$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5dbd720-4313-3c6d-b08b-ab83897c7d2f.roa File: a5dbd720-4313-3c6d-b08b-ab83897c7d2f.roa (raw, json) Hash identifier: XLfcIN4GCRNelZXdUAebUhwZvtg/KlKSaD+Hh4+lMpI= Subject key identifier: 7E:89:ED:ED:CB:64:07:FF:D0:F8:42:B9:C9:F6:A1:30:04:A3:67:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BB1927697ACBAEE3D454ED4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5dbd720-4313-3c6d-b08b-ab83897c7d2f.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.192.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:76:97:ac:ba:ee:3d:45:4e:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=49debf95-0fad-4663-9512-24812721248f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:ee:d4:e5:b6:d9:a7:73:d9:e3:b6:d7:39: dc:96:95:a7:cc:7f:86:a7:3f:bb:b9:eb:ee:81:01: 55:35:27:f4:33:f4:a1:d9:74:5e:f6:7e:d3:00:88: f3:77:cb:f8:78:26:94:80:bb:ec:bd:de:77:5a:34: 17:89:fd:77:95:69:ae:9d:dc:08:6c:43:40:a3:50: 0f:9d:0b:96:55:33:a5:e3:e5:af:9e:9e:e9:29:9f: be:6c:c9:2b:82:9f:5b:d1:b7:34:d9:88:aa:5e:55: 68:bd:bb:09:25:93:18:9a:66:c4:30:77:31:0d:f7: 52:ff:50:c9:d7:49:cb:82:cb:0a:92:c6:19:2d:db: 84:14:9c:8d:08:33:da:56:ad:ca:9a:c7:41:0c:04: 31:e0:72:e9:c4:f3:3a:b7:e1:3e:a4:d9:88:0a:ed: 5e:82:8f:0b:b4:00:f7:3f:9f:77:b9:2c:05:27:72: 48:20:c6:f4:9b:56:dc:d6:9d:b7:c4:c9:17:1d:46: c6:21:34:00:18:b0:df:2e:bb:b7:cf:20:c3:c4:32: c2:26:98:54:35:e8:b8:44:9f:05:0e:f5:0a:91:7a: eb:76:22:71:30:f5:fa:98:54:ec:50:af:b9:4c:cb: 9d:14:c2:3a:79:7a:54:5f:9a:b3:ad:84:c8:92:ed: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:ED:ED:CB:64:07:FF:D0:F8:42:B9:C9:F6:A1:30:04:A3:67:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5dbd720-4313-3c6d-b08b-ab83897c7d2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:dc:39:38:68:61:73:63:f1:b2:43:3f:b0:cf:e3:0c:61:92: a8:9b:cc:27:bb:fd:65:6a:c7:cf:be:12:7f:99:93:ff:e7:92: 1b:91:54:ce:83:95:df:5e:db:0a:86:09:05:22:9c:30:b4:2f: ae:db:bc:38:f2:a0:e7:09:45:30:f7:87:33:d3:cb:38:da:c5: 2c:80:3c:2d:2b:17:0a:58:61:d9:c0:4c:e1:e3:43:04:16:f8: d4:3f:8b:d9:47:61:fc:87:71:3f:6f:70:7d:68:ef:82:48:24: f3:16:6c:ad:3a:87:50:31:7e:f6:6f:f3:a0:a4:35:14:dc:9b: bf:60:86:9a:20:20:0d:b6:55:1f:2b:7f:a3:88:04:98:e0:c9: 7a:cf:0c:ba:b6:df:a5:0f:4f:cd:3b:22:ec:a1:cf:0a:55:0b: bc:b6:85:65:46:fa:22:73:2e:86:ba:10:0c:c6:77:85:2b:43: 35:e9:74:7b:f9:ca:8d:a8:3c:45:a8:0a:f6:e4:b8:b3:84:ea: 1b:4b:d2:2a:8a:db:b1:fe:3d:a2:4e:cb:d0:b8:c7:74:ad:c9: 1d:36:88:40:29:76:62:69:87:5f:a3:cb:b9:98:05:4b:e4:ad: 8d:79:31:bc:d3:33:f4:e9:5f:b4:af:e6:31:b5:a5:d4:dd:fd: 76:43:d1:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknaXrLruPUVO1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NDlkZWJmOTUtMGZhZC00NjYzLTk1MTItMjQ4MTI3MjEyNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxru1OW22adz2eO21znclpWnzH+Gpz+7uevu gQFVNSf0M/Sh2XRe9n7TAIjzd8v4eCaUgLvsvd53WjQXif13lWmundwIbENAo1AP nQuWVTOl4+Wvnp7pKZ++bMkrgp9b0bc02YiqXlVovbsJJZMYmmbEMHcxDfdS/1DJ 10nLgssKksYZLduEFJyNCDPaVq3KmsdBDAQx4HLpxPM6t+E+pNmICu1ego8LtAD3 P593uSwFJ3JIIMb0m1bc1p23xMkXHUbGITQAGLDfLru3zyDDxDLCJphUNei4RJ8F DvUKkXrrdiJxMPX6mFTsUK+5TMudFMI6eXpUX5qzrYTIku3cZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6J7e3LZAf/0PhCucn2oTAEo2d2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTVkYmQ3MjAtNDMxMy0z YzZkLWIwOGItYWI4Mzg5N2M3ZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDcOThoYXNj8bJDP7DP4wxhkqibzCe7/WVqx8++En+Zk//nkhuRVM6D ld9e2wqGCQUinDC0L67bvDjyoOcJRTD3hzPTyzjaxSyAPC0rFwpYYdnATOHjQwQW +NQ/i9lHYfyHcT9vcH1o74JIJPMWbK06h1AxfvZv86CkNRTcm79ghpogIA22VR8r f6OIBJjgyXrPDLq236UPT807IuyhzwpVC7y2hWVG+iJzLoa6EAzGd4UrQzXpdHv5 yo2oPEWoCvbkuLOE6htL0iqK27H+PaJOy9C4x3StyR02iEApdmJph1+jy7mYBUvk rY15MbzTM/TpX7Sv5jG1pdTd/XZD0Rw= -----END CERTIFICATE-----Generated at Wed Nov 5 06:09:11 2025 by rpki-client