$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8f29184-df16-3d60-9e21-e0aa6aa4d27f.roa File: d8f29184-df16-3d60-9e21-e0aa6aa4d27f.roa (raw, json) Hash identifier: GW+TjIIg+nm2g8LeDMWDSLzXG1ZJo5YYW9XT+i1IPTI= Subject key identifier: C7:97:A3:02:8B:E4:BF:B5:B4:22:7B:65:CF:B8:95:C5:72:30:39:E9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B8BE23673D953DB18C87C1B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8f29184-df16-3d60-9e21-e0aa6aa4d27f.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.174.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:36:73:d9:53:db:18:c8:7c:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=20036066-c299-485a-8e8e-b9d6c0fc5ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:59:b4:a4:43:ef:57:ec:87:6a:29:d6:44: ec:a5:8d:e8:20:84:f2:1b:1e:f2:eb:c4:9c:b7:c3: 08:9c:e6:e6:cb:6c:e1:9f:4e:c2:b3:fe:b5:9f:92: 98:34:a6:7e:d0:65:5a:a7:00:da:0e:70:c6:83:30: 0d:29:35:b2:60:41:69:ac:32:f1:15:4f:64:a4:bb: 41:62:9b:0c:ad:03:7a:32:34:01:27:9d:90:52:a0: 22:7e:bc:28:cd:a5:58:20:74:95:e1:12:86:e7:3c: be:71:67:dd:be:04:82:2f:74:6e:12:35:c0:e8:e1: 5a:a3:2d:6c:8e:87:97:39:a3:92:dc:ce:38:7a:cb: 9d:7f:14:e3:71:7c:ef:06:5c:36:18:ba:f3:c1:4b: 8a:7b:27:a6:0d:7d:b7:69:75:13:b1:20:4c:1c:48: 4d:a0:0d:dd:b8:c5:ca:ae:51:a7:12:da:13:75:e6: 81:9d:ef:1d:5e:bf:cf:b8:00:c2:00:18:47:fc:8e: 43:85:cf:b1:d0:92:57:35:5a:af:2a:93:aa:4b:fb: 44:a7:86:4a:ac:2d:b6:2d:47:69:72:45:5c:ed:7c: 32:20:e9:ec:ff:c3:9c:69:c1:e3:01:d8:ac:7b:31: 65:ae:aa:58:b8:f9:f3:0e:87:86:57:88:ed:c4:9d: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:97:A3:02:8B:E4:BF:B5:B4:22:7B:65:CF:B8:95:C5:72:30:39:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8f29184-df16-3d60-9e21-e0aa6aa4d27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e4:ae:15:7e:b7:5a:0e:e4:be:15:12:1f:6b:fa:2b:f9:32: 51:a0:a2:bd:23:f1:ad:f6:11:5c:4a:38:eb:39:b9:1a:e9:4d: c4:38:22:93:c2:e4:86:ae:43:7e:3a:b8:93:f2:25:d7:fe:10: b6:02:2d:10:22:92:64:d6:d4:0f:88:56:3a:fd:1c:4e:0b:49: 47:c8:1f:f1:81:cd:6d:f9:bd:62:b0:94:e2:be:39:ec:1d:e5: bc:7d:c2:f7:e5:13:e4:0a:3d:0c:2c:3b:97:8f:ff:c5:f0:89: 9d:d7:bd:7a:c4:9f:a1:77:fe:51:54:50:b0:83:48:78:75:0a: 47:57:4f:65:ad:50:c9:d4:02:b6:b2:57:d7:c0:27:46:8b:b3: 0a:88:09:58:78:12:48:1e:8e:f6:b0:0e:63:25:a0:8b:30:df: 6f:68:46:7a:68:4a:c9:b7:63:da:68:84:a9:63:71:8e:21:73: c4:81:07:97:3a:8f:3a:99:87:e2:1c:87:cb:07:cf:14:e6:2e: 01:db:c5:e0:a6:bc:5b:91:f6:ca:ad:b7:54:1a:a3:84:c6:91: dd:e4:90:fa:5f:06:f9:a4:49:5a:91:2e:29:00:c1:50:11:23: a9:27:9f:e2:69:51:1d:3c:67:4a:e2:fe:37:c3:16:04:96:c2: 4e:41:98:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jZz2VPbGMh8G0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MjAwMzYwNjYtYzI5OS00ODVhLThlOGUtYjlkNmMwZmM1ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZpZtKRD71fsh2op1kTspY3oIITyGx7y68Sc t8MInObmy2zhn07Cs/61n5KYNKZ+0GVapwDaDnDGgzANKTWyYEFprDLxFU9kpLtB YpsMrQN6MjQBJ52QUqAifrwozaVYIHSV4RKG5zy+cWfdvgSCL3RuEjXA6OFaoy1s joeXOaOS3M44esudfxTjcXzvBlw2GLrzwUuKeyemDX23aXUTsSBMHEhNoA3duMXK rlGnEtoTdeaBne8dXr/PuADCABhH/I5Dhc+x0JJXNVqvKpOqS/tEp4ZKrC22LUdp ckVc7XwyIOns/8OcacHjAdisezFlrqpYuPnzDoeGV4jtxJ1ZmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeXowKL5L+1tCJ7Zc+4lcVyMDnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDhmMjkxODQtZGYxNi0z ZDYwLTllMjEtZTBhYTZhYTRkMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRq6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrkrhV+t1oO5L4VEh9r+iv5MlGgor0j8a32EVxKOOs5uRrpTcQ4IpPC 5IauQ346uJPyJdf+ELYCLRAikmTW1A+IVjr9HE4LSUfIH/GBzW35vWKwlOK+Oewd 5bx9wvflE+QKPQwsO5eP/8XwiZ3XvXrEn6F3/lFUULCDSHh1CkdXT2WtUMnUAray V9fAJ0aLswqICVh4EkgejvawDmMloIsw329oRnpoSsm3Y9pohKljcY4hc8SBB5c6 jzqZh+Ich8sHzxTmLgHbxeCmvFuR9sqtt1Qao4TGkd3kkPpfBvmkSVqRLikAwVAR I6knn+JpUR08Z0ri/jfDFgSWwk5BmPI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:33 2025 by rpki-client