$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67d96fda-1cdd-3645-b021-bce3f647ae96.roa File: 67d96fda-1cdd-3645-b021-bce3f647ae96.roa (raw, json) Hash identifier: 8LJ+pYsJ+4Z+pbIx8qfL2DAqygMpj/EEfOpQPYN0VqA= Subject key identifier: D1:9D:CB:71:B5:57:3C:37:79:A6:65:8D:9D:A2:CE:C0:0E:F0:25:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C62B513A13C9A6E9B5190 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67d96fda-1cdd-3645-b021-bce3f647ae96.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 70.162.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:62:b5:13:a1:3c:9a:6e:9b:51:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=cf4475f3-199d-4d1d-af4e-155501677457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d5:22:34:e1:c0:8b:80:ba:0a:ce:82:d1:c5: c9:e3:bb:a8:46:0e:13:db:b8:a5:41:85:13:1a:43: 7e:04:91:ad:f0:7c:93:5e:22:4b:f3:ff:e7:f5:21: 35:ec:cb:b3:cf:e0:a8:64:54:e8:8a:49:0b:8f:41: 2b:e9:61:04:5b:9a:31:14:5d:d9:87:8c:5b:d6:db: 59:bb:87:cc:a0:92:df:32:57:44:f0:ae:79:1e:2c: 8f:f4:86:f3:1f:25:ae:c5:8e:93:33:b6:0c:6b:5f: 08:10:60:e8:46:f5:1a:e0:97:ef:a8:b8:a6:04:8a: 34:ad:22:f5:68:61:c5:76:ee:2b:c3:e7:ee:07:46: f2:3e:ae:a4:89:13:a5:c7:26:bb:60:6c:c7:89:da: 4b:6b:19:07:12:3a:c1:77:82:8e:99:cb:77:54:b3: 9b:74:30:73:42:72:11:36:e2:10:cb:d4:fd:4e:ed: 32:39:66:70:71:8c:2c:e1:32:52:2f:46:3a:b3:36: 1a:25:f0:ce:7f:93:2f:20:bc:37:2e:22:78:02:f6: 83:23:77:2a:a0:d7:1f:2f:2f:c2:e0:bf:ab:c4:29: 6c:62:c4:89:26:23:0e:80:c0:0b:92:a9:34:9b:7d: 3a:7f:78:01:98:c3:23:b2:73:a8:f9:85:f9:fa:74: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9D:CB:71:B5:57:3C:37:79:A6:65:8D:9D:A2:CE:C0:0E:F0:25:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67d96fda-1cdd-3645-b021-bce3f647ae96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.162.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b8:a3:ad:74:97:ec:96:bb:e4:e5:43:fe:8f:c4:53:f5:85: 5c:48:a3:b5:e3:8e:5a:75:6c:7d:33:dd:b9:e9:ba:76:3d:b7: c0:95:40:94:ad:16:ff:80:91:f3:f2:65:43:9c:7d:fa:b3:c9: 7f:25:c4:f0:e8:d7:e4:e3:60:22:9d:63:52:72:9b:1b:a5:03: 6f:c9:59:25:c6:82:7e:c3:63:db:eb:fc:1a:7b:7d:de:b3:ef: 76:13:4c:d2:1f:43:64:4e:0b:50:49:62:1d:67:b4:49:a4:c2: a0:8e:dd:98:23:31:8f:42:4c:97:ef:11:6f:17:4b:66:fb:78: 50:ba:05:0b:5d:8a:44:04:a1:e6:9b:e0:eb:20:2b:ce:4d:03: 8e:78:7d:f3:c2:e2:66:48:d6:69:40:8d:a0:f6:74:db:5e:d4: 71:1f:47:81:d3:1d:66:22:52:51:73:ef:48:05:bf:dc:bb:fd: 20:fd:87:99:d1:5f:f7:bd:5d:9c:2a:57:79:c0:94:09:bf:50: 70:0f:29:fc:dd:4b:96:22:a7:97:d6:3b:59:20:1d:ea:c4:07: d6:4e:35:3d:0a:4b:64:d2:8a:45:12:a2:13:97:14:c4:84:89: 32:a1:f5:28:7b:c8:9f:90:65:cb:ea:67:4a:71:9c:3f:53:a0: 60:c4:b8:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnGK1E6E8mm6bUZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk Y2Y0NDc1ZjMtMTk5ZC00ZDFkLWFmNGUtMTU1NTAxNjc3NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9UiNOHAi4C6Cs6C0cXJ47uoRg4T27ilQYUT GkN+BJGt8HyTXiJL8//n9SE17Muzz+CoZFToikkLj0Er6WEEW5oxFF3Zh4xb1ttZ u4fMoJLfMldE8K55HiyP9IbzHyWuxY6TM7YMa18IEGDoRvUa4JfvqLimBIo0rSL1 aGHFdu4rw+fuB0byPq6kiROlxya7YGzHidpLaxkHEjrBd4KOmct3VLObdDBzQnIR NuIQy9T9Tu0yOWZwcYws4TJSL0Y6szYaJfDOf5MvILw3LiJ4AvaDI3cqoNcfLy/C 4L+rxClsYsSJJiMOgMALkqk0m306f3gBmMMjsnOo+YX5+nT6cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGdy3G1Vzw3eaZljZ2izsAO8CVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjdkOTZmZGEtMWNkZC0z NjQ1LWIwMjEtYmNlM2Y2NDdhZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+4o610l+yWu+TlQ/6PxFP1hVxIo7Xjjlp1bH0z3bnpunY9t8CVQJSt Fv+AkfPyZUOcffqzyX8lxPDo1+TjYCKdY1JymxulA2/JWSXGgn7DY9vr/Bp7fd6z 73YTTNIfQ2ROC1BJYh1ntEmkwqCO3ZgjMY9CTJfvEW8XS2b7eFC6BQtdikQEoeab 4OsgK85NA454ffPC4mZI1mlAjaD2dNte1HEfR4HTHWYiUlFz70gFv9y7/SD9h5nR X/e9XZwqV3nAlAm/UHAPKfzdS5Yip5fWO1kgHerEB9ZONT0KS2TSikUSohOXFMSE iTKh9Sh7yJ+QZcvqZ0pxnD9ToGDEuFk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:29 2025 by rpki-client