$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7a12e5c-8128-3b98-b7af-acbcc02e0df9.roa File: a7a12e5c-8128-3b98-b7af-acbcc02e0df9.roa (raw, json) Hash identifier: DvZmihCR721DWhpQfWBaniaikZsxsV5qsMmlUCCkUQU= Subject key identifier: CC:A1:DA:AE:8E:09:21:7A:47:11:EC:6E:CD:9C:CA:30:11:C2:A7:67 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD628800C64AAA3496CE9B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7a12e5c-8128-3b98-b7af-acbcc02e0df9.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 72.196.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:88:00:c6:4a:aa:34:96:ce:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=2dff6676-089d-4f6a-8678-12fd0427e399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6a:a9:fc:3e:fd:65:0c:34:1e:c0:72:c4:d2: 4c:9f:08:d9:aa:a3:70:1a:25:27:3f:af:19:1c:40: d5:c4:b6:46:03:ff:fa:f6:d6:63:d1:08:9e:2f:33: 31:82:35:b6:44:1b:ea:6c:e9:56:0f:2e:34:33:6d: 9c:b5:22:52:60:24:6d:78:43:71:a6:6b:35:a9:e1: 2a:64:c9:ab:ae:01:b2:c3:fc:05:88:74:60:08:25: 91:e5:8e:5f:f5:2c:43:49:4b:4e:2a:20:0a:bf:c0: d2:58:32:ea:9f:46:71:26:22:51:1e:48:cd:d2:41: 78:58:f9:5a:6e:16:34:2a:22:29:da:c5:c7:e1:94: 8a:06:ac:34:b9:89:c1:d2:3c:79:ec:37:2b:fe:c5: b9:73:07:ca:90:f4:30:b8:80:00:99:34:98:d2:28: 5b:35:42:29:dc:ef:06:71:97:51:d8:cd:64:76:2a: b7:1a:48:b8:69:1d:e4:66:cf:3e:88:a4:0e:97:c1: d0:35:2f:37:69:f0:bb:2f:41:09:43:14:c9:dc:77: 98:8e:48:44:c5:a2:d2:a2:7b:b3:48:ac:0a:e5:2b: 6d:be:4f:c7:57:1d:33:3a:89:a3:30:24:db:82:4f: d0:b3:3b:9a:4f:2c:be:e9:3f:1d:10:16:e2:74:2a: 3d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A1:DA:AE:8E:09:21:7A:47:11:EC:6E:CD:9C:CA:30:11:C2:A7:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7a12e5c-8128-3b98-b7af-acbcc02e0df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.196.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d6:15:6b:7c:f7:1d:60:9d:1b:93:a5:d2:94:ff:2b:74:8f: 68:cb:ed:b1:ae:11:aa:77:a2:ac:16:cf:6b:2e:bd:5b:c9:c8: fb:68:75:bf:2f:65:a4:84:38:d0:20:4f:c1:47:f1:71:0a:48: b3:88:20:62:c3:3a:86:48:34:4e:8b:3c:34:6e:24:7b:85:3f: b8:90:fc:f2:ce:50:60:9e:b7:ea:2c:d0:30:f2:17:c2:8e:7c: a5:b5:26:ba:2d:d9:14:53:41:0c:ba:a2:6c:c1:df:16:cf:96: 73:3c:de:7b:06:a0:3f:c3:54:f6:0f:30:bd:7e:f3:85:7b:34: 0b:1a:af:54:f8:06:ec:d9:8d:48:83:43:e7:90:cd:cd:06:5e: 1d:7a:43:8e:b9:fc:fb:56:be:b0:bf:84:f6:c1:3a:9f:8d:2c: 15:ee:61:a0:21:86:47:ae:d0:e0:5f:e9:82:b9:9a:05:99:5a: 86:34:9b:27:8f:ce:3e:4b:69:b6:80:aa:0c:44:1d:22:da:6c: 97:3a:76:fd:75:e8:ec:6b:85:32:67:68:16:6f:0a:39:ff:93: 6f:2f:fb:07:6c:96:ca:5a:0b:bf:a2:0a:4b:4c:51:f6:19:33: 25:82:5e:82:9c:49:4c:6f:83:45:ca:8c:b9:d9:5f:20:61:33: 30:54:5f:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYogAxkqqNJbOm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MmRmZjY2NzYtMDg5ZC00ZjZhLTg2NzgtMTJmZDA0MjdlMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWqp/D79ZQw0HsByxNJMnwjZqqNwGiUnP68Z HEDVxLZGA//69tZj0QieLzMxgjW2RBvqbOlWDy40M22ctSJSYCRteENxpms1qeEq ZMmrrgGyw/wFiHRgCCWR5Y5f9SxDSUtOKiAKv8DSWDLqn0ZxJiJRHkjN0kF4WPla bhY0KiIp2sXH4ZSKBqw0uYnB0jx57Dcr/sW5cwfKkPQwuIAAmTSY0ihbNUIp3O8G cZdR2M1kdiq3Gki4aR3kZs8+iKQOl8HQNS83afC7L0EJQxTJ3HeYjkhExaLSonuz SKwK5Sttvk/HVx0zOomjMCTbgk/QszuaTyy+6T8dEBbidCo9HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyh2q6OCSF6RxHsbs2cyjARwqdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdhMTJlNWMtODEyOC0z Yjk4LWI3YWYtYWNiY2MwMmUwZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMR6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETWFWt89x1gnRuTpdKU/yt0j2jL7bGuEap3oqwWz2suvVvJyPtodb8v ZaSEONAgT8FH8XEKSLOIIGLDOoZINE6LPDRuJHuFP7iQ/PLOUGCet+os0DDyF8KO fKW1Jrot2RRTQQy6omzB3xbPlnM83nsGoD/DVPYPML1+84V7NAsar1T4BuzZjUiD Q+eQzc0GXh16Q465/PtWvrC/hPbBOp+NLBXuYaAhhkeu0OBf6YK5mgWZWoY0myeP zj5LabaAqgxEHSLabJc6dv116OxrhTJnaBZvCjn/k28v+wdslspaC7+iCktMUfYZ MyWCXoKcSUxvg0XKjLnZXyBhMzBUX7U= -----END CERTIFICATE-----Generated at Tue Nov 4 16:07:24 2025 by rpki-client