$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/597f4242-3711-387e-8c8d-495b96678fdc.roa File: 597f4242-3711-387e-8c8d-495b96678fdc.roa (raw, json) Hash identifier: asEngRNvZW+v6QdJLlESz2dzA87YIpdiwR/Lm3CXnRM= Subject key identifier: B3:A2:3B:70:6A:9F:70:45:79:CB:FE:F4:4D:BE:C5:F1:A9:F8:95:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20670EB7AC57C0B61948F760 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/597f4242-3711-387e-8c8d-495b96678fdc.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.173.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:0e:b7:ac:57:c0:b6:19:48:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=2ab013f5-2d7c-4e9b-9299-1feb69f42cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:e6:f6:1b:a2:b3:43:65:d6:2a:23:75:1c: 07:fc:78:d0:4f:74:9f:0d:74:ef:b0:44:75:f6:da: 0d:e7:73:9f:66:05:34:72:fd:6d:1a:5b:19:f0:1e: 6d:e4:00:cb:aa:d2:f3:dc:f8:aa:5f:ce:ca:0d:70: aa:55:cf:b8:ee:91:33:38:bd:5e:cf:ee:28:8b:67: 18:c7:53:56:62:bf:59:9c:b2:85:76:81:fc:4c:38: b6:c3:17:02:ff:8e:74:b2:43:77:63:df:c5:b3:aa: 56:2d:73:26:35:7c:5c:db:d6:18:bf:28:ab:71:70: 70:86:82:a9:bc:eb:13:06:1f:eb:08:16:a0:f9:33: 62:e7:0b:a5:c0:87:01:90:b7:a1:20:71:4c:4a:21: f3:66:24:60:b6:b6:30:ea:c9:2c:33:7d:ef:86:10: be:9a:bb:2f:3b:9a:4e:f8:b6:4e:8f:62:d1:b8:25: 33:8b:24:d4:ca:f1:db:2c:7a:93:23:bc:28:0f:8d: ac:dd:d2:ae:9b:93:b2:3a:ae:5b:c5:bf:ac:81:fa: 36:69:80:77:86:f0:7c:c4:45:c3:7a:a8:ea:18:c9: d9:9b:3b:46:b8:af:62:eb:bb:08:e1:2c:09:a4:a5: 69:35:26:51:9f:ab:19:43:12:1b:3b:4f:d0:23:bf: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A2:3B:70:6A:9F:70:45:79:CB:FE:F4:4D:BE:C5:F1:A9:F8:95:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/597f4242-3711-387e-8c8d-495b96678fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:46:11:b8:71:6e:be:0d:79:b4:5a:f1:a2:34:87:0a:81:7c: 5b:32:41:0f:ca:ca:3c:8b:ca:f9:a2:a1:4b:0e:51:e9:d1:e4: 20:2d:6b:da:ce:c7:e8:a8:0c:ed:01:f9:f9:0a:0d:32:ca:c7: 99:00:6e:83:a2:0e:09:f6:99:14:1f:cf:90:57:7d:08:a5:ce: ca:7d:da:bd:f3:cb:4c:79:91:8f:9c:b3:df:ff:9a:ea:f1:8e: b5:6e:ce:94:d1:0e:a5:b4:fa:68:11:3b:3c:4a:c5:fd:87:a9: c0:45:48:e2:4d:9e:71:71:6c:28:17:ea:18:3a:c6:5e:d1:82: e2:4f:d7:11:59:7d:1e:78:69:16:cd:9d:c7:34:6c:4f:26:ab: 9c:df:38:17:3f:dc:e9:b7:7b:9f:15:e3:86:74:6f:68:95:4a: 3a:ac:6e:cc:21:03:4d:3a:d6:4c:f5:c3:ce:4e:34:2a:b2:17: d5:bb:b1:5f:66:f6:91:21:ee:fa:f2:30:d8:f0:98:6d:66:69: cb:46:03:a2:85:7d:15:af:93:6a:8c:25:6e:e1:3a:ba:51:c9: ca:67:a9:64:10:29:32:1e:82:35:9c:f4:d4:7e:fd:39:a5:9a: a5:ac:7f:16:7b:6d:d1:02:cd:33:3f:34:95:61:62:8d:d3:6b: 39:3e:3d:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZw63rFfAthlI92AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmFiMDEzZjUtMmQ3Yy00ZTliLTkyOTktMWZlYjY5ZjQyY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXrm9huis0Nl1iojdRwH/HjQT3SfDXTvsER1 9toN53OfZgU0cv1tGlsZ8B5t5ADLqtLz3PiqX87KDXCqVc+47pEzOL1ez+4oi2cY x1NWYr9ZnLKFdoH8TDi2wxcC/450skN3Y9/Fs6pWLXMmNXxc29YYvyircXBwhoKp vOsTBh/rCBag+TNi5wulwIcBkLehIHFMSiHzZiRgtrYw6sksM33vhhC+mrsvO5pO +LZOj2LRuCUziyTUyvHbLHqTI7woD42s3dKum5OyOq5bxb+sgfo2aYB3hvB8xEXD eqjqGMnZmztGuK9i67sI4SwJpKVpNSZRn6sZQxIbO0/QI7/n0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOiO3Bqn3BFecv+9E2+xfGp+JX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTk3ZjQyNDItMzcxMS0z ODdlLThjOGQtNDk1Yjk2Njc4ZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5GEbhxbr4NebRa8aI0hwqBfFsyQQ/KyjyLyvmioUsOUenR5CAta9rO x+ioDO0B+fkKDTLKx5kAboOiDgn2mRQfz5BXfQilzsp92r3zy0x5kY+cs9//murx jrVuzpTRDqW0+mgROzxKxf2HqcBFSOJNnnFxbCgX6hg6xl7RguJP1xFZfR54aRbN ncc0bE8mq5zfOBc/3Om3e58V44Z0b2iVSjqsbswhA0061kz1w85ONCqyF9W7sV9m 9pEh7vryMNjwmG1mactGA6KFfRWvk2qMJW7hOrpRycpnqWQQKTIegjWc9NR+/Tml mqWsfxZ7bdECzTM/NJVhYo3Tazk+PUQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:56 2025 by rpki-client