$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa File: 221ee8af-67af-39f0-8880-44845100db4f.roa (raw, json) Hash identifier: 9MfS9q5xIwNtDlOqNHuNHlbxUTDZLouJlanTQhw4LzA= Subject key identifier: 43:AB:ED:88:1C:65:09:ED:C4:F4:D7:A0:0D:86:2E:C1:D0:2D:11:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2466AE96F75401DA5E8C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.172.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:46:6a:e9:6f:75:40:1d:a5:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=676a431f-b19d-4972-a89c-de248aa21ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:f2:f3:a0:03:7f:59:78:21:32:9a:4a:91: 57:a2:f0:27:a9:3e:a2:86:f3:4a:d9:ea:96:42:8e: 97:f6:bc:ce:ac:25:92:97:84:24:c2:9a:d1:d9:58: 02:f5:d6:c9:8e:82:c6:c5:1a:07:63:90:37:28:6f: 4c:58:29:c8:8c:03:5c:a9:b2:d2:47:b4:a6:83:9f: 73:70:21:b2:1e:38:1f:0c:26:87:1b:4f:f1:74:fa: 79:fd:e8:28:1c:d7:04:b7:f8:1b:e6:da:61:27:95: bc:06:b1:73:e7:7c:4e:c7:48:39:04:fe:00:ae:70: 7d:6b:c3:0d:29:a5:40:41:33:7b:32:37:f4:33:8a: af:cc:d7:00:7e:46:95:c9:32:18:fe:66:1e:b3:70: 50:1a:af:44:51:08:13:82:80:2a:15:74:d6:74:3f: 92:9a:a4:ac:4f:97:b7:eb:c0:e9:09:76:1a:69:79: 46:31:f8:a9:01:bd:25:95:ca:bc:e0:4f:85:85:28: ae:0e:8a:fb:3a:ca:81:f4:31:aa:8c:fa:68:87:61: 06:0d:93:d1:67:ea:b1:e8:67:ab:69:6c:90:e6:6d: 11:b5:3b:5f:db:d6:a8:b3:b0:b7:2a:82:2d:ab:0c: 17:b1:be:56:a9:2d:88:d9:2e:15:ec:bc:81:f7:36: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AB:ED:88:1C:65:09:ED:C4:F4:D7:A0:0D:86:2E:C1:D0:2D:11:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c2:af:9b:c3:7c:c3:e3:d5:2d:79:39:57:8b:16:94:5a:22: 7f:2a:61:0e:67:d4:99:46:87:05:2f:9d:f3:dc:ac:f4:a7:15: 0d:81:5f:96:73:f9:1d:27:66:c2:8b:89:59:16:f2:81:02:6e: a7:95:35:8b:03:60:99:09:dc:ac:a1:20:c6:1e:b6:86:a9:06: c5:91:97:d7:8b:dc:be:b7:a0:41:50:91:f0:c8:0e:31:2a:94: e5:38:15:e2:39:d7:05:05:17:27:01:8c:a4:ef:43:40:36:80: 05:63:0a:59:e0:b1:3e:49:f1:67:b4:57:ec:c9:89:0e:5d:90: f7:f5:5f:34:46:71:67:09:8a:6b:83:73:f2:4b:e6:29:78:ff: 10:6e:9c:3b:be:9d:fa:99:d5:95:c8:f4:c2:33:5c:43:12:fb: 80:96:d9:3b:55:45:0c:d4:cc:12:dd:5c:a5:3b:5a:38:50:5d: 3e:e9:41:51:50:b9:30:f4:72:ca:4f:ed:42:36:18:6b:87:d5: b7:8e:f1:80:47:2c:a9:0f:dd:39:3a:b5:fe:a6:a6:4e:46:37: 2f:8d:6b:3b:6b:d5:96:27:2e:a0:a3:47:04:1c:bb:c5:17:80: 74:65:fc:37:92:ce:cd:45:a3:5d:dd:b7:9d:1b:ae:aa:da:ba: a5:e1:f2:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kZq6W91QB2l6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Njc2YTQzMWYtYjE5ZC00OTcyLWE4OWMtZGUyNDhhYTIxZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiHy86ADf1l4ITKaSpFXovAnqT6ihvNK2eqW Qo6X9rzOrCWSl4QkwprR2VgC9dbJjoLGxRoHY5A3KG9MWCnIjANcqbLSR7Smg59z cCGyHjgfDCaHG0/xdPp5/egoHNcEt/gb5tphJ5W8BrFz53xOx0g5BP4ArnB9a8MN KaVAQTN7Mjf0M4qvzNcAfkaVyTIY/mYes3BQGq9EUQgTgoAqFXTWdD+SmqSsT5e3 68DpCXYaaXlGMfipAb0llcq84E+FhSiuDor7OsqB9DGqjPpoh2EGDZPRZ+qx6Ger aWyQ5m0RtTtf29aos7C3KoItqwwXsb5WqS2I2S4V7LyB9zYLowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOr7YgcZQntxPTXoA2GLsHQLRFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjIxZWU4YWYtNjdhZi0z OWYwLTg4ODAtNDQ4NDUxMDBkYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPCr5vDfMPj1S15OVeLFpRaIn8qYQ5n1JlGhwUvnfPcrPSnFQ2BX5Zz +R0nZsKLiVkW8oECbqeVNYsDYJkJ3KyhIMYetoapBsWRl9eL3L63oEFQkfDIDjEq lOU4FeI51wUFFycBjKTvQ0A2gAVjClngsT5J8We0V+zJiQ5dkPf1XzRGcWcJimuD c/JL5il4/xBunDu+nfqZ1ZXI9MIzXEMS+4CW2TtVRQzUzBLdXKU7WjhQXT7pQVFQ uTD0cspP7UI2GGuH1beO8YBHLKkP3Tk6tf6mpk5GNy+Naztr1ZYnLqCjRwQcu8UX gHRl/DeSzs1Fo13dt50brqrauqXh8qM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:41 2025 by rpki-client