$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ca33084-0025-3bd1-a9ea-3319950acd35.roa File: 1ca33084-0025-3bd1-a9ea-3319950acd35.roa (raw, json) Hash identifier: ZBU569XYYNA3Xq6OeS6kmPrglShCUSNEp+iWolUcCTs= Subject key identifier: 7F:EF:96:0A:D6:15:F5:7B:85:CE:C5:6D:24:02:6E:C7:E3:D9:D7:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C942AB29C36CF62DE680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ca33084-0025-3bd1-a9ea-3319950acd35.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.222.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c9:42:ab:29:c3:6c:f6:2d:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=4c4bace2-38bd-4354-91f6-feead1747176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:96:bc:89:f1:d0:4b:13:7e:0d:8a:c2:ea:41: 34:2f:e4:6a:fe:5f:6f:ec:b8:78:03:c6:e4:a6:93: 18:cc:f8:cf:d4:4a:d2:9a:76:35:50:db:0c:fa:45: a9:b3:18:8a:1b:9a:fe:bf:c6:b8:74:8a:30:34:73: 30:22:63:d7:22:7a:f4:50:7f:58:9c:f7:4a:29:61: 7b:64:81:0f:93:7e:78:33:7d:76:0a:d2:05:cd:a7: b3:8b:72:98:1a:22:ff:59:d2:72:58:fa:73:e7:ce: a1:2f:f5:a0:8c:f9:da:51:81:94:d8:a6:9a:bd:b0: 41:85:09:07:19:1f:3b:a4:8d:31:67:57:03:ca:0b: f9:c4:de:8b:fb:e2:3d:38:85:91:df:8e:43:b2:4d: 88:5b:71:4f:dd:4b:84:5c:ba:bd:67:89:e7:dd:2f: 60:59:43:dd:a0:2d:54:b8:23:fd:a9:5f:2c:b4:2c: 17:02:c6:78:aa:ad:73:03:ff:d6:ed:03:3e:2a:17: 18:46:67:57:1d:bd:c5:9d:4d:cf:95:0a:24:b7:92: 86:aa:7e:a8:2d:82:d1:ed:9e:a8:82:13:e2:b2:a7: 10:52:00:f7:a9:86:9b:88:5a:cd:20:5e:9c:0c:32: 87:eb:64:d6:59:53:10:11:8c:15:65:7b:c8:a8:c2: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EF:96:0A:D6:15:F5:7B:85:CE:C5:6D:24:02:6E:C7:E3:D9:D7:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ca33084-0025-3bd1-a9ea-3319950acd35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:43:d5:b6:20:ac:03:94:b2:a3:e4:05:99:26:1a:b3:d5:e9: 49:39:2b:69:33:8d:7a:2a:b2:07:64:5f:4f:f2:9f:91:d7:e5: 3f:e2:bf:10:f6:a4:e9:16:2c:a8:f6:31:0a:03:0f:23:09:6a: 1f:ce:96:ae:e9:99:ac:76:4f:aa:11:42:67:18:98:96:2d:63: 6e:5c:6e:bb:24:1a:09:22:f6:b2:fe:8f:88:64:53:de:6f:bd: b4:09:0a:3d:77:ef:eb:ea:c2:57:f3:de:55:eb:1f:2c:a9:9a: 4a:14:b8:ca:30:e6:65:90:6c:cb:d3:3d:2e:bd:e3:8b:7c:f7: 1f:b6:2c:32:46:d4:88:1a:18:df:a9:b8:1d:30:aa:89:58:be: f5:2c:a9:42:f9:11:61:91:e6:64:2f:17:00:cb:16:d2:7e:4c: 0c:67:d0:4b:f4:e0:5c:24:63:00:d7:d0:a5:31:1b:6f:fc:0e: a5:6e:81:fb:e1:97:d9:a0:ec:b5:ca:a0:5a:fd:a3:14:15:e9: 3a:6c:57:98:76:e4:88:7a:b8:73:7e:89:9d:8c:bc:6e:51:49: bd:3e:0b:ec:23:72:75:11:78:7b:4e:f6:78:ce:ba:56:99:31: 3a:3b:ed:74:ad:71:bc:63:44:ee:e2:a7:18:e8:0d:82:38:b2: df:ff:3c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAclCqynDbPYt5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NGM0YmFjZTItMzhiZC00MzU0LTkxZjYtZmVlYWQxNzQ3MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Za8ifHQSxN+DYrC6kE0L+Rq/l9v7Lh4A8bk ppMYzPjP1ErSmnY1UNsM+kWpsxiKG5r+v8a4dIowNHMwImPXInr0UH9YnPdKKWF7 ZIEPk354M312CtIFzaezi3KYGiL/WdJyWPpz586hL/WgjPnaUYGU2KaavbBBhQkH GR87pI0xZ1cDygv5xN6L++I9OIWR345Dsk2IW3FP3UuEXLq9Z4nn3S9gWUPdoC1U uCP9qV8stCwXAsZ4qq1zA//W7QM+KhcYRmdXHb3FnU3PlQokt5KGqn6oLYLR7Z6o ghPisqcQUgD3qYabiFrNIF6cDDKH62TWWVMQEYwVZXvIqMI8VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/vlgrWFfV7hc7FbSQCbsfj2ddQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWNhMzMwODQtMDAyNS0z YmQxLWE5ZWEtMzMxOTk1MGFjZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9D1bYgrAOUsqPkBZkmGrPV6Uk5K2kzjXoqsgdkX0/yn5HX5T/ivxD2 pOkWLKj2MQoDDyMJah/Olq7pmax2T6oRQmcYmJYtY25cbrskGgki9rL+j4hkU95v vbQJCj137+vqwlfz3lXrHyypmkoUuMow5mWQbMvTPS6944t89x+2LDJG1IgaGN+p uB0wqolYvvUsqUL5EWGR5mQvFwDLFtJ+TAxn0Ev04FwkYwDX0KUxG2/8DqVugfvh l9mg7LXKoFr9oxQV6TpsV5h25Ih6uHN+iZ2MvG5RSb0+C+wjcnUReHtO9njOulaZ MTo77XStcbxjRO7ipxjoDYI4st//PIQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:09 2025 by rpki-client