$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a1e6e07-b35b-3195-85cf-ce2510316a86.roa File: 4a1e6e07-b35b-3195-85cf-ce2510316a86.roa (raw, json) Hash identifier: fbqTf/Pq6NLgN3oJ94jsk4AJAriPU7sxgpRI+05+8zM= Subject key identifier: 69:AE:32:D1:B4:C5:66:D3:CD:3F:8B:48:08:35:26:BB:D8:6B:C3:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2793E6ED848DEA7C31E40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a1e6e07-b35b-3195-85cf-ce2510316a86.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:79:3e:6e:d8:48:de:a7:c3:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b269d1be-d289-4cc1-a48f-73827d6b7129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b5:f5:aa:ae:0e:d4:f3:08:5c:b3:45:79:c2: b1:75:c1:61:d9:25:4c:a7:33:fe:18:f7:09:33:bd: 9a:ee:8b:f1:68:ad:42:c4:c3:65:65:f2:9b:5c:fb: 1a:56:89:16:cb:6f:d3:46:a6:3d:b1:79:ce:55:8c: 16:d0:e3:a1:f1:ad:95:14:26:36:e6:d4:85:6d:b5: c4:df:71:bd:0c:8f:49:c0:85:44:ac:94:23:98:f5: 69:b5:b3:e4:fc:27:18:a7:d9:0c:d6:ff:57:8b:d7: 5a:26:44:9d:a2:14:d3:4b:12:9c:90:a4:81:9a:8e: f7:4b:be:ff:1c:0a:12:26:ec:e8:3e:a9:2b:14:3c: cd:a6:60:3f:e7:8a:d7:e2:0e:6e:d7:52:f7:62:5f: fc:e6:5e:48:8e:22:44:e3:a9:7b:18:02:ee:a1:3f: 2f:bf:d9:de:66:8d:f0:6a:be:b5:72:ca:72:ec:f7: ea:a3:57:c9:6c:1b:48:33:58:bb:91:86:8d:ed:b3: 11:30:21:f2:60:da:f2:5a:9b:f9:c8:aa:0f:d0:f5: 69:6f:fb:b0:81:d1:96:56:77:31:cf:e2:a3:86:d1: d6:f3:89:22:83:cf:9f:3b:52:7f:17:f8:89:2f:51: f5:27:77:83:91:51:b3:f5:a2:ef:63:79:16:89:55: 70:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AE:32:D1:B4:C5:66:D3:CD:3F:8B:48:08:35:26:BB:D8:6B:C3:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a1e6e07-b35b-3195-85cf-ce2510316a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8a:8a:b9:4b:4e:c9:31:91:80:31:96:1b:75:00:2d:20:29: 55:d1:d6:a8:83:fc:63:40:e8:e6:1f:b5:9e:8b:50:e9:84:ec: db:50:42:22:c1:08:c3:9c:af:f6:bd:04:99:ef:2b:2a:a4:3b: 80:46:b5:68:fd:46:01:65:32:cf:50:da:54:6f:5e:0a:7a:7c: fc:05:2a:2a:28:77:15:0d:aa:73:f1:96:0f:08:9c:d9:5f:4c: 30:05:b3:9f:31:fd:1c:2b:35:7b:1f:6a:57:e7:89:d1:b8:6f: 94:55:f1:9e:f5:96:a2:c2:4e:6a:96:f8:ad:1a:01:11:62:10: 85:58:d8:ae:93:19:0f:f9:67:f9:e7:de:32:75:83:e9:3c:fb: 46:86:d3:70:c2:71:61:6f:38:37:8b:bb:e9:77:e3:1d:fa:83: 4c:43:d3:47:0d:79:90:48:d7:29:41:e4:46:cc:81:c0:08:3f: 98:fc:cd:0f:8b:db:6a:a6:46:c9:8e:c7:3d:48:f4:f3:b9:f3: 19:dd:de:54:66:4f:bb:ee:c3:f8:89:a8:f6:27:cd:1e:e2:22: 07:ac:35:56:d6:c2:d1:04:4b:8a:c6:e1:39:4d:89:eb:14:b5: 9f:59:09:e1:b1:4e:e4:4a:23:aa:ba:9e:b2:60:69:d4:0e:71: 9d:89:cd:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nk+bthI3qfDHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YjI2OWQxYmUtZDI4OS00Y2MxLWE0OGYtNzM4MjdkNmI3MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrX1qq4O1PMIXLNFecKxdcFh2SVMpzP+GPcJ M72a7ovxaK1CxMNlZfKbXPsaVokWy2/TRqY9sXnOVYwW0OOh8a2VFCY25tSFbbXE 33G9DI9JwIVErJQjmPVptbPk/CcYp9kM1v9Xi9daJkSdohTTSxKckKSBmo73S77/ HAoSJuzoPqkrFDzNpmA/54rX4g5u11L3Yl/85l5IjiJE46l7GALuoT8vv9neZo3w ar61cspy7Pfqo1fJbBtIM1i7kYaN7bMRMCHyYNryWpv5yKoP0PVpb/uwgdGWVncx z+KjhtHW84kig8+fO1J/F/iJL1H1J3eDkVGz9aLvY3kWiVVw3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmuMtG0xWbTzT+LSAg1JrvYa8P4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGExZTZlMDctYjM1Yi0z MTk1LTg1Y2YtY2UyNTEwMzE2YTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyKirlLTskxkYAxlht1AC0gKVXR1qiD/GNA6OYftZ6LUOmE7NtQQiLB CMOcr/a9BJnvKyqkO4BGtWj9RgFlMs9Q2lRvXgp6fPwFKioodxUNqnPxlg8InNlf TDAFs58x/RwrNXsfalfnidG4b5RV8Z71lqLCTmqW+K0aARFiEIVY2K6TGQ/5Z/nn 3jJ1g+k8+0aG03DCcWFvODeLu+l34x36g0xD00cNeZBI1ylB5EbMgcAIP5j8zQ+L 22qmRsmOxz1I9PO58xnd3lRmT7vuw/iJqPYnzR7iIgesNVbWwtEES4rG4TlNiesU tZ9ZCeGxTuRKI6q6nrJgadQOcZ2JzU8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:18 2025 by rpki-client