$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67bc5194-009f-350a-82e6-179a611b23ac.roa File: 67bc5194-009f-350a-82e6-179a611b23ac.roa (raw, json) Hash identifier: GZE61khuADpWLCTvfFqVpLlNHgMtEj3un6KDAO1et6s= Subject key identifier: 22:D9:FD:13:A1:C2:D6:C0:DA:6F:12:E3:7C:3A:77:BB:E6:31:CB:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671B983456AEF17A5F5900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67bc5194-009f-350a-82e6-179a611b23ac.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.189.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1b:98:34:56:ae:f1:7a:5f:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=19c14b39-a702-43d3-bade-04e6774654bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:b9:c1:5e:7a:b7:aa:b0:38:e1:e4:0c:06: c7:a0:37:0f:b1:de:9d:3a:d5:2e:4b:59:fc:8c:af: b9:30:64:4e:ce:55:6b:44:db:ef:71:21:f7:e8:50: 57:e1:56:5e:d4:a7:54:e7:b2:b4:80:75:40:61:7c: 99:58:d8:eb:34:4b:62:e1:a6:11:5a:e9:29:11:02: fc:37:56:e5:7a:fb:c2:91:f8:34:6d:15:58:b9:57: ea:0d:b4:5f:8b:11:e7:ed:c5:7d:28:18:06:54:b3: 70:f2:38:27:d3:15:b3:80:10:00:2a:37:de:df:6d: fe:a4:cd:20:bd:63:32:22:3f:d9:1d:cc:0e:a4:84: e1:8d:41:5f:dd:94:d1:45:77:51:34:be:34:48:e2: e2:4a:1a:fd:00:e1:80:77:95:38:c3:be:87:07:75: 62:d5:95:26:aa:70:b4:86:1d:c9:b5:22:78:bc:27: 6e:c4:86:55:2e:7e:ef:22:75:f7:14:ee:01:dd:db: f5:49:2c:6b:3a:f4:d4:45:5f:da:dc:9f:f8:5d:32: 08:43:6a:86:03:fa:52:19:f4:71:d7:62:09:00:10: ed:35:ab:cb:6b:f1:59:6a:fd:a1:a8:1f:44:a3:0f: 4e:95:94:27:59:33:a3:57:7d:8b:e8:7d:e3:3e:2b: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D9:FD:13:A1:C2:D6:C0:DA:6F:12:E3:7C:3A:77:BB:E6:31:CB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67bc5194-009f-350a-82e6-179a611b23ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:29:0e:7e:ee:35:2f:19:10:07:8e:9f:23:4c:e8:a4:1b:1d: 27:6c:4f:18:a0:e2:80:62:fd:f1:15:eb:0d:b1:ec:87:90:55: 25:6e:b8:d5:f1:8e:a8:38:00:53:49:16:77:01:68:dc:53:7a: ab:77:74:62:5d:5c:98:22:b3:d8:ff:ca:2e:5c:03:ba:15:d4: 7c:af:e0:3b:d6:ab:e9:16:44:d0:cf:d2:54:ed:e8:b7:2c:95: 4a:fb:c6:2e:84:53:07:c9:eb:be:02:a0:c7:c7:a5:3a:3c:86: 06:a1:71:32:be:ad:26:0b:71:b4:a0:3e:4b:d7:e5:f8:86:73: 78:41:30:4a:ce:75:34:2e:88:df:5f:dc:a1:99:ca:3b:31:0f: 3f:58:24:84:8e:ce:fe:5e:5f:3b:f4:d9:1e:7f:15:47:00:88: 2b:31:a1:0c:dc:a3:6c:70:5e:e7:9c:8e:bb:76:4b:11:c6:e4: 04:79:7b:72:16:4b:ba:f8:77:64:5d:81:d9:0f:fa:31:b3:d6: cc:87:22:9b:2e:0e:c5:ea:f4:bf:83:b8:29:fd:b0:d3:cb:79: 53:8a:00:3c:9b:19:2f:b3:0b:51:05:be:1a:c1:b9:68:a7:ec: fa:50:07:f9:98:cb:5d:11:75:7b:2b:3a:97:34:fb:a4:ef:ba: 69:89:4c:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZxuYNFau8XpfWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MTljMTRiMzktYTcwMi00M2QzLWJhZGUtMDRlNjc3NDY1NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpq5wV56t6qwOOHkDAbHoDcPsd6dOtUuS1n8 jK+5MGROzlVrRNvvcSH36FBX4VZe1KdU57K0gHVAYXyZWNjrNEti4aYRWukpEQL8 N1blevvCkfg0bRVYuVfqDbRfixHn7cV9KBgGVLNw8jgn0xWzgBAAKjfe323+pM0g vWMyIj/ZHcwOpIThjUFf3ZTRRXdRNL40SOLiShr9AOGAd5U4w76HB3Vi1ZUmqnC0 hh3JtSJ4vCduxIZVLn7vInX3FO4B3dv1SSxrOvTURV/a3J/4XTIIQ2qGA/pSGfRx 12IJABDtNavLa/FZav2hqB9Eow9OlZQnWTOjV32L6H3jPis1TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLZ/ROhwtbA2m8S43w6d7vmMctGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjdiYzUxOTQtMDA5Zi0z NTBhLTgyZTYtMTc5YTYxMWIyM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8pDn7uNS8ZEAeOnyNM6KQbHSdsTxig4oBi/fEV6w2x7IeQVSVuuNXx jqg4AFNJFncBaNxTeqt3dGJdXJgis9j/yi5cA7oV1Hyv4DvWq+kWRNDP0lTt6Lcs lUr7xi6EUwfJ674CoMfHpTo8hgahcTK+rSYLcbSgPkvX5fiGc3hBMErOdTQuiN9f 3KGZyjsxDz9YJISOzv5eXzv02R5/FUcAiCsxoQzco2xwXuecjrt2SxHG5AR5e3IW S7r4d2RdgdkP+jGz1syHIpsuDsXq9L+DuCn9sNPLeVOKADybGS+zC1EFvhrBuWin 7PpQB/mYy10RdXsrOpc0+6TvummJTBk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:06:03 2025 by rpki-client