$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3800b59-7dd8-3156-ba8b-c6681215f47c.roa File: f3800b59-7dd8-3156-ba8b-c6681215f47c.roa (raw, json) Hash identifier: wXc42VRbobAIyYa4wuNLAtsS5lvC7nQ46oWJ1ob/8B8= Subject key identifier: 7E:DD:13:A2:EE:F1:D2:3E:3D:8A:B6:15:FC:40:37:5E:2C:C8:20:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C6C53D96D87347BCD25A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3800b59-7dd8-3156-ba8b-c6681215f47c.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.172.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:6c:53:d9:6d:87:34:7b:cd:25:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=4aec8c35-51cb-45ca-bd22-a7be30bd29a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:02:da:69:a3:98:9a:de:07:26:12:4e:c9: d3:4b:18:23:fa:65:09:c0:06:c5:6f:da:0d:aa:1d: 67:81:9a:53:b6:c3:7a:41:f9:b7:23:6b:d7:82:ff: 34:77:ba:d1:b1:90:ca:b6:b9:ab:40:a4:d1:f1:67: f1:e2:5e:d9:65:0d:44:9e:c1:55:16:b5:92:f4:1f: 6f:bc:41:0a:4f:42:83:42:f0:d8:f7:07:f7:28:e2: e5:59:d4:d4:8b:00:a2:c6:f2:b3:13:4c:82:e6:68: e5:c7:d7:53:42:20:c8:9d:dc:f1:07:1e:2a:5b:71: 28:f3:a9:15:c9:ee:84:a1:b7:6d:00:76:c9:e0:f9: f2:1e:dd:56:9e:59:0b:2b:e4:67:96:ea:8c:ea:ac: 76:1d:6e:ed:66:4d:15:73:0c:9e:91:c5:89:a9:80: c5:8c:89:77:a1:68:70:e7:4b:96:9e:12:82:8b:0a: 96:0d:07:37:db:3d:f4:a6:c4:f4:ce:40:bb:95:28: 4c:22:f5:32:58:ba:ce:4d:22:3d:34:11:48:6f:cc: 86:bd:f4:13:8c:cd:b8:f8:9b:da:85:95:d7:52:a4: 9d:91:f8:10:48:bf:8e:52:cf:b2:23:7b:d5:8a:86: ef:bf:e9:6a:fa:1c:f0:b7:fd:f3:6d:24:fa:80:59: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DD:13:A2:EE:F1:D2:3E:3D:8A:B6:15:FC:40:37:5E:2C:C8:20:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3800b59-7dd8-3156-ba8b-c6681215f47c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:14:a1:65:18:52:c4:48:ad:ab:60:31:c2:63:d9:be:d9:90: 45:48:45:45:c5:24:bc:af:97:38:9d:d9:36:74:93:ba:ab:77: 2a:0d:11:e8:aa:37:5b:aa:ac:b6:75:d5:44:23:17:3c:f7:46: cd:fc:1a:1e:48:c6:92:d2:19:2f:9b:61:a4:32:21:f5:f1:17: e7:8d:43:84:fb:85:e2:e1:7a:72:08:78:21:0f:cf:d3:64:1f: 55:68:18:7d:e7:0f:66:98:55:87:de:f0:7e:8a:0a:0f:0c:75: 26:f5:7c:59:bd:7e:59:0a:f6:e3:8b:3b:bb:19:cc:3c:35:65: e8:9a:65:24:d8:42:47:ee:07:9c:63:8c:a4:4a:b3:bc:da:89: ff:ae:2d:5c:dc:3c:e6:8d:fe:c3:f1:bd:4f:f3:e8:fa:ac:86: d9:fd:31:41:21:70:dc:c1:42:14:88:99:5b:06:e1:05:bd:5c: 15:65:b6:3a:c9:e1:fb:fd:d8:9d:0b:0a:61:b7:7b:00:c8:c5: 12:91:05:ef:87:47:31:5d:4b:9b:0f:66:38:92:2b:dd:2e:cf: ab:e3:39:2c:59:64:91:0a:bf:49:34:4e:ac:f5:db:bc:79:7d: ba:5b:f5:7e:32:f0:91:4f:95:c7:4f:32:41:74:9e:b1:88:fc: a4:0d:10:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGxT2W2HNHvNJaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NGFlYzhjMzUtNTFjYi00NWNhLWJkMjItYTdiZTMwYmQyOWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll0C2mmjmJreByYSTsnTSxgj+mUJwAbFb9oN qh1ngZpTtsN6Qfm3I2vXgv80d7rRsZDKtrmrQKTR8Wfx4l7ZZQ1EnsFVFrWS9B9v vEEKT0KDQvDY9wf3KOLlWdTUiwCixvKzE0yC5mjlx9dTQiDIndzxBx4qW3Eo86kV ye6EobdtAHbJ4PnyHt1WnlkLK+RnluqM6qx2HW7tZk0VcwyekcWJqYDFjIl3oWhw 50uWnhKCiwqWDQc32z30psT0zkC7lShMIvUyWLrOTSI9NBFIb8yGvfQTjM24+Jva hZXXUqSdkfgQSL+OUs+yI3vViobvv+lq+hzwt/3zbST6gFn4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7dE6Lu8dI+PYq2FfxAN14syCD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjM4MDBiNTktN2RkOC0z MTU2LWJhOGItYzY2ODEyMTVmNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqxSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQUoWUYUsRIratgMcJj2b7ZkEVIRUXFJLyvlzid2TZ0k7qrdyoNEeiq N1uqrLZ11UQjFzz3Rs38Gh5IxpLSGS+bYaQyIfXxF+eNQ4T7heLhenIIeCEPz9Nk H1VoGH3nD2aYVYfe8H6KCg8MdSb1fFm9flkK9uOLO7sZzDw1ZeiaZSTYQkfuB5xj jKRKs7zaif+uLVzcPOaN/sPxvU/z6Pqshtn9MUEhcNzBQhSImVsG4QW9XBVltjrJ 4fv92J0LCmG3ewDIxRKRBe+HRzFdS5sPZjiSK90uz6vjOSxZZJEKv0k0Tqz127x5 fbpb9X4y8JFPlcdPMkF0nrGI/KQNED4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:38 2025 by rpki-client