$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70f84667-596d-3892-9efc-8d21ee5932e4.roa File: 70f84667-596d-3892-9efc-8d21ee5932e4.roa (raw, json) Hash identifier: A0Sxi2ogI2lHgZD4TOLvfrHM69Q4y6yXd3Tzt413Fig= Subject key identifier: 8B:13:C6:A3:36:88:5E:E2:A3:95:5D:75:1F:56:38:ED:F6:4B:B1:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD628751233DFFD42F3FB180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70f84667-596d-3892-9efc-8d21ee5932e4.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 70.165.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:87:51:23:3d:ff:d4:2f:3f:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=96af284c-5b75-49c0-a7c1-b71782c77164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:cd:6e:74:de:46:33:8f:e5:bc:20:f8:82: 7d:ae:d5:1c:b1:ba:78:c4:cb:78:f2:a1:9e:e5:60: be:b6:9f:c9:d7:f6:5d:ec:33:69:0d:8e:d6:50:92: 25:50:8b:df:4c:b1:5f:10:21:50:66:d9:f0:31:94: 66:28:02:fb:73:25:43:5a:d9:c4:90:14:f7:21:27: 0b:9d:c9:a4:05:28:96:d4:15:3c:93:a2:31:c8:e1: e6:84:8e:46:86:93:f1:d3:16:6d:57:ea:a0:53:cf: fb:d4:33:01:68:f9:a3:69:9e:22:d2:13:be:b2:0e: de:6a:b1:d6:bb:66:ed:d6:79:e8:66:a1:0a:97:7a: fa:be:fd:08:17:8e:13:d8:ec:a6:33:aa:72:7f:8b: f2:09:2f:26:9e:29:d6:e8:1c:ed:80:f0:10:e8:e0: 4a:9c:d6:28:94:97:ef:7e:c2:ec:a4:93:fe:f1:52: 38:6c:30:26:5a:b9:01:87:cb:e8:bf:a2:c7:ba:46: 75:43:64:59:35:a6:0e:32:31:e2:6e:ef:3d:47:4f: 2c:0e:18:42:c1:6e:b4:2c:56:72:ab:a9:ba:1d:10: 4b:37:eb:29:5e:83:07:0c:cd:52:e0:f6:45:f0:b5: dd:c1:dd:4b:eb:90:95:17:1c:fb:d8:50:9f:5c:66: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:13:C6:A3:36:88:5E:E2:A3:95:5D:75:1F:56:38:ED:F6:4B:B1:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70f84667-596d-3892-9efc-8d21ee5932e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d9:ef:11:79:b2:40:5a:08:1e:a5:da:09:24:b9:25:8d:f5: 80:e2:15:c4:69:e6:e3:ed:90:ad:0f:46:56:f4:1b:30:96:64: 4d:bd:6f:a0:e6:c7:da:4e:8c:34:24:19:e0:6e:6d:28:f4:3b: 1c:e0:d4:ed:7e:27:cf:72:56:78:17:63:83:91:ab:8d:fc:fe: 1b:44:39:71:cb:78:9b:fc:af:69:66:a0:31:f8:6d:1b:a2:e5: bf:52:36:66:17:03:0d:f7:c1:b6:4a:9a:a1:27:2a:e0:7f:06: 9b:6a:9a:5d:38:45:73:fb:5c:1c:cc:22:fe:2f:24:f3:d9:34: a9:f7:9e:2d:9a:90:bb:15:c3:cc:23:e3:9e:59:de:8d:0d:ca: fa:80:22:73:d7:78:a7:10:44:1e:6a:da:13:12:4c:97:9c:98: 13:6e:74:10:87:11:72:8c:9b:1b:f1:50:77:00:06:1a:ab:5f: 37:04:c7:b9:cd:71:f4:f2:a3:1b:d8:07:82:9e:ea:a2:30:45: ae:3d:70:27:2b:c8:4c:80:47:f9:31:5e:50:6c:c1:5e:44:2d: fd:87:93:b8:f7:d6:09:3f:69:37:d0:d5:80:fc:e1:4f:e3:59: b6:92:a2:5d:df:53:9d:78:39:0d:4e:69:23:9a:1b:d4:7e:f2: 76:e3:86:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYodRIz3/1C8/sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OTZhZjI4NGMtNWI3NS00OWMwLWE3YzEtYjcxNzgyYzc3MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN3NbnTeRjOP5bwg+IJ9rtUcsbp4xMt48qGe 5WC+tp/J1/Zd7DNpDY7WUJIlUIvfTLFfECFQZtnwMZRmKAL7cyVDWtnEkBT3IScL ncmkBSiW1BU8k6IxyOHmhI5GhpPx0xZtV+qgU8/71DMBaPmjaZ4i0hO+sg7earHW u2bt1nnoZqEKl3r6vv0IF44T2OymM6pyf4vyCS8mninW6BztgPAQ6OBKnNYolJfv fsLspJP+8VI4bDAmWrkBh8vov6LHukZ1Q2RZNaYOMjHibu89R08sDhhCwW60LFZy q6m6HRBLN+spXoMHDM1S4PZF8LXdwd1L65CVFxz72FCfXGbIuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsTxqM2iF7io5VddR9WOO32S7FFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzBmODQ2NjctNTk2ZC0z ODkyLTllZmMtOGQyMWVlNTkzMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXZ7xF5skBaCB6l2gkkuSWN9YDiFcRp5uPtkK0PRlb0GzCWZE29b6Dm x9pOjDQkGeBubSj0Oxzg1O1+J89yVngXY4ORq438/htEOXHLeJv8r2lmoDH4bRui 5b9SNmYXAw33wbZKmqEnKuB/Bptqml04RXP7XBzMIv4vJPPZNKn3ni2akLsVw8wj 455Z3o0NyvqAInPXeKcQRB5q2hMSTJecmBNudBCHEXKMmxvxUHcABhqrXzcEx7nN cfTyoxvYB4Ke6qIwRa49cCcryEyAR/kxXlBswV5ELf2Hk7j31gk/aTfQ1YD84U/j WbaSol3fU514OQ1OaSOaG9R+8nbjhnw= -----END CERTIFICATE-----Generated at Tue Nov 4 08:07:48 2025 by rpki-client