$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4139aa6d-f1ff-3ab6-a697-28f1d4258fa8.roa File: 4139aa6d-f1ff-3ab6-a697-28f1d4258fa8.roa (raw, json) Hash identifier: 8BgcLeceDol0+ipRf24eRchOj9+1addVxaW8qAUY2+I= Subject key identifier: C0:93:22:99:48:47:82:81:7D:B0:38:DF:6D:A7:4E:FD:38:12:D5:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625EFAA6DFC4F27BCBA980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4139aa6d-f1ff-3ab6-a697-28f1d4258fa8.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 72.219.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5e:fa:a6:df:c4:f2:7b:cb:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=dd2e6997-4830-4ee3-8e01-1e826115b88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:1b:64:64:30:4e:8f:b0:4d:f3:f2:40:7a: b3:17:d7:12:21:3b:a2:04:45:0b:72:22:ef:20:55: 1c:d0:f0:10:c2:12:1c:26:ec:39:18:02:2e:02:40: 5c:4a:3a:b9:94:39:5d:bc:7b:51:f1:0a:cf:48:fb: af:ac:3e:eb:4a:a4:d4:45:92:15:f3:03:01:c8:3f: d6:63:8d:b4:40:e3:1a:5a:0c:b4:4b:59:77:03:88: ab:20:97:fc:92:ea:b7:b1:4d:a6:de:d9:31:62:56: 17:e8:1e:e5:93:3a:a2:8c:4b:c1:c5:a4:a5:f7:67: 0c:3f:12:da:dd:f6:1c:d9:83:e3:a5:b5:0f:15:f4: a4:c4:12:bc:a2:cf:38:ed:ef:79:d9:df:71:43:0c: 1e:fc:01:41:7a:3a:f1:71:8d:64:f2:44:fa:c3:52: 88:6f:51:40:98:a2:92:98:bb:3b:ee:71:b1:f8:36: a3:6b:12:3a:1a:03:f8:75:5c:f9:02:a4:fc:a9:92: 4c:83:9c:d4:09:ab:4f:ae:8c:2b:b5:48:f9:c3:4a: 47:4d:4a:8b:bc:58:aa:3d:e7:fb:c7:88:68:63:6a: ea:ac:c6:64:c4:87:e9:3a:74:4d:be:7d:14:26:ed: d5:25:4c:ec:1d:81:95:0d:6b:8b:c2:b6:85:5e:e7: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:93:22:99:48:47:82:81:7D:B0:38:DF:6D:A7:4E:FD:38:12:D5:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4139aa6d-f1ff-3ab6-a697-28f1d4258fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c2:a8:46:33:e7:1e:be:d3:20:c4:ff:07:06:32:e0:c6:b5: c7:44:a1:aa:ee:06:6d:ff:fe:54:af:c5:d7:f1:aa:59:91:2a: 75:b6:3a:c8:44:5d:8d:d7:bc:cd:5e:3f:b3:0e:8d:c2:2a:f2: a4:8f:88:39:b8:81:6f:91:9b:e1:b4:76:4c:96:97:26:b2:27: 23:0b:ec:6c:e5:14:2c:d4:11:f8:06:3f:04:3e:b4:9e:20:49: c2:91:f5:c2:69:78:57:9f:5b:4b:f1:20:22:68:2d:21:64:67: 07:4a:fc:a2:87:70:12:17:c3:67:f9:76:d6:0e:48:bf:a4:22: b5:3b:ae:ea:2f:e4:34:aa:23:49:69:79:fb:55:e1:c0:bc:ea: e0:10:12:bd:7e:b9:fd:95:bf:a7:03:bc:df:da:5a:1f:d8:2b: 41:3d:f3:72:d0:95:45:aa:20:1b:43:e5:c0:ab:a8:2a:2c:36: 4c:dd:e2:ab:00:21:d5:c8:c5:da:48:51:8d:2a:31:ed:e8:16: 6c:4e:16:e3:de:60:7e:0f:df:2a:06:16:9c:c0:4a:9c:8f:bb: 11:00:aa:35:c9:4d:63:14:72:26:e8:5d:f5:3b:73:9a:33:e7: 29:82:8c:68:3b:90:26:3f:fe:01:1f:26:e4:1a:60:fe:8a:c6: d6:af:b4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYl76pt/E8nvLqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZGQyZTY5OTctNDgzMC00ZWUzLThlMDEtMWU4MjYxMTViODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogsbZGQwTo+wTfPyQHqzF9cSITuiBEULciLv IFUc0PAQwhIcJuw5GAIuAkBcSjq5lDldvHtR8QrPSPuvrD7rSqTURZIV8wMByD/W Y420QOMaWgy0S1l3A4irIJf8kuq3sU2m3tkxYlYX6B7lkzqijEvBxaSl92cMPxLa 3fYc2YPjpbUPFfSkxBK8os847e952d9xQwwe/AFBejrxcY1k8kT6w1KIb1FAmKKS mLs77nGx+DajaxI6GgP4dVz5AqT8qZJMg5zUCatProwrtUj5w0pHTUqLvFiqPef7 x4hoY2rqrMZkxIfpOnRNvn0UJu3VJUzsHYGVDWuLwraFXueRQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCTIplIR4KBfbA4322nTv04EtUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDEzOWFhNmQtZjFmZi0z YWI2LWE2OTctMjhmMWQ0MjU4ZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfCqEYz5x6+0yDE/wcGMuDGtcdEoaruBm3//lSvxdfxqlmRKnW2OshE XY3XvM1eP7MOjcIq8qSPiDm4gW+Rm+G0dkyWlyayJyML7GzlFCzUEfgGPwQ+tJ4g ScKR9cJpeFefW0vxICJoLSFkZwdK/KKHcBIXw2f5dtYOSL+kIrU7ruov5DSqI0lp eftV4cC86uAQEr1+uf2Vv6cDvN/aWh/YK0E983LQlUWqIBtD5cCrqCosNkzd4qsA IdXIxdpIUY0qMe3oFmxOFuPeYH4P3yoGFpzASpyPuxEAqjXJTWMUciboXfU7c5oz 5ymCjGg7kCY//gEfJuQaYP6KxtavtME= -----END CERTIFICATE-----Generated at Tue Nov 4 08:10:45 2025 by rpki-client