$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff2777a1-c89e-3482-9542-959d540d56b5.roa File: ff2777a1-c89e-3482-9542-959d540d56b5.roa (raw, json) Hash identifier: rI6l4qQZGtrxO1uPrN9rXdo0aZeV1hOhddrrwSOWMdU= Subject key identifier: 70:20:0F:AB:32:F4:15:C9:05:1A:6F:96:BE:6F:51:C3:96:9C:69:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21DAB404A5D2A812BBA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff2777a1-c89e-3482-9542-959d540d56b5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.188.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1d:ab:40:4a:5d:2a:81:2b:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=84c666b5-179f-47da-8ee4-306c7adec988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1b:1a:b7:13:b1:20:fa:91:9e:64:b4:ef:29: a4:c7:60:e8:42:8f:01:66:22:90:d0:be:eb:9e:8c: 0f:46:bb:b1:a5:7e:a5:a1:e3:8d:09:30:db:5c:f7: 66:e5:db:e6:64:67:4f:f8:6d:ed:0f:25:a5:e5:68: ee:03:8b:45:30:9b:f7:eb:a7:ac:e5:69:57:05:d3: ab:1b:f3:4e:50:b4:28:33:9e:3c:06:af:0d:3c:56: 64:59:ab:d4:7e:eb:79:1b:78:5c:3e:b5:b5:98:bd: 30:48:3b:2b:1f:f8:37:3c:5a:07:7f:57:de:6f:d1: e0:03:d9:9a:cb:4a:0f:b0:4e:bd:32:bd:71:26:9f: 9a:d3:9e:aa:c9:08:ba:21:5e:9c:d9:5f:c2:96:bf: e7:3d:14:20:bd:6c:5c:6e:7d:ea:41:53:0c:8c:22: 44:eb:f0:52:f3:83:28:7a:ae:00:85:ae:b9:d7:20: 34:b1:18:b2:0b:a8:70:91:b7:61:f2:68:91:7f:81: 80:30:a1:ed:8f:8a:38:d3:e2:2b:3f:3f:08:09:9d: a3:4f:ab:96:73:69:4d:0e:3c:0f:f0:45:a3:20:6a: d9:1e:b5:64:bf:32:e6:f9:60:42:45:77:29:9f:4f: e9:02:d4:92:7f:1a:d9:74:ad:90:43:13:87:c1:b2: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:20:0F:AB:32:F4:15:C9:05:1A:6F:96:BE:6F:51:C3:96:9C:69:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff2777a1-c89e-3482-9542-959d540d56b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:db:42:93:62:70:80:ae:6d:de:ec:47:f0:42:e6:9f:ca:32: 25:18:d5:e8:74:40:27:7a:cf:38:7a:c6:57:2a:f1:83:0e:58: 86:f9:29:d4:3f:cf:be:ce:04:be:1c:a8:e2:d3:81:0a:34:ba: 69:2b:d3:8f:63:2d:5f:dc:18:bd:4b:6e:5e:b6:0d:2f:2b:23: b7:92:ce:31:f0:6a:b7:48:89:b8:42:7b:ca:ab:0f:fb:f1:73: cc:86:3e:ae:25:fa:35:e4:e5:ca:3e:cf:33:9b:72:5d:17:7e: cc:90:fb:a8:fe:a4:b1:52:0e:3d:b3:d7:f6:c9:c7:03:2d:d6: e9:d2:0c:44:02:b0:06:c4:76:8f:6d:7e:16:34:c8:63:67:22: bb:29:52:f7:6b:b9:f3:fe:71:45:51:54:82:e2:4d:f5:9f:64: fd:37:be:d9:9d:f9:b0:8b:5e:5b:67:cf:07:f5:77:b8:c9:86: d5:20:31:68:fc:d5:0c:cf:2d:b4:37:b2:ef:03:4e:2b:fc:1a: 0b:89:c4:01:78:fa:fe:2a:86:b7:28:0e:dc:3f:be:a4:7e:1f: 33:55:a9:c1:64:4f:f0:d1:6b:d0:75:52:57:6a:aa:a6:41:5d: a0:03:12:53:f3:23:fd:79:70:62:80:a2:f3:62:16:c2:01:aa: e5:f3:53:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28h2rQEpdKoEruoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODRjNjY2YjUtMTc5Zi00N2RhLThlZTQtMzA2YzdhZGVjOTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixsatxOxIPqRnmS07ymkx2DoQo8BZiKQ0L7r nowPRruxpX6loeONCTDbXPdm5dvmZGdP+G3tDyWl5WjuA4tFMJv366es5WlXBdOr G/NOULQoM548Bq8NPFZkWavUfut5G3hcPrW1mL0wSDsrH/g3PFoHf1feb9HgA9ma y0oPsE69Mr1xJp+a056qyQi6IV6c2V/Clr/nPRQgvWxcbn3qQVMMjCJE6/BS84Mo eq4Aha651yA0sRiyC6hwkbdh8miRf4GAMKHtj4o40+IrPz8ICZ2jT6uWc2lNDjwP 8EWjIGrZHrVkvzLm+WBCRXcpn0/pAtSSfxrZdK2QQxOHwbJ4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAgD6sy9BXJBRpvlr5vUcOWnGnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmYyNzc3YTEtYzg5ZS0z NDgyLTk1NDItOTU5ZDU0MGQ1NmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRryoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnbQpNicICubd7sR/BC5p/KMiUY1eh0QCd6zzh6xlcq8YMOWIb5KdQ/ z77OBL4cqOLTgQo0umkr049jLV/cGL1Lbl62DS8rI7eSzjHwardIibhCe8qrD/vx c8yGPq4l+jXk5co+zzObcl0XfsyQ+6j+pLFSDj2z1/bJxwMt1unSDEQCsAbEdo9t fhY0yGNnIrspUvdrufP+cUVRVILiTfWfZP03vtmd+bCLXltnzwf1d7jJhtUgMWj8 1QzPLbQ3su8DTiv8GguJxAF4+v4qhrcoDtw/vqR+HzNVqcFkT/DRa9B1UldqqqZB XaADElPzI/15cGKAovNiFsIBquXzU8U= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:20 2025 by rpki-client