$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50afd094-ccc3-3716-9eaa-ecd1e10f973f.roa File: 50afd094-ccc3-3716-9eaa-ecd1e10f973f.roa (raw, json) Hash identifier: HZN6TBHGp2R7PYGyZdo9/m57aNyKseVgzIIEv+DImv4= Subject key identifier: 09:B7:2E:5E:F9:46:D7:64:10:2F:C3:FE:08:C1:AA:0B:63:5C:74:67 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671BE301FB8F02D9DAA4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50afd094-ccc3-3716-9eaa-ecd1e10f973f.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.191.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1b:e3:01:fb:8f:02:d9:da:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=b0ccc5b9-64ca-41e5-bcd9-512a204b3caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:6c:74:f1:39:58:e9:0b:b5:04:93:93:4a: 9d:9e:0c:65:8a:d4:b9:80:52:95:3b:46:3a:78:cf: 3c:01:74:1b:1e:0f:bf:71:7c:72:5a:92:07:1c:e6: d2:ff:d2:e6:16:29:b2:8b:dc:71:26:60:00:6e:4a: 2e:96:e8:5d:fe:cd:51:eb:8f:1b:05:f3:ae:0c:83: 08:32:c0:40:a5:e7:98:55:0c:2c:08:23:9d:15:ce: 6b:ed:59:7f:a6:e7:eb:7b:1f:cb:be:76:95:5a:62: 67:4f:ef:46:d2:d2:30:c7:a6:97:35:70:8e:2c:08: f8:f1:a3:aa:65:69:dc:97:8f:e7:d9:4c:5e:24:6a: 41:0e:f8:d6:80:50:5c:dd:bb:9a:95:55:f3:9e:3a: 60:ef:5c:6b:07:06:d2:ff:e5:d4:58:a8:e1:80:91: f0:39:e7:26:d1:0a:61:7a:69:58:c3:c5:30:c5:51: e0:2d:3e:6e:a2:0e:67:ce:40:4a:2a:bc:23:42:25: b0:52:b6:36:4c:fb:aa:94:da:c7:8c:d0:c1:59:28: f1:68:26:68:9b:35:1a:28:62:99:16:c7:57:b1:cb: fb:80:eb:f3:be:76:a2:ed:ae:62:34:f1:2c:f4:dc: e0:91:6a:1c:46:aa:5f:2f:ef:fb:b8:64:55:39:06: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B7:2E:5E:F9:46:D7:64:10:2F:C3:FE:08:C1:AA:0B:63:5C:74:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50afd094-ccc3-3716-9eaa-ecd1e10f973f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.191.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e1:bb:d5:71:b7:d1:5d:12:be:a1:72:f2:45:f1:8e:b3:82: 41:84:88:c7:44:12:b9:fe:c5:ca:83:50:5b:de:b2:c9:80:a1: 0f:cb:39:48:a7:25:a8:34:f8:43:1d:74:e6:f7:d3:9f:32:d7: 52:bc:c4:93:c4:32:ad:7e:70:c7:92:68:a9:9c:6d:b3:a6:99: 03:3b:34:66:2e:0f:36:8f:67:34:62:de:54:e9:77:cd:32:7f: a7:e5:0f:c6:55:df:a8:8d:26:3d:be:83:c2:a1:68:1f:94:0a: 8b:55:81:9d:9a:fb:f1:6e:18:90:cf:cc:01:80:0f:8f:81:dd: fb:45:05:c8:4e:09:f1:50:d4:84:51:ad:5e:43:f2:6d:25:ad: f4:86:d3:46:ab:95:c7:e7:05:20:95:fe:ec:38:5a:d6:54:e0: f7:19:b3:e9:ae:40:20:5c:53:4d:65:94:0a:14:21:28:ed:78: a3:b0:f9:90:46:ba:be:d3:5d:3d:12:10:cd:1d:49:74:0a:12: 38:6d:d8:47:69:34:65:5c:d8:de:8a:22:a0:ae:af:2d:2e:b9: 21:bc:0d:7b:7e:b3:55:7d:c0:5f:7b:60:6b:69:b4:a1:96:73: 30:88:7a:ef:78:7f:7f:73:49:2c:62:9c:e1:16:33:3a:eb:61: eb:5a:0d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxvjAfuPAtnapMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjBjY2M1YjktNjRjYS00MWU1LWJjZDktNTEyYTIwNGIzY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UBsdPE5WOkLtQSTk0qdngxlitS5gFKVO0Y6 eM88AXQbHg+/cXxyWpIHHObS/9LmFimyi9xxJmAAbkouluhd/s1R648bBfOuDIMI MsBApeeYVQwsCCOdFc5r7Vl/pufrex/LvnaVWmJnT+9G0tIwx6aXNXCOLAj48aOq ZWncl4/n2UxeJGpBDvjWgFBc3bualVXznjpg71xrBwbS/+XUWKjhgJHwOecm0Qph emlYw8UwxVHgLT5uog5nzkBKKrwjQiWwUrY2TPuqlNrHjNDBWSjxaCZomzUaKGKZ FsdXscv7gOvzvnai7a5iNPEs9NzgkWocRqpfL+/7uGRVOQYKPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm3Ll75RtdkEC/D/gjBqgtjXHRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTBhZmQwOTQtY2NjMy0z NzE2LTllYWEtZWNkMWUxMGY5NzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrhu9Vxt9FdEr6hcvJF8Y6zgkGEiMdEErn+xcqDUFvessmAoQ/LOUin Jag0+EMddOb3058y11K8xJPEMq1+cMeSaKmcbbOmmQM7NGYuDzaPZzRi3lTpd80y f6flD8ZV36iNJj2+g8KhaB+UCotVgZ2a+/FuGJDPzAGAD4+B3ftFBchOCfFQ1IRR rV5D8m0lrfSG00arlcfnBSCV/uw4WtZU4PcZs+muQCBcU01llAoUISjteKOw+ZBG ur7TXT0SEM0dSXQKEjht2EdpNGVc2N6KIqCury0uuSG8DXt+s1V9wF97YGtptKGW czCIeu94f39zSSxinOEWMzrrYetaDSc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:51 2025 by rpki-client