$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1be8686-7555-30de-b692-489c496b8538.roa File: a1be8686-7555-30de-b692-489c496b8538.roa (raw, json) Hash identifier: f/K4pDqEhTikdQtng4hdZQdr88toLlEzgW7sc5BV314= Subject key identifier: 04:15:D8:C4:1B:36:F9:42:17:40:15:C6:DB:E5:05:4F:67:B2:E0:35 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B8BE2365FCAF5BD3FC332F340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1be8686-7555-30de-b692-489c496b8538.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.174.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:36:5f:ca:f5:bd:3f:c3:32:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=dd7e04f0-f89b-4dda-8a0e-ad5b8565b965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:d0:f5:5b:91:09:26:7c:fa:1e:9e:12:12: 4a:a2:a5:2e:ea:9c:fb:06:b3:bd:8e:20:0c:f1:98: d1:fa:35:a6:45:45:c5:03:8a:d4:44:52:23:43:87: 5c:f3:46:f6:0e:4c:d5:61:8d:f7:c0:63:ba:e4:83: 34:f4:f3:97:25:ce:da:a7:69:7e:94:00:ed:6f:fd: 34:41:f2:0b:e2:ef:f0:4d:a1:7c:33:d7:f7:c4:5b: d5:57:ad:67:73:e3:1e:62:da:83:e0:4f:ad:01:7f: 93:b7:c0:9e:aa:41:1c:9f:20:7e:e0:cd:5a:91:52: c4:4a:21:cb:27:ee:82:e7:fe:bd:60:7f:a7:46:7b: 73:18:55:49:2a:43:4f:43:93:c1:7e:e8:8c:48:2a: c2:c9:d4:9a:1d:ea:7a:f6:bd:a1:9a:52:42:f0:80: 83:96:9b:b0:ee:37:18:8a:74:8a:a1:b1:4f:0b:26: 71:12:f5:83:05:46:e4:ee:12:6a:95:07:72:25:b7: e5:8b:8c:26:a5:01:d5:de:f5:9c:98:50:0c:44:fa: 00:9e:94:7a:fe:4d:9c:0b:aa:3a:c2:05:2f:bd:74: d7:f0:6c:68:cd:1e:5c:94:02:f9:fa:cb:0b:77:51: c7:e9:45:53:58:d7:24:5c:8a:57:14:52:8a:89:59: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:15:D8:C4:1B:36:F9:42:17:40:15:C6:DB:E5:05:4F:67:B2:E0:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1be8686-7555-30de-b692-489c496b8538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:15:f7:b7:a8:f4:5d:e0:df:3f:40:8c:f6:2d:95:32:cc:32: 6c:f2:02:bd:3d:77:45:0c:50:bf:51:36:6a:d7:bf:23:ec:de: 20:05:d2:5d:b2:63:a6:fd:80:b9:c9:1f:d7:0c:56:92:88:6e: 8b:a1:0a:e8:f0:a4:59:5d:89:4c:e4:1f:bd:16:bf:86:2c:79: a1:26:60:ea:81:38:78:f2:14:44:fb:05:ae:a9:ba:6c:5b:4c: ea:c3:8c:0b:de:8f:0d:28:a3:41:65:a8:2d:01:16:ca:3f:a9: 77:09:f1:71:87:8e:af:6c:f1:4c:1c:fd:3c:f5:08:9e:2f:a1: 12:8a:03:37:d2:95:c9:ae:31:04:e8:5b:89:a7:e5:4f:ae:1d: ab:85:66:6c:c5:fc:23:21:4d:0e:f5:8c:bd:49:5c:21:c0:33: 73:59:47:57:00:7e:e5:f2:29:d1:56:14:a3:5f:43:95:1f:e1: 16:52:5b:7d:d5:68:6d:fe:cb:74:7c:eb:20:b2:bc:c8:99:22: 92:0a:6b:e0:25:2b:30:5c:15:0a:6a:cb:cd:3c:b0:0e:bd:90: 23:76:61:cc:7e:05:bf:72:ff:76:6c:8d:1a:db:08:c0:b4:c7: a1:cd:fb:7e:f1:ee:1b:5a:a6:62:5c:66:c5:b4:f7:cb:ea:4e: 90:95:8d:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jZfyvW9P8My80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZGQ3ZTA0ZjAtZjg5Yi00ZGRhLThhMGUtYWQ1Yjg1NjViOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHbQ9VuRCSZ8+h6eEhJKoqUu6pz7BrO9jiAM 8ZjR+jWmRUXFA4rURFIjQ4dc80b2DkzVYY33wGO65IM09POXJc7ap2l+lADtb/00 QfIL4u/wTaF8M9f3xFvVV61nc+MeYtqD4E+tAX+Tt8CeqkEcnyB+4M1akVLESiHL J+6C5/69YH+nRntzGFVJKkNPQ5PBfuiMSCrCydSaHep69r2hmlJC8ICDlpuw7jcY inSKobFPCyZxEvWDBUbk7hJqlQdyJbfli4wmpQHV3vWcmFAMRPoAnpR6/k2cC6o6 wgUvvXTX8GxozR5clAL5+ssLd1HH6UVTWNckXIpXFFKKiVmW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQV2MQbNvlCF0AVxtvlBU9nsuA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTFiZTg2ODYtNzU1NS0z MGRlLWI2OTItNDg5YzQ5NmI4NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRq6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0V97eo9F3g3z9AjPYtlTLMMmzyAr09d0UMUL9RNmrXvyPs3iAF0l2y Y6b9gLnJH9cMVpKIbouhCujwpFldiUzkH70Wv4YseaEmYOqBOHjyFET7Ba6pumxb TOrDjAvejw0oo0FlqC0BFso/qXcJ8XGHjq9s8Uwc/Tz1CJ4voRKKAzfSlcmuMQTo W4mn5U+uHauFZmzF/CMhTQ71jL1JXCHAM3NZR1cAfuXyKdFWFKNfQ5Uf4RZSW33V aG3+y3R86yCyvMiZIpIKa+AlKzBcFQpqy808sA69kCN2Ycx+Bb9y/3ZsjRrbCMC0 x6HN+37x7htapmJcZsW098vqTpCVjfE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:37:18 2025 by rpki-client