$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87bfefc4-ab53-328b-97ca-5659ad31a97e.roa File: 87bfefc4-ab53-328b-97ca-5659ad31a97e.roa (raw, json) Hash identifier: dZ5YHK03bpsurKOaBI9/SMhGCA2qXtg9HhtULc0FSwU= Subject key identifier: B8:1B:53:7A:9F:24:E9:3A:D4:C0:2D:9F:06:DC:B7:4D:91:57:1E:C5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21A4A123809CD99964840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87bfefc4-ab53-328b-97ca-5659ad31a97e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.186.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1a:4a:12:38:09:cd:99:96:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=311dbf5f-50f4-46b8-9953-3d77bca3f291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:47:cc:cd:8f:ff:b5:6d:1d:d6:ca:fa:57: b5:74:df:bb:a0:a3:ca:8a:1f:d4:e0:23:b8:90:b5: f2:6f:73:1d:98:63:6b:8b:5b:80:10:1b:a5:1b:5e: e1:01:01:74:37:99:1c:1a:fa:9c:12:fb:b9:24:29: 06:20:7d:fd:0c:6e:ba:c3:86:5f:92:8c:4c:e5:79: dc:48:95:87:15:d1:38:15:14:e3:27:0b:c1:89:0d: af:41:fe:d9:78:7b:96:bc:04:c3:57:75:87:fd:50: 44:99:9f:2e:38:44:94:47:ea:c8:59:5e:b4:16:a3: 3c:9e:d5:ef:2a:35:4a:70:42:cf:89:ea:5e:81:aa: fd:c6:74:ac:57:1a:2d:19:81:e0:a5:14:14:18:9c: a1:3a:4b:03:18:e3:f2:93:90:28:2b:b1:5b:72:71: 7b:44:65:cb:f8:23:30:be:02:f4:5b:5f:4f:34:85: ef:c6:a8:eb:54:e8:bd:5f:57:bd:08:a1:83:1e:f5: 8e:78:6e:72:a2:ff:dc:2c:db:8e:b6:8c:db:8b:30: a0:87:a8:04:c2:55:1d:bd:bf:b5:b8:4d:00:ce:91: 03:cd:34:c9:1d:bc:b5:d7:66:a1:ac:b6:94:27:32: 72:33:70:c6:96:08:ff:c2:6b:da:a6:66:56:e8:2a: be:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1B:53:7A:9F:24:E9:3A:D4:C0:2D:9F:06:DC:B7:4D:91:57:1E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87bfefc4-ab53-328b-97ca-5659ad31a97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.186.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2f:b7:81:c0:0a:e4:ff:0b:03:99:9f:c0:89:12:cf:9a:c1: 6e:6d:7f:bd:20:c8:b1:30:ea:b6:42:30:04:98:02:9e:98:b7: 0e:0d:f9:e5:ef:61:2d:40:42:3e:ed:7a:c0:64:b5:d3:8f:1d: a1:2c:e0:c2:47:a3:97:48:2f:5b:90:23:6b:ed:c5:37:d1:76: f2:d4:76:c7:47:0b:cc:cd:ea:f5:a9:b7:53:0c:a6:3a:06:32: 81:f9:f6:20:5a:e7:74:46:c7:b4:c4:f2:b0:b8:84:02:5d:7c: 92:16:3d:01:0b:c0:39:96:6c:2e:99:61:cd:f0:f3:68:06:bc: e5:cb:ef:2b:e4:da:1e:e8:6c:a1:75:c8:8f:6d:56:6a:ab:da: c1:2e:3b:2a:b7:90:81:89:02:ea:cd:a2:b2:77:eb:4f:32:95: 5c:b2:f5:76:0d:ce:cc:7d:11:6c:45:92:33:2d:f3:ea:56:a7: 14:52:01:e7:ae:df:bf:92:4c:77:9d:8f:3a:d9:14:b1:fc:97: 8c:a4:3d:ec:75:3e:d6:d9:88:23:51:22:74:94:1c:cc:20:c5: 14:28:9d:dd:0a:da:d3:9f:dc:5e:20:df:13:d1:ac:4e:09:cb: 70:e8:27:3b:d8:21:05:42:bd:6c:9e:37:f9:e3:48:c6:dd:c2: 95:a2:4a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hpKEjgJzZmWSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzExZGJmNWYtNTBmNC00NmI4LTk5NTMtM2Q3N2JjYTNmMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri9HzM2P/7VtHdbK+le1dN+7oKPKih/U4CO4 kLXyb3MdmGNri1uAEBulG17hAQF0N5kcGvqcEvu5JCkGIH39DG66w4ZfkoxM5Xnc SJWHFdE4FRTjJwvBiQ2vQf7ZeHuWvATDV3WH/VBEmZ8uOESUR+rIWV60FqM8ntXv KjVKcELPiepegar9xnSsVxotGYHgpRQUGJyhOksDGOPyk5AoK7FbcnF7RGXL+CMw vgL0W19PNIXvxqjrVOi9X1e9CKGDHvWOeG5yov/cLNuOtozbizCgh6gEwlUdvb+1 uE0AzpEDzTTJHby112ahrLaUJzJyM3DGlgj/wmvapmZW6Cq+RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgbU3qfJOk61MAtnwbct02RVx7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODdiZmVmYzQtYWI1My0z MjhiLTk3Y2EtNTY1OWFkMzFhOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIvt4HACuT/CwOZn8CJEs+awW5tf70gyLEw6rZCMASYAp6Ytw4N+eXv YS1AQj7tesBktdOPHaEs4MJHo5dIL1uQI2vtxTfRdvLUdsdHC8zN6vWpt1MMpjoG MoH59iBa53RGx7TE8rC4hAJdfJIWPQELwDmWbC6ZYc3w82gGvOXL7yvk2h7obKF1 yI9tVmqr2sEuOyq3kIGJAurNorJ3608ylVyy9XYNzsx9EWxFkjMt8+pWpxRSAeeu 37+STHedjzrZFLH8l4ykPex1PtbZiCNRInSUHMwgxRQond0K2tOf3F4g3xPRrE4J y3DoJzvYIQVCvWyeN/njSMbdwpWiSsg= -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:35 2025 by rpki-client