$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcea666e-ac7c-3f93-91b1-52ec7bfb84a1.roa File: fcea666e-ac7c-3f93-91b1-52ec7bfb84a1.roa (raw, json) Hash identifier: JeudQmDw8EpxQjlE41UzjiKp53XtKH2kSIj2+AkEtw8= Subject key identifier: 78:1B:7D:D5:7F:6C:8A:59:8C:36:33:EB:4F:88:FB:43:87:FA:AB:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B98CB0B4D3DE75F9CE38E7A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcea666e-ac7c-3f93-91b1-52ec7bfb84a1.roa Signing time: Tue 21 Oct 2025 15:59:41 +0000 ROA not before: Tue 21 Oct 2025 15:59:41 +0000 ROA not after: Mon 19 Jan 2026 16:59:41 +0000 asID: 22773 IP address blocks: 70.189.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:cb:0b:4d:3d:e7:5f:9c:e3:8e:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 21 15:59:41 2025 GMT Not After : Jan 19 16:59:41 2026 GMT Subject: CN=2b1c46c9-e3bb-4a52-bf7f-a749db244d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:f2:06:c5:73:07:a0:43:7e:30:02:70:b5: 99:e7:78:7e:8b:80:96:de:77:d0:65:b4:94:34:5c: dd:25:47:86:7c:fe:0f:fb:fa:90:4c:2a:ec:09:42: 9d:f5:01:c5:34:79:57:6c:fc:17:8a:67:e8:03:ba: db:3c:4e:95:9d:ab:82:fa:6a:d1:f8:d1:61:0f:80: 2c:b7:33:28:df:0f:d8:a7:f3:03:17:3c:1b:4b:24: 71:c5:8e:df:63:6a:3e:56:80:68:d6:84:77:9b:c7: 81:2b:a9:d3:4a:7b:9e:42:26:3f:df:4c:e8:3f:ac: 6a:29:4f:3e:9b:a8:0e:12:69:73:38:e5:b2:52:5a: b0:72:6c:a0:a5:7d:42:ac:2c:c1:1f:0f:08:54:77: de:39:a0:2a:6b:8e:0a:5f:f8:b9:3a:43:1e:66:6b: c6:f8:8c:84:38:90:6a:11:0b:6f:bc:58:d2:4b:91: 62:f6:39:ae:b1:3c:a7:0c:04:ac:fb:bb:86:58:3c: 54:c8:db:46:60:a7:ba:8b:84:60:73:f1:59:aa:3f: 8e:5e:c6:8b:53:49:df:e2:7c:0d:7b:e0:32:7c:81: e5:97:51:26:d7:43:de:0c:35:b6:12:0b:11:0f:b3: 6b:6c:fc:97:33:2e:97:2d:03:4f:b1:fe:09:60:86: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1B:7D:D5:7F:6C:8A:59:8C:36:33:EB:4F:88:FB:43:87:FA:AB:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcea666e-ac7c-3f93-91b1-52ec7bfb84a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ff:06:fa:63:db:8f:17:fe:b5:89:29:d8:ff:25:d3:5c:87: 3a:9c:1f:47:91:a8:bf:1a:6c:3e:42:77:38:17:6d:e4:46:d3: 47:06:a1:5f:d2:fe:04:dd:73:1c:c4:1a:26:84:f5:28:bc:5b: 05:49:18:46:87:9e:33:3f:26:07:3b:1c:7c:f7:63:1b:43:60: 2e:f3:14:52:c8:40:7a:8e:f6:bf:32:6e:fb:cf:d1:4d:8e:61: 35:fe:cd:6c:7a:ee:e0:aa:ee:77:59:82:1b:fe:3c:c0:99:02: be:88:b3:f6:5a:4f:46:2b:28:ba:5e:10:23:fe:4a:e2:bc:5a: f7:41:2a:b2:8e:57:98:47:8a:83:38:a1:d3:59:8b:cb:29:ba: 1e:fd:8f:6c:4a:42:d7:85:4c:84:38:cf:99:78:70:38:5c:ef: b3:96:eb:34:56:1e:78:42:eb:fe:4e:e8:6f:bd:85:7d:fb:1b: 8a:1a:3d:a1:9d:40:75:99:a9:9f:f9:84:56:2a:cb:26:ec:c8: 09:6f:b8:f8:2b:b9:aa:eb:77:0b:72:2b:f1:ba:7b:db:6b:c6: 8a:aa:81:23:8c:52:6f:fc:9b:f0:3d:d2:35:17:c4:c6:30:c3: 61:85:3d:f3:e4:54:2d:58:08:65:fa:e0:01:83:6e:f1:71:e0: 7b:1b:b4:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYywtNPedfnOOOeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyMTE1NTk0MVoXDTI2MDExOTE2NTk0MVowLzEtMCsGA1UEAxMk MmIxYzQ2YzktZTNiYi00YTUyLWJmN2YtYTc0OWRiMjQ0ZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVPyBsVzB6BDfjACcLWZ53h+i4CW3nfQZbSU NFzdJUeGfP4P+/qQTCrsCUKd9QHFNHlXbPwXimfoA7rbPE6VnauC+mrR+NFhD4As tzMo3w/Yp/MDFzwbSyRxxY7fY2o+VoBo1oR3m8eBK6nTSnueQiY/30zoP6xqKU8+ m6gOEmlzOOWyUlqwcmygpX1CrCzBHw8IVHfeOaAqa44KX/i5OkMeZmvG+IyEOJBq EQtvvFjSS5Fi9jmusTynDASs+7uGWDxUyNtGYKe6i4Rgc/FZqj+OXsaLU0nf4nwN e+AyfIHll1Em10PeDDW2EgsRD7NrbPyXMy6XLQNPsf4JYIZ9/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgbfdV/bIpZjDYz60+I+0OH+qtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmNlYTY2NmUtYWM3Yy0z ZjkzLTkxYjEtNTJlYzdiZmI4NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3/Bvpj248X/rWJKdj/JdNchzqcH0eRqL8abD5CdzgXbeRG00cGoV/S /gTdcxzEGiaE9Si8WwVJGEaHnjM/Jgc7HHz3YxtDYC7zFFLIQHqO9r8ybvvP0U2O YTX+zWx67uCq7ndZghv+PMCZAr6Is/ZaT0YrKLpeECP+SuK8WvdBKrKOV5hHioM4 odNZi8spuh79j2xKQteFTIQ4z5l4cDhc77OW6zRWHnhC6/5O6G+9hX37G4oaPaGd QHWZqZ/5hFYqyybsyAlvuPgruarrdwtyK/G6e9trxoqqgSOMUm/8m/A90jUXxMYw w2GFPfPkVC1YCGX64AGDbvFx4HsbtPg= -----END CERTIFICATE-----Generated at Mon Nov 3 17:19:15 2025 by rpki-client