$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a608b70-0ee1-38d2-88fd-635c59893e2f.roa File: 4a608b70-0ee1-38d2-88fd-635c59893e2f.roa (raw, json) Hash identifier: ozNDBE2CrzA+puNPFar5oUYva9dtTF/fKJvsxhporoI= Subject key identifier: 11:29:26:4B:4D:D5:DD:86:6C:2F:0F:B2:67:D0:B5:F9:FD:F0:95:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625E5664D0F2ED962A3700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a608b70-0ee1-38d2-88fd-635c59893e2f.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 72.214.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5e:56:64:d0:f2:ed:96:2a:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=5818e44e-6aa6-4fd7-93ac-ccc410bc52ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:bc:db:f4:7d:82:50:f9:49:cd:f7:33:e9: 98:50:d8:be:9a:c1:55:29:00:1d:d6:23:61:69:95: 34:c4:ee:39:50:af:ff:c7:81:7b:0f:9b:69:d1:ed: cb:b6:33:f9:88:32:00:1a:9c:e8:57:c2:21:e4:31: de:f2:8e:98:ab:8f:2e:70:b7:9a:94:6f:ad:66:5f: 87:b2:be:63:01:80:4e:f4:f8:84:d8:b0:b5:1f:26: 62:1b:f5:2c:b9:31:90:a1:e7:36:e9:db:ae:88:5e: 9e:fb:b5:2a:5e:fe:f3:b1:a4:68:48:d9:ca:6e:2c: f6:2a:13:5d:cd:08:39:4b:c3:ba:df:cd:bb:14:5b: 7e:3f:76:7a:5e:d9:41:5a:3e:4d:5c:5a:a2:c5:6c: 09:56:5c:b7:53:0a:4b:4a:a4:fa:5e:01:4d:23:60: 47:9a:4e:7b:47:e3:5d:2e:a6:17:3a:92:eb:24:3b: e7:74:83:f5:25:2f:2f:54:95:6f:5a:d0:5a:77:cb: 97:ee:6d:c2:eb:8e:0b:81:24:9f:fa:af:4c:28:99: 5e:3e:50:d2:b1:55:66:b3:82:db:55:18:7b:e1:2c: e9:bc:de:c5:e1:64:db:dd:38:ea:6e:4f:f3:d0:9d: 4f:8f:4d:80:18:6d:8d:11:67:ec:9d:03:d4:0f:31: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:29:26:4B:4D:D5:DD:86:6C:2F:0F:B2:67:D0:B5:F9:FD:F0:95:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a608b70-0ee1-38d2-88fd-635c59893e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.214.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:95:9f:fe:dc:5b:71:d6:1e:74:1f:0a:04:dd:d9:61:95:8f: 76:85:c6:39:ba:5f:66:5f:30:13:30:3e:02:68:51:10:6c:02: 23:b4:28:81:63:a6:0f:f2:2c:c9:dc:e2:36:7a:41:20:19:68: 21:d8:cf:f6:95:2c:54:27:c6:80:05:7c:62:10:8b:ec:f7:ce: 03:b6:42:0e:17:0a:5f:ed:74:e8:8e:f5:39:b7:ae:09:42:71: 7b:4c:50:af:96:7c:ee:31:eb:8e:cd:43:37:ad:7d:bd:18:59: df:e3:c2:44:3f:0c:4d:91:6a:bb:a2:b0:b9:c0:0a:0b:de:16: 6e:10:05:63:b2:4c:1c:a3:78:fe:6c:73:77:a9:04:89:9a:b2: 51:57:df:04:13:af:e7:64:f6:98:36:56:2c:86:e7:5a:12:44: 38:80:76:88:bb:60:21:4e:c4:99:0e:9a:a1:a4:bb:07:08:55: b2:f8:53:0a:4b:f4:96:ee:37:4f:63:92:68:29:99:2a:12:51: 68:1a:f9:c8:7a:b5:63:a0:e2:78:f1:87:06:69:05:19:ec:dc: 5a:c7:38:11:73:fc:d1:c8:6a:25:5d:e8:d7:26:e2:2a:71:08: 4d:96:11:4d:45:0c:97:a8:10:c7:20:66:01:1a:cd:bf:93:9f: d1:9d:2b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYl5WZNDy7ZYqNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NTgxOGU0NGUtNmFhNi00ZmQ3LTkzYWMtY2NjNDEwYmM1MmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUm82/R9glD5Sc33M+mYUNi+msFVKQAd1iNh aZU0xO45UK//x4F7D5tp0e3LtjP5iDIAGpzoV8Ih5DHe8o6Yq48ucLealG+tZl+H sr5jAYBO9PiE2LC1HyZiG/UsuTGQoec26duuiF6e+7UqXv7zsaRoSNnKbiz2KhNd zQg5S8O63827FFt+P3Z6XtlBWj5NXFqixWwJVly3UwpLSqT6XgFNI2BHmk57R+Nd LqYXOpLrJDvndIP1JS8vVJVvWtBad8uX7m3C644LgSSf+q9MKJlePlDSsVVms4Lb VRh74SzpvN7F4WTb3Tjqbk/z0J1Pj02AGG2NEWfsnQPUDzHm9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEpJktN1d2GbC8PsmfQtfn98JVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGE2MDhiNzAtMGVlMS0z OGQyLTg4ZmQtNjM1YzU5ODkzZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2Vn/7cW3HWHnQfCgTd2WGVj3aFxjm6X2ZfMBMwPgJoURBsAiO0KIFj pg/yLMnc4jZ6QSAZaCHYz/aVLFQnxoAFfGIQi+z3zgO2Qg4XCl/tdOiO9Tm3rglC cXtMUK+WfO4x647NQzetfb0YWd/jwkQ/DE2RaruisLnACgveFm4QBWOyTByjeP5s c3epBImaslFX3wQTr+dk9pg2ViyG51oSRDiAdoi7YCFOxJkOmqGkuwcIVbL4UwpL 9JbuN09jkmgpmSoSUWga+ch6tWOg4njxhwZpBRns3FrHOBFz/NHIaiVd6Ncm4ipx CE2WEU1FDJeoEMcgZgEazb+Tn9GdKwQ= -----END CERTIFICATE-----Generated at Tue Nov 4 12:44:15 2025 by rpki-client