$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9332a94b-85f7-3f08-900e-149cbfec8517.roa File: 9332a94b-85f7-3f08-900e-149cbfec8517.roa (raw, json) Hash identifier: Wf3yf/YP1gsvUCYEcN3Avau0BxAJ8V4YzIsscby2vrc= Subject key identifier: A8:38:29:46:92:AE:AA:A2:40:EA:29:7F:AD:35:F2:CF:1B:78:77:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F018FBF2BFF77A6A7C60800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9332a94b-85f7-3f08-900e-149cbfec8517.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 70.190.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:8f:bf:2b:ff:77:a6:a7:c6:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=8e7a17fd-d22c-4ead-93b8-458db342366b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:04:64:87:2b:ee:5e:92:15:3e:fc:ee:51: f7:18:c7:dd:02:8f:ba:f1:29:f9:fe:ce:c4:e2:54: 6e:07:c8:96:0d:01:4a:b7:52:df:59:5e:a8:19:31: 4b:03:a3:f2:65:40:fd:d0:37:1e:29:d3:99:f0:c8: d7:24:3c:46:8c:03:e2:52:e4:2a:37:a2:73:32:49: b5:6c:b6:75:8f:95:f5:9a:9b:36:42:fa:01:1a:3a: ad:8b:67:43:42:1b:54:c0:8f:7a:1d:bc:89:85:09: 90:d5:b8:15:ca:c4:91:f0:ed:b2:26:e1:bb:e5:da: d1:f2:c8:60:13:ba:75:99:2a:8d:3a:4f:62:da:44: d3:31:92:3d:33:33:a8:22:e4:74:cd:5d:fe:82:82: 19:c8:92:f2:b3:73:97:a7:c1:af:15:8d:64:81:1c: 0a:8a:e5:1b:cb:46:13:29:65:67:9e:0e:8d:f8:53: eb:ae:88:aa:d0:bc:9f:66:f6:7a:1e:11:54:63:62: 8b:d2:24:d3:6b:18:02:7c:08:d8:87:31:e2:aa:21: 73:a6:c9:3b:56:45:07:5f:6b:c3:fd:47:58:ba:f8: 16:fb:70:49:74:cc:99:e7:d5:0e:ac:b5:73:32:03: 56:e7:a0:9d:ae:72:03:73:59:87:64:a1:be:39:08: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:38:29:46:92:AE:AA:A2:40:EA:29:7F:AD:35:F2:CF:1B:78:77:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9332a94b-85f7-3f08-900e-149cbfec8517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6a:27:ad:ec:b1:da:89:b8:23:dd:6c:31:22:b9:57:65:05: 9a:db:c6:7d:fb:7f:78:07:9c:95:fe:45:19:a8:5f:a1:da:89: 5c:62:91:7b:1a:9f:6b:76:af:b7:82:61:99:8a:9c:74:3f:44: 2c:74:9e:fa:2e:de:39:e0:28:8d:a0:5b:fd:d1:9a:ad:d1:51: d2:6d:3d:6c:e5:08:c3:92:7b:08:dc:71:4b:2d:be:eb:d7:d8: 90:d5:a2:8f:36:99:42:6a:5c:0b:e4:4e:95:d5:73:f0:97:2d: 37:25:92:00:1c:2f:93:4e:04:da:75:7e:29:2b:79:1d:5e:3a: 30:30:ea:bc:7f:e0:de:3a:bc:75:7e:d8:42:c2:c1:95:86:b1: c5:28:63:8a:2a:7b:7b:6a:40:5d:8d:0f:d8:fc:10:14:30:27: 9b:6c:55:78:3d:a7:f6:77:75:58:3a:5d:99:8c:c3:f1:7f:67: 5c:db:c1:c9:ac:a8:4b:37:8f:ca:29:a6:55:24:fd:bb:94:e9: 05:a0:91:80:fe:71:c1:db:4f:e2:a5:78:dd:26:a1:95:6f:8a: c2:cf:9d:42:02:0d:94:ed:29:12:01:98:b8:fb:5a:2a:1d:96: b6:a2:7f:36:3d:c2:d3:4d:a2:e0:4f:b1:bb:27:65:fb:01:68: f2:09:b2:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAY+/K/93pqfGCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OGU3YTE3ZmQtZDIyYy00ZWFkLTkzYjgtNDU4ZGIzNDIzNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGAEZIcr7l6SFT787lH3GMfdAo+68Sn5/s7E 4lRuB8iWDQFKt1LfWV6oGTFLA6PyZUD90DceKdOZ8MjXJDxGjAPiUuQqN6JzMkm1 bLZ1j5X1mps2QvoBGjqti2dDQhtUwI96HbyJhQmQ1bgVysSR8O2yJuG75drR8shg E7p1mSqNOk9i2kTTMZI9MzOoIuR0zV3+goIZyJLys3OXp8GvFY1kgRwKiuUby0YT KWVnng6N+FPrroiq0LyfZvZ6HhFUY2KL0iTTaxgCfAjYhzHiqiFzpsk7VkUHX2vD /UdYuvgW+3BJdMyZ59UOrLVzMgNW56CdrnIDc1mHZKG+OQj0KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg4KUaSrqqiQOopf6018s8beHehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTMzMmE5NGItODVmNy0z ZjA4LTkwMGUtMTQ5Y2JmZWM4NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr4HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpqJ63ssdqJuCPdbDEiuVdlBZrbxn37f3gHnJX+RRmoX6HaiVxikXsa n2t2r7eCYZmKnHQ/RCx0nvou3jngKI2gW/3Rmq3RUdJtPWzlCMOSewjccUstvuvX 2JDVoo82mUJqXAvkTpXVc/CXLTclkgAcL5NOBNp1fikreR1eOjAw6rx/4N46vHV+ 2ELCwZWGscUoY4oqe3tqQF2ND9j8EBQwJ5tsVXg9p/Z3dVg6XZmMw/F/Z1zbwcms qEs3j8opplUk/buU6QWgkYD+ccHbT+KleN0moZVvisLPnUICDZTtKRIBmLj7Wiod lraifzY9wtNNouBPsbsnZfsBaPIJsmY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:08 2025 by rpki-client