$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5bc4d37-e020-316f-98f3-abccce827ea4.roa File: b5bc4d37-e020-316f-98f3-abccce827ea4.roa (raw, json) Hash identifier: lZX0fmNpJCEA+YQSYk3TojwudUjljgCd5oIdQ44mOHw= Subject key identifier: 24:27:E1:D4:3A:FA:00:25:77:23:6A:62:22:17:4A:81:A7:33:D2:22 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B80B774F6071545DE57255420 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5bc4d37-e020-316f-98f3-abccce827ea4.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 19905 IP address blocks: 70.165.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:74:f6:07:15:45:de:57:25:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=9c790ce1-9b64-4cde-83e3-1163cf43b7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:4b:58:80:af:4c:b2:91:92:4b:d6:37:4f: fb:37:35:9e:43:75:65:5e:66:18:65:4b:38:fe:75: 7c:c7:f7:0d:08:ee:a6:e9:d7:03:1c:89:3f:c6:44: 52:5a:a9:4e:c8:0b:af:b3:cd:06:93:fc:a6:82:bc: 4b:20:07:2e:47:38:05:aa:12:44:8d:b8:2f:62:c0: 55:28:83:f0:33:64:58:5b:3a:92:bf:05:51:54:c6: 09:64:07:39:c5:93:5d:22:14:1b:c2:0d:aa:fe:2c: 09:12:51:ed:ca:64:23:87:b3:4d:32:33:b7:5f:bd: 8e:12:ef:04:f1:d9:8a:47:ab:24:8e:62:fd:34:a9: 87:54:3e:2a:ad:62:74:6c:18:c0:78:b1:f9:a0:c4: d5:6d:c5:49:0d:c4:c9:90:1b:c3:e5:4c:52:b5:da: 38:0e:de:0a:a4:f0:cb:65:ab:ef:ce:ee:3f:ed:95: 30:64:97:43:b7:1b:d9:ab:04:a3:ff:3f:e3:d8:c7: 98:df:e1:e3:1c:32:fe:f1:1d:cf:3f:75:cb:ab:af: 1f:94:6d:92:fd:e2:88:e1:c6:33:68:1c:9d:92:5e: 36:38:b7:ce:77:0c:a8:1c:d3:83:72:35:e9:30:de: a3:ed:a1:07:fd:06:4b:94:05:c5:f4:4c:71:f7:88: ba:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:27:E1:D4:3A:FA:00:25:77:23:6A:62:22:17:4A:81:A7:33:D2:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5bc4d37-e020-316f-98f3-abccce827ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:90:2c:5c:f1:60:70:48:b1:7c:60:80:b3:3c:44:d7:e5:72: 1d:9b:09:96:b3:4e:cb:36:10:48:60:69:c0:3c:c0:c1:32:19: 5b:b5:3f:e8:0c:83:e4:ba:5f:de:88:2f:f6:c0:3c:d5:e9:fb: 63:24:91:7d:1c:6e:8a:6b:66:13:1d:06:6d:01:15:b2:8a:a2: cd:fd:bc:d1:a3:20:10:48:bd:c4:7f:ce:ec:ce:5e:f3:90:85: 38:ce:fa:63:a1:b1:54:94:2c:7e:b5:25:9f:69:b8:ae:a4:6e: 8e:53:47:2a:9e:ab:65:ad:b9:3f:6e:c7:f2:e5:de:80:ed:d4: 54:b3:a2:1f:ad:f6:06:9e:7c:93:17:10:c7:ec:6a:82:c3:53: 69:c0:bc:ce:f4:5c:e1:2e:c4:24:2c:30:2a:cf:2e:b7:8a:82: 1c:e7:40:45:97:d6:57:a7:6b:e9:d7:fa:7d:2b:18:9d:4a:43: b8:3f:9b:d4:f5:25:4a:cd:d0:68:19:cf:9b:4c:5b:82:de:d1: 60:76:43:86:50:56:9b:d6:fc:95:b9:ff:92:76:c3:17:67:ef: 1b:7b:ef:1f:2b:d4:ed:79:2f:0d:88:cf:92:54:80:b8:60:f5: ad:76:8e:87:09:c0:4e:48:0b:58:64:2b:d6:9a:2f:da:bc:61: ea:97:25:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3T2BxVF3lclVCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk OWM3OTBjZTEtOWI2NC00Y2RlLTgzZTMtMTE2M2NmNDNiN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMhLWICvTLKRkkvWN0/7NzWeQ3VlXmYYZUs4 /nV8x/cNCO6m6dcDHIk/xkRSWqlOyAuvs80Gk/ymgrxLIAcuRzgFqhJEjbgvYsBV KIPwM2RYWzqSvwVRVMYJZAc5xZNdIhQbwg2q/iwJElHtymQjh7NNMjO3X72OEu8E 8dmKR6skjmL9NKmHVD4qrWJ0bBjAeLH5oMTVbcVJDcTJkBvD5UxStdo4Dt4KpPDL Zavvzu4/7ZUwZJdDtxvZqwSj/z/j2MeY3+HjHDL+8R3PP3XLq68flG2S/eKI4cYz aBydkl42OLfOdwyoHNODcjXpMN6j7aEH/QZLlAXF9Exx94i66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQn4dQ6+gAldyNqYiIXSoGnM9IiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjViYzRkMzctZTAyMC0z MTZmLTk4ZjMtYWJjY2NlODI3ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuQLFzxYHBIsXxggLM8RNflch2bCZazTss2EEhgacA8wMEyGVu1P+gM g+S6X96IL/bAPNXp+2MkkX0cboprZhMdBm0BFbKKos39vNGjIBBIvcR/zuzOXvOQ hTjO+mOhsVSULH61JZ9puK6kbo5TRyqeq2WtuT9ux/Ll3oDt1FSzoh+t9gaefJMX EMfsaoLDU2nAvM70XOEuxCQsMCrPLreKghznQEWX1lena+nX+n0rGJ1KQ7g/m9T1 JUrN0GgZz5tMW4Le0WB2Q4ZQVpvW/JW5/5J2wxdn7xt77x8r1O15Lw2Iz5JUgLhg 9a12jocJwE5IC1hkK9aaL9q8YeqXJUI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:52 2025 by rpki-client