$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fdaf6b6d-0e93-3ec2-9406-767cd502478c.roa File: fdaf6b6d-0e93-3ec2-9406-767cd502478c.roa (raw, json) Hash identifier: BxgEzlGXo1xbhHZb/T9MJEtIyYxKywyyee0SgPjhP34= Subject key identifier: 78:4B:31:03:02:B7:E0:47:23:78:10:BA:06:08:18:F4:F4:6C:6E:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671A85E442BFEE7C8F3300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fdaf6b6d-0e93-3ec2-9406-767cd502478c.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1a:85:e4:42:bf:ee:7c:8f:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=2d3485d5-b99a-425d-bb01-e9a4bd6f2d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:5c:c2:57:4e:c3:e9:c1:7d:e2:31:6d:30: bd:f5:0b:43:4a:59:ab:04:2f:40:64:84:6c:b8:f1: 1b:93:21:95:86:e8:ad:da:e8:9b:3e:ee:5d:5e:dd: 0a:4b:a3:58:91:ff:7d:34:a5:c8:21:c5:d8:42:6a: 48:90:17:62:5d:fc:65:85:52:bd:58:c6:cd:d5:ff: 87:92:34:7d:7a:11:cd:64:4b:c7:7a:2d:7b:a2:cc: a5:cb:6f:84:ad:63:34:68:a4:9a:2d:72:ec:54:0b: dc:2e:1f:99:90:5c:94:86:ad:bb:ae:cc:5e:1d:be: 1b:e1:36:12:2b:51:90:c9:47:d8:b6:ca:b1:0c:3c: ad:41:5f:5d:33:b8:d5:93:95:13:b2:f2:17:0d:d3: 07:1a:e1:5f:8e:42:c5:b1:82:10:ff:0b:f9:92:07: 6c:46:f7:e8:6c:b3:46:9f:e3:d6:a5:f2:23:a6:84: 69:a3:9d:7b:df:c0:a6:fb:c4:ce:67:68:55:95:33: f4:a8:8e:fb:b4:4d:98:dd:ac:44:4b:44:54:f7:9f: f7:a6:2d:d3:dc:31:50:00:32:0b:10:e4:aa:10:41: 16:44:75:a5:eb:ff:0a:a0:6d:5c:3f:93:8f:47:88: d0:fa:c1:4a:a7:31:84:50:b9:3f:79:d6:e0:2b:97: 45:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4B:31:03:02:B7:E0:47:23:78:10:BA:06:08:18:F4:F4:6C:6E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fdaf6b6d-0e93-3ec2-9406-767cd502478c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a6:fd:37:f2:ec:f4:c3:99:1a:dc:a4:ef:b9:ee:12:09:45: 19:c9:3f:43:9a:ff:91:c7:f2:07:46:bd:fb:73:89:9f:22:da: 1b:d5:c9:b1:86:45:db:23:47:fc:d9:c0:d3:e3:b9:0f:29:74: f0:3b:c3:2e:d7:b4:53:36:21:81:a1:fa:a7:e0:48:a6:62:af: 72:f7:52:0b:19:19:7d:49:06:dd:9d:11:4b:30:b3:1c:6f:9c: 89:a6:ff:46:44:27:8d:9e:98:9e:95:8d:ee:ce:bd:38:27:8f: 5d:b5:ca:62:38:e6:98:09:55:45:4d:41:63:9b:9e:1c:c0:a8: ea:c8:f3:2d:04:a9:40:83:53:a3:c3:8a:a4:84:1c:62:57:f2: 90:b5:13:44:9e:84:b9:ec:77:81:2b:13:90:24:1f:35:89:bb: e9:a7:e1:26:27:1b:08:69:1d:74:77:ab:fa:b7:4a:b6:11:3d: c6:04:9e:2e:cf:0d:31:7e:76:9e:61:f9:33:00:69:af:65:f6: 3f:ad:39:ac:de:48:c3:31:cd:82:66:12:73:92:27:eb:4d:43: 29:9b:4b:9a:02:e7:3b:25:e6:7f:ae:18:f7:23:78:b3:51:3e: 44:2f:1d:73:38:35:52:10:71:ab:1a:1d:79:e6:79:b0:42:3f: b8:c9:b9:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxqF5EK/7nyPMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmQzNDg1ZDUtYjk5YS00MjVkLWJiMDEtZTlhNGJkNmYyZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqtcwldOw+nBfeIxbTC99QtDSlmrBC9AZIRs uPEbkyGVhuit2uibPu5dXt0KS6NYkf99NKXIIcXYQmpIkBdiXfxlhVK9WMbN1f+H kjR9ehHNZEvHei17osyly2+ErWM0aKSaLXLsVAvcLh+ZkFyUhq27rsxeHb4b4TYS K1GQyUfYtsqxDDytQV9dM7jVk5UTsvIXDdMHGuFfjkLFsYIQ/wv5kgdsRvfobLNG n+PWpfIjpoRpo51738Cm+8TOZ2hVlTP0qI77tE2Y3axES0RU95/3pi3T3DFQADIL EOSqEEEWRHWl6/8KoG1cP5OPR4jQ+sFKpzGEULk/edbgK5dFBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhLMQMCt+BHI3gQugYIGPT0bG4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmRhZjZiNmQtMGU5My0z ZWMyLTk0MDYtNzY3Y2Q1MDI0NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2m/Tfy7PTDmRrcpO+57hIJRRnJP0Oa/5HH8gdGvftziZ8i2hvVybGG RdsjR/zZwNPjuQ8pdPA7wy7XtFM2IYGh+qfgSKZir3L3UgsZGX1JBt2dEUswsxxv nImm/0ZEJ42emJ6Vje7OvTgnj121ymI45pgJVUVNQWObnhzAqOrI8y0EqUCDU6PD iqSEHGJX8pC1E0SehLnsd4ErE5AkHzWJu+mn4SYnGwhpHXR3q/q3SrYRPcYEni7P DTF+dp5h+TMAaa9l9j+tOazeSMMxzYJmEnOSJ+tNQymbS5oC5zsl5n+uGPcjeLNR PkQvHXM4NVIQcasaHXnmebBCP7jJuS4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:35 2025 by rpki-client