:a8:43:eb: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B8:74:60:98:D5:09:72:3A:BF:88:03:9E:9F:D0:A4:70:60:53:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f23924b6-22c4-36c5-b640-eabc3c13b8d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0b:4c:fa:25:34:0b:79:89:fa:d5:b4:10:4f:51:35:65:28: a4:67:b9:11:42:71:c0:69:fe:c9:6b:b9:0c:09:af:49:c3:c5: d1:66:6d:65:2f:8b:b0:da:19:fe:00:b5:a1:aa:1e:dd:9d:48: 3e:0a:91:c4:aa:b4:34:10:39:28:c0:fc:0f:ff:a8:7a:a2:45: b2:57:a2:2c:d7:21:ac:99:7d:42:99:ef:67:e5:6d:63:48:cf: d4:a9:9f:e6:34:8c:d8:c5:cf:c7:65:c0:d2:a5:7f:10:fc:ff: 17:b8:37:cf:b7:1f:7e:a0:3e:bd:2b:48:59:0a:36:5b:6f:99: e9:5e:22:6c:ad:6e:15:bf:ed:96:a8:11:50:7b:c2:b5:d3:bc: 94:a9:5b:0d:60:61:29:8c:d2:fe:69:7b:74:60:e1:c0:49:26: 53:6a:f2:23:88:3c:66:9e:5d:0b:e3:88:55:a8:95:ee:a5:bb: ac:7b:b1:de:b9:c4:04:48:e1:20:9d:f2:ff:bd:de:87:fe:bb: 86:2a:06:db:11:f7:f5:14:35:c5:96:1b:4a:a0:5b:12:5b:4b: 08:1c:35:68:13:3e:d7:79:ae:64:06:44:d6:36:48:90:f6:4a: 47:5f:ce:8b:d8:ae:a5:e0:19:cb:df:ee:ce:c6:91:60:3b:12: 88:b8:b0:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iUJww8fWkV56UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmNhYjYxOWEtNDhmNi00ZDQ0LTg1MzYtYWU0NmM1OTA3YzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ibDgaoKGI443B7S0n1fdhlL3qpPfoPq6qBx d8qIxS7H6zruSu1m4GvhCGTb39iCY0t0aQSksPM6LzWHeyf2nFaKFlfTzjGKlw5y EaXZHeccsGVW+NZAnstG6j0D9CEKx7wyV723+ufJ5fk20bUU47L0U0do+TGMkgyA hnNDO/vY/2WsVgXjQzQsavGx+LUrPo4Ju4OoLQYUo3xRg34nsTB/yIhZjUPbdQF/ 6SpbaOd9kOZTeQrC2hOIq5wwtuZw5CS1g2+O/pTZzJXWk42196I+y9fvwPcCfd2G gss30zbf5s+lIfUB0ppt63sYsUHIcaIMMPXQ+FbxHImoQ+tzYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS4dGCY1QlyOr+IA56f0KRwYFPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjIzOTI0YjYtMjJjNC0z NmM1LWI2NDAtZWFiYzNjMTNiOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYLTPolNAt5ifrVtBBPUTVlKKRnuRFCccBp/slruQwJr0nDxdFmbWUv i7DaGf4AtaGqHt2dSD4KkcSqtDQQOSjA/A//qHqiRbJXoizXIayZfUKZ72flbWNI z9Spn+Y0jNjFz8dlwNKlfxD8/xe4N8+3H36gPr0rSFkKNltvmeleImytbhW/7Zao EVB7wrXTvJSpWw1gYSmM0v5pe3Rg4cBJJlNq8iOIPGaeXQvjiFWole6lu6x7sd65 xARI4SCd8v+93of+u4YqBtsR9/UUNcWWG0qgWxJbSwgcNWgTPtd5rmQGRNY2SJD2 SkdfzovYrqXgGcvf7s7GkWA7Eoi4sKA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:24 2025 by rpki-client