$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f62965d4-4951-3bc1-88a2-f4ba2b4f4460.roa File: f62965d4-4951-3bc1-88a2-f4ba2b4f4460.roa (raw, json) Hash identifier: 51cDXIrmgRjBYyOCbDVhrrACDJ2EK2U3BWJtWHY/3h0= Subject key identifier: 9E:F2:BC:90:07:85:49:69:CF:4D:5F:52:0F:C7:4A:AC:52:57:D3:F7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C79ADCF8FAC76B701A840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f62965d4-4951-3bc1-88a2-f4ba2b4f4460.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.176.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:79:ad:cf:8f:ac:76:b7:01:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=7aec7e50-ea29-447e-908e-652c56b2f289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:63:59:e1:f3:5a:01:c5:f2:6d:d3:b1:a0:a0: a1:9b:9d:c3:d7:32:c8:29:eb:f6:08:57:cc:39:1c: 3d:e1:d9:7e:88:1d:fc:6d:ab:d5:fc:2f:c2:17:06: b4:40:62:89:cb:35:8f:a4:73:39:31:df:69:13:7c: de:93:89:9c:ab:c7:22:59:fc:b9:58:07:54:f5:91: b0:c5:30:e2:86:55:89:ab:be:05:b5:86:c2:97:99: d0:c5:a4:ab:2a:c5:cd:6b:9d:4a:63:50:54:14:d4: da:ab:be:72:5c:6a:93:36:54:40:dc:c4:3a:84:6f: de:81:45:c7:6d:52:78:b1:45:3c:50:73:24:a8:88: 37:eb:79:3b:97:11:73:9c:a7:22:f5:40:6b:b2:c3: ef:1a:f6:93:e8:71:2c:00:e5:1b:16:f2:be:13:4e: 2a:a5:73:46:f4:fb:3e:93:85:89:6f:f2:76:f5:3b: 08:ec:88:41:d9:a3:22:64:f1:55:f3:55:51:71:40: 30:ce:42:c1:33:64:ef:35:60:6e:3a:6f:72:d4:c7: bb:f4:13:a6:1a:2d:1c:c1:7b:ed:d4:ff:ce:d5:63: 8d:ec:0f:45:b0:d9:c9:77:ce:d7:7a:22:aa:88:df: 40:df:86:0c:be:45:56:e0:17:3d:f5:cd:c3:ff:74: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F2:BC:90:07:85:49:69:CF:4D:5F:52:0F:C7:4A:AC:52:57:D3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f62965d4-4951-3bc1-88a2-f4ba2b4f4460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:00:57:f4:29:06:6e:10:b6:40:9a:c6:ba:d2:e2:92:d0:35: ac:c6:f9:17:7a:f6:45:e3:96:38:b7:c7:24:66:b2:71:17:a6: 72:17:a7:af:90:d5:85:86:13:cc:bb:24:65:e6:9c:7c:1c:f4: 2e:db:9e:ca:70:86:10:51:88:08:58:dc:e3:c2:1b:53:30:34: 3a:93:9e:e0:ea:7c:b4:79:77:70:f4:84:4d:b5:b4:42:60:96: d5:7e:d7:e9:0e:df:a8:55:45:63:e8:5b:ee:8f:28:5c:6d:cf: cd:4f:f0:31:ed:e9:d5:3f:0f:04:46:b9:ad:e7:f0:f7:77:c2: 0c:3c:35:13:1b:40:69:4b:60:4b:26:f4:e2:a5:e9:5b:41:e2: 79:b0:0b:0f:de:6f:85:2d:3e:56:54:e1:fe:b4:36:7e:14:d8: 38:e8:2f:4d:e2:8e:00:df:14:e4:27:2d:41:c8:f4:ab:b7:31: 45:80:99:97:82:7d:21:da:cc:d8:29:01:75:90:00:d7:0b:b8: 87:f1:40:80:a6:42:62:54:40:7d:40:ab:03:71:a1:b8:79:b1: 1f:ff:a8:85:6a:36:7e:24:7e:a8:52:00:94:05:6b:40:39:29: 76:81:23:de:f5:28:ad:a9:46:03:22:44:53:f2:74:b5:7f:4b: d5:b7:eb:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHmtz4+sdrcBqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk N2FlYzdlNTAtZWEyOS00NDdlLTkwOGUtNjUyYzU2YjJmMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGNZ4fNaAcXybdOxoKChm53D1zLIKev2CFfM ORw94dl+iB38bavV/C/CFwa0QGKJyzWPpHM5Md9pE3zek4mcq8ciWfy5WAdU9ZGw xTDihlWJq74FtYbCl5nQxaSrKsXNa51KY1BUFNTaq75yXGqTNlRA3MQ6hG/egUXH bVJ4sUU8UHMkqIg363k7lxFznKci9UBrssPvGvaT6HEsAOUbFvK+E04qpXNG9Ps+ k4WJb/J29TsI7IhB2aMiZPFV81VRcUAwzkLBM2TvNWBuOm9y1Me79BOmGi0cwXvt 1P/O1WON7A9FsNnJd87XeiKqiN9A34YMvkVW4Bc99c3D/3QFdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7yvJAHhUlpz01fUg/HSqxSV9P3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjYyOTY1ZDQtNDk1MS0z YmMxLTg4YTItZjRiYTJiNGY0NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrC6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYAV/QpBm4QtkCaxrrS4pLQNazG+Rd69kXjlji3xyRmsnEXpnIXp6+Q 1YWGE8y7JGXmnHwc9C7bnspwhhBRiAhY3OPCG1MwNDqTnuDqfLR5d3D0hE21tEJg ltV+1+kO36hVRWPoW+6PKFxtz81P8DHt6dU/DwRGua3n8Pd3wgw8NRMbQGlLYEsm 9OKl6VtB4nmwCw/eb4UtPlZU4f60Nn4U2DjoL03ijgDfFOQnLUHI9Ku3MUWAmZeC fSHazNgpAXWQANcLuIfxQICmQmJUQH1AqwNxobh5sR//qIVqNn4kfqhSAJQFa0A5 KXaBI971KK2pRgMiRFPydLV/S9W36zw= -----END CERTIFICATE-----Generated at Thu Oct 16 02:00:57 2025 by rpki-client