$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cdd003-51b6-38f1-ac91-909676b4e835.roa File: 10cdd003-51b6-38f1-ac91-909676b4e835.roa (raw, json) Hash identifier: dsigEb4GCt9DxCNFxvymOnMwaJXrlWWZoZle75c+uaE= Subject key identifier: BE:A0:F1:DD:26:DF:34:7C:14:1E:41:43:F6:7D:88:64:E4:2A:72:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625CA396D350479C322738 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cdd003-51b6-38f1-ac91-909676b4e835.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 62957 IP address blocks: 70.165.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5c:a3:96:d3:50:47:9c:32:27:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=e32844ce-0efb-4de1-9724-7543b20fb11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:78:09:c7:ee:b7:de:54:ed:b2:7e:bc:02: 30:84:36:9a:16:9b:91:af:51:ae:36:ec:09:dc:35: e8:00:42:c9:10:df:7b:51:8a:33:4a:78:7c:8f:d8: 8a:a7:a9:8a:fe:9b:2a:b0:26:14:8f:95:a1:37:46: e5:0d:80:ff:d7:9c:48:58:db:fc:69:62:7b:31:d1: 41:5a:27:9c:33:00:f9:87:f4:44:4f:de:f0:a1:5e: df:1a:f8:d8:61:cf:06:9f:46:ec:d2:0e:84:db:6f: a4:6a:e2:ae:bd:11:4d:48:a4:6e:c2:11:28:8f:c2: 38:e5:52:fe:fd:dd:ee:4e:86:ca:91:f3:99:52:fe: 32:46:d0:fc:b8:3f:e1:dc:f8:d3:3e:b1:3c:e3:5e: 28:65:af:ca:b9:c1:43:af:8d:08:97:f7:bb:d9:c5: 44:93:37:bd:58:62:99:50:8d:e7:07:d4:78:b7:47: 0f:6f:f3:4e:61:77:c7:43:f6:34:23:27:ab:0f:00: a8:32:05:f3:d1:5e:86:f0:02:78:59:f3:62:aa:53: da:40:0d:17:5d:5c:8f:56:35:35:f5:7a:2a:4d:8c: ac:af:59:14:03:4f:54:c9:ed:72:de:99:50:ce:a2: 40:3a:ab:61:95:7b:af:ea:4b:ce:24:0c:15:19:f9: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A0:F1:DD:26:DF:34:7C:14:1E:41:43:F6:7D:88:64:E4:2A:72:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cdd003-51b6-38f1-ac91-909676b4e835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f3:e0:46:21:1e:36:26:5f:49:8e:c6:3a:47:f3:22:77:cc: 3d:8e:82:97:57:39:8f:84:09:4f:53:9c:d5:57:88:68:72:74: 2b:09:9b:2e:03:51:31:4a:83:af:df:db:8b:1d:29:c3:43:d5: 20:b2:79:d6:05:de:2d:cd:f7:d2:b1:9b:88:38:36:ce:8d:5c: bf:d5:41:39:a7:f5:25:bf:12:da:05:4a:ba:fb:ef:88:41:23: a1:73:67:60:68:96:cf:2a:db:59:73:af:77:6d:9f:7f:58:2a: cf:cf:33:a6:1f:e3:19:f7:8a:d3:18:36:8f:2b:f9:61:56:bd: 9e:ef:fa:00:fd:b8:74:5a:d2:0b:2a:77:0b:d7:07:4f:3b:9d: 42:2e:03:0d:cd:73:b9:c7:3a:c5:71:b5:6d:34:10:a3:49:0c: 81:af:35:02:27:f8:6b:36:86:7b:ed:36:fe:b1:ea:61:65:09: 0a:9c:0f:11:7c:42:d0:33:b5:15:0e:6b:82:08:63:aa:0a:bc: 85:7b:75:ab:cd:ba:fd:1b:37:c3:c4:cb:30:bc:fa:da:25:12: 06:0e:21:e8:eb:4c:63:26:ea:94:0a:7a:fd:bf:1b:93:8a:85: 0c:c4:aa:c4:02:36:7e:ee:12:c3:10:4b:52:f0:0a:25:1e:95: ca:b4:3f:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlyjltNQR5wyJzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZTMyODQ0Y2UtMGVmYi00ZGUxLTk3MjQtNzU0M2IyMGZiMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXp4Ccfut95U7bJ+vAIwhDaaFpuRr1GuNuwJ 3DXoAELJEN97UYozSnh8j9iKp6mK/psqsCYUj5WhN0blDYD/15xIWNv8aWJ7MdFB WiecMwD5h/RET97woV7fGvjYYc8Gn0bs0g6E22+kauKuvRFNSKRuwhEoj8I45VL+ /d3uTobKkfOZUv4yRtD8uD/h3PjTPrE8414oZa/KucFDr40Il/e72cVEkze9WGKZ UI3nB9R4t0cPb/NOYXfHQ/Y0IyerDwCoMgXz0V6G8AJ4WfNiqlPaQA0XXVyPVjU1 9XoqTYysr1kUA09Uye1y3plQzqJAOqthlXuv6kvOJAwVGfnxYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6g8d0m3zR8FB5BQ/Z9iGTkKnLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTBjZGQwMDMtNTFiNi0z OGYxLWFjOTEtOTA5Njc2YjRlODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXz4EYhHjYmX0mOxjpH8yJ3zD2OgpdXOY+ECU9TnNVXiGhydCsJmy4D UTFKg6/f24sdKcND1SCyedYF3i3N99Kxm4g4Ns6NXL/VQTmn9SW/EtoFSrr774hB I6FzZ2Bols8q21lzr3dtn39YKs/PM6Yf4xn3itMYNo8r+WFWvZ7v+gD9uHRa0gsq dwvXB087nUIuAw3Nc7nHOsVxtW00EKNJDIGvNQIn+Gs2hnvtNv6x6mFlCQqcDxF8 QtAztRUOa4IIY6oKvIV7davNuv0bN8PEyzC8+tolEgYOIejrTGMm6pQKev2/G5OK hQzEqsQCNn7uEsMQS1LwCiUelcq0P9Y= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:18 2025 by rpki-client