$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa File: a0badf70-4d82-368a-ada1-53f529a3b33b.roa (raw, json) Hash identifier: W1trtYAvJbWkQVnq2amAwbUJUJXegbS4x3tJ7VQ71rg= Subject key identifier: 95:19:2D:8F:A9:2C:6B:7B:1F:FE:4F:3D:41:5E:F5:1C:02:C5:DE:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD62882A80CE9DA70528C500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 72.212.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:88:2a:80:ce:9d:a7:05:28:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=376a8e80-0d3e-449f-8331-845bcfaa0a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:39:e6:6f:14:c4:d3:6a:b0:4e:0a:48:62: 97:f3:1e:a1:b6:22:81:72:15:26:44:a6:b7:e0:6c: e3:fa:c8:8e:58:59:16:0e:22:c4:f4:70:99:a6:67: f8:a0:05:30:fb:4c:2f:8c:1c:a9:2d:04:94:28:1b: 42:2c:bc:28:eb:67:7d:61:78:4d:17:f5:5c:2e:4b: 16:05:d3:03:13:db:2b:44:68:7b:fa:d8:20:0e:e8: e6:07:a6:0d:9f:75:0a:c8:56:c2:2d:73:fb:51:a7: ae:6c:c9:76:fe:43:07:6d:64:4a:85:42:e2:bb:63: 3a:2f:90:45:d0:97:65:3b:a2:27:ff:bb:0e:66:8f: f7:0d:96:fb:c2:76:c0:db:99:ea:5b:5e:83:7d:c8: ac:b5:9f:04:7e:0a:2e:3b:78:0e:1b:c7:87:6d:03: c7:3a:04:60:44:19:f9:19:a4:8c:15:73:c9:19:71: d6:f8:b0:ec:ad:e4:3f:e9:b4:ab:36:a9:2a:ee:4b: 34:2a:af:e2:4f:da:76:9d:4c:bf:c1:07:e6:5f:ec: 53:ae:9f:f1:14:3f:19:25:cc:79:2b:01:14:79:35: a1:c2:4c:3c:66:f0:3c:3e:fd:33:1a:e8:4a:69:ad: 1e:3f:c4:4d:13:14:3d:62:58:4b:d5:18:ad:9c:51: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:19:2D:8F:A9:2C:6B:7B:1F:FE:4F:3D:41:5E:F5:1C:02:C5:DE:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a9:16:9b:52:11:9d:10:66:13:3e:c4:9e:71:9e:35:56:b4: e1:eb:7b:21:46:4e:cf:95:fc:3d:14:56:9e:47:b7:d1:9e:e1: 66:d7:2b:f0:a2:92:13:89:de:1b:3f:58:39:d8:96:3f:26:bd: c9:90:18:2a:74:e4:63:ec:65:18:4f:d9:59:86:c3:77:a0:06: ae:8b:2f:0c:06:5b:e1:9e:6f:7d:b7:fd:f2:c2:1d:f0:b0:c3: 87:b9:75:c1:33:f7:00:78:ca:32:af:65:1a:f7:0a:7b:81:09: ac:cd:d6:a4:92:b4:b2:ab:1f:b3:62:32:34:39:77:bb:87:65: af:34:d3:bb:dd:db:f7:01:68:f2:dc:41:ce:28:df:40:b4:7f: 99:3d:c4:2b:4f:5b:c4:36:d2:f7:d2:ec:a3:23:5d:f4:d6:8e: ea:7a:2c:58:d6:ce:87:cf:75:8e:89:d6:54:56:15:a1:4a:4a: ab:03:f2:da:d1:a3:62:fd:29:aa:2a:3c:46:58:3a:1b:5c:7c: fa:5d:14:ca:ca:a3:e6:fc:0b:f6:17:84:50:64:a3:58:34:75: b8:fb:51:11:89:d2:d3:7e:a9:b5:50:04:a2:2c:22:b9:13:e2: 97:c3:01:68:26:99:31:91:cc:ff:d4:ec:df:3e:53:0e:80:8d: 85:9c:16:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYogqgM6dpwUoxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk Mzc2YThlODAtMGQzZS00NDlmLTgzMzEtODQ1YmNmYWEwYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTM55m8UxNNqsE4KSGKX8x6htiKBchUmRKa3 4Gzj+siOWFkWDiLE9HCZpmf4oAUw+0wvjBypLQSUKBtCLLwo62d9YXhNF/VcLksW BdMDE9srRGh7+tggDujmB6YNn3UKyFbCLXP7UaeubMl2/kMHbWRKhULiu2M6L5BF 0JdlO6In/7sOZo/3DZb7wnbA25nqW16DfcistZ8EfgouO3gOG8eHbQPHOgRgRBn5 GaSMFXPJGXHW+LDsreQ/6bSrNqkq7ks0Kq/iT9p2nUy/wQfmX+xTrp/xFD8ZJcx5 KwEUeTWhwkw8ZvA8Pv0zGuhKaa0eP8RNExQ9YlhL1RitnFGOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUZLY+pLGt7H/5PPUFe9RwCxd5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTBiYWRmNzAtNGQ4Mi0z NjhhLWFkYTEtNTNmNTI5YTNiMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNS5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+pFptSEZ0QZhM+xJ5xnjVWtOHreyFGTs+V/D0UVp5Ht9Ge4WbXK/Ci khOJ3hs/WDnYlj8mvcmQGCp05GPsZRhP2VmGw3egBq6LLwwGW+Geb323/fLCHfCw w4e5dcEz9wB4yjKvZRr3CnuBCazN1qSStLKrH7NiMjQ5d7uHZa8007vd2/cBaPLc Qc4o30C0f5k9xCtPW8Q20vfS7KMjXfTWjup6LFjWzofPdY6J1lRWFaFKSqsD8trR o2L9KaoqPEZYOhtcfPpdFMrKo+b8C/YXhFBko1g0dbj7URGJ0tN+qbVQBKIsIrkT 4pfDAWgmmTGRzP/U7N8+Uw6AjYWcFmQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:08:24 2025 by rpki-client