$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df797c82-2f27-3335-b331-41e9a39e2db6.roa File: df797c82-2f27-3335-b331-41e9a39e2db6.roa (raw, json) Hash identifier: 2RwOAC7CcWHZ3gGdk2OQ59Pv7kX5Pu/OuC9KS1NIlkc= Subject key identifier: 3C:0D:27:91:0D:53:20:8C:EB:74:A1:29:6D:36:9F:A7:FA:0A:4B:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7CE720B5EE4F780293540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df797c82-2f27-3335-b331-41e9a39e2db6.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 70.90.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:ce:72:0b:5e:e4:f7:80:29:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c5890b7e-94d1-4b82-85dc-fbf10e660f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:ba:d6:51:3c:3b:e1:67:47:5e:ae:02:0a: 39:ab:1d:32:27:55:c0:32:fd:c9:47:89:fb:e9:c3: bb:c1:10:9f:af:3b:21:cb:62:a6:d5:49:31:9e:7b: 6f:f6:f6:e6:7c:b9:f3:44:0d:5e:e4:f7:3f:21:ba: 51:0f:5e:62:71:87:d6:5d:10:8d:d9:f1:3d:75:6d: 7a:4f:9b:69:09:75:1d:64:f8:08:3a:ea:e1:9b:b4: e9:62:1a:0d:46:c5:bb:c4:09:7e:1f:f7:53:ab:c2: ec:45:29:26:b2:dc:1f:d5:76:9c:2f:43:8d:92:24: d5:c4:28:6d:dd:97:7d:e4:15:07:e6:95:3d:05:10: 33:67:15:60:fb:d5:1c:bb:ff:61:0e:0b:70:f1:9f: 53:f1:2d:cb:c5:d0:80:9a:a2:f9:e6:4e:e3:fb:e1: a8:ee:0e:d0:fa:57:e3:1a:ae:c5:d1:c4:d8:20:83: 88:03:b7:75:09:76:4a:91:32:c3:25:69:11:e4:9a: c1:db:cd:ec:52:f2:5f:62:e7:5e:b1:95:2e:9a:7c: 25:d7:72:f8:7d:35:44:72:12:28:0c:af:d0:81:80: 20:af:66:bb:43:22:00:74:93:83:83:a2:f2:44:ce: 31:ec:d0:0b:10:69:02:17:05:f4:58:41:63:80:8d: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0D:27:91:0D:53:20:8C:EB:74:A1:29:6D:36:9F:A7:FA:0A:4B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df797c82-2f27-3335-b331-41e9a39e2db6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.90.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:db:81:b6:6c:17:e4:8e:01:25:a6:e2:74:d0:50:2a:da:b5: d0:f0:a5:fa:35:e6:c3:f9:66:be:8c:71:2a:10:15:43:5e:73: bf:4e:c1:bd:19:0d:03:10:be:b0:11:8e:69:13:9c:99:27:39: a4:d3:65:3f:3e:e9:c8:70:04:54:75:53:6f:be:56:9e:c0:87: 89:3d:ca:71:86:a9:9a:31:f3:ad:20:d5:4a:a0:2e:57:09:eb: f8:0b:73:87:e2:14:72:e2:9e:6a:6e:10:4b:39:7b:e9:57:03: d7:00:b7:7a:c0:0e:c5:25:88:98:2d:3b:bc:f5:ad:5a:4e:34: 0e:e6:c1:b5:a0:78:10:3d:1c:bb:24:62:c9:fe:55:8d:84:01: 84:3d:ed:17:65:08:38:9f:d5:75:3a:48:35:67:69:57:b4:9a: be:0f:b3:33:9d:ce:e6:d8:c6:c2:6b:47:10:bf:f8:ba:08:ca: 06:73:5f:2a:34:25:1f:40:80:c8:09:0e:08:ce:48:ff:9d:b8: a7:37:87:02:9a:63:83:8b:b4:48:1b:19:43:3f:cc:3c:22:8f: 6d:69:1c:60:ca:59:fe:43:5e:b7:c4:59:32:30:e3:f7:45:d8: ea:aa:e8:43:38:f6:a4:b9:e0:d5:31:c0:ca:5b:3e:60:40:2b: 24:03:de:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t85yC17k94ApNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YzU4OTBiN2UtOTRkMS00YjgyLTg1ZGMtZmJmMTBlNjYwZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvy61lE8O+FnR16uAgo5qx0yJ1XAMv3JR4n7 6cO7wRCfrzshy2Km1Ukxnntv9vbmfLnzRA1e5Pc/IbpRD15icYfWXRCN2fE9dW16 T5tpCXUdZPgIOurhm7TpYhoNRsW7xAl+H/dTq8LsRSkmstwf1XacL0ONkiTVxCht 3Zd95BUH5pU9BRAzZxVg+9Ucu/9hDgtw8Z9T8S3LxdCAmqL55k7j++Go7g7Q+lfj Gq7F0cTYIIOIA7d1CXZKkTLDJWkR5JrB283sUvJfYudesZUumnwl13L4fTVEchIo DK/QgYAgr2a7QyIAdJODg6LyRM4x7NALEGkCFwX0WEFjgI0bLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwNJ5ENUyCM63ShKW02n6f6Ckv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY3OTdjODItMmYyNy0z MzM1LWIzMzEtNDFlOWEzOWUyZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERlpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvbgbZsF+SOASWm4nTQUCratdDwpfo15sP5Zr6McSoQFUNec79Owb0Z DQMQvrARjmkTnJknOaTTZT8+6chwBFR1U2++Vp7Ah4k9ynGGqZox860g1UqgLlcJ 6/gLc4fiFHLinmpuEEs5e+lXA9cAt3rADsUliJgtO7z1rVpONA7mwbWgeBA9HLsk Ysn+VY2EAYQ97RdlCDif1XU6SDVnaVe0mr4PszOdzubYxsJrRxC/+LoIygZzXyo0 JR9AgMgJDgjOSP+duKc3hwKaY4OLtEgbGUM/zDwij21pHGDKWf5DXrfEWTIw4/dF 2Oqq6EM49qS54NUxwMpbPmBAKyQD3p0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:22 2025 by rpki-client