$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbaafc79-01ce-3ba0-97d5-e0a13885f4d8.roa File: bbaafc79-01ce-3ba0-97d5-e0a13885f4d8.roa (raw, json) Hash identifier: VdpJ/K3ca83GLF/LbdoU0pr5oAbDDbT6wFhBqiB8ffY= Subject key identifier: B1:17:0C:95:03:17:CC:B2:D4:0C:55:7E:5C:03:3E:22:E8:67:C8:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625DB78556A2B283246580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbaafc79-01ce-3ba0-97d5-e0a13885f4d8.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 72.196.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5d:b7:85:56:a2:b2:83:24:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=7e042faf-6925-4d9a-8664-70c8f8551051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:a2:c7:12:d6:74:51:8c:8f:17:e5:ec:da: 51:66:31:4b:d0:38:2d:7f:0c:79:5b:b2:7d:1b:1e: d3:18:3a:35:90:b3:2d:9e:b5:4b:0d:43:e6:cc:1f: af:25:01:d0:f3:09:10:ee:e5:2f:32:35:ee:62:e4: 79:2f:d0:6a:8d:65:32:1b:da:94:e4:fb:3c:f5:47: b4:dd:ab:cb:e1:2b:8a:23:7a:18:e3:84:b6:25:76: 34:24:6b:3e:35:91:96:de:c1:15:77:54:b7:2c:a3: bf:cd:43:ac:f5:62:f1:19:97:6d:df:84:fd:94:14: 68:42:94:23:fc:ef:7f:14:11:26:3f:4d:c9:b9:b8: 5d:a0:7e:d6:2a:a5:3d:06:db:3c:fd:6e:d4:1c:7f: 56:40:a5:c1:a0:e0:67:62:30:df:04:95:e7:63:88: 30:37:97:70:98:22:16:ba:f8:55:12:15:48:64:f4: 60:11:d8:27:f9:18:5d:36:7a:69:78:e7:ca:01:50: 18:51:53:d0:b9:31:f5:bc:c5:96:5e:7d:bc:44:31: 65:08:28:69:6b:21:53:9e:2f:44:d8:c2:fa:40:1c: c7:c8:21:39:3c:31:75:1f:b4:2f:49:da:8f:14:0d: 53:92:72:bb:4a:d8:6e:fd:17:9d:24:79:fa:54:da: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:17:0C:95:03:17:CC:B2:D4:0C:55:7E:5C:03:3E:22:E8:67:C8:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbaafc79-01ce-3ba0-97d5-e0a13885f4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.196.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cc:c2:c9:25:1b:07:2b:4e:fa:7f:2e:2b:a2:ef:0d:b3:7b: 4b:ae:b5:11:83:93:b6:0f:d8:03:5e:1f:20:48:1a:78:01:31: 53:93:b2:e8:af:52:2d:2c:7c:73:19:b2:bc:d0:20:43:eb:3b: eb:ae:c1:92:cb:ba:a9:9d:30:c8:c8:4d:9b:18:75:7e:fb:db: 0b:e4:a5:52:c6:26:f7:e4:c1:4c:86:e2:ab:3c:21:e8:2d:09: 94:3e:18:42:26:aa:ca:28:e2:8c:7d:4d:b5:7e:c8:de:c0:e0: 6a:37:f0:e7:d8:19:a0:0e:3c:de:ce:8a:66:c8:fb:0b:2f:2e: b2:1d:e7:ff:91:03:e4:be:bc:c8:dc:c3:c3:d0:92:15:ec:c3: 3c:77:dc:c1:8b:e3:76:38:4c:34:4a:11:19:c6:5c:75:c1:b1: 08:f3:d1:f2:80:3b:8e:64:6b:73:85:05:3b:4f:1c:67:36:f4: b8:18:62:d9:06:0e:f5:7f:5b:a6:0e:26:a4:c4:aa:4a:53:51: a7:a9:de:b3:6f:d6:94:8b:25:98:2f:90:bd:36:f4:e9:e5:ef: eb:2d:bd:51:85:e0:9b:34:c6:02:85:85:d5:d4:94:f4:c8:92: f8:0f:d1:28:76:d5:3f:dd:89:89:e4:1e:af:00:d8:06:c4:c4: e0:8b:c5:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYl23hVaisoMkZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk N2UwNDJmYWYtNjkyNS00ZDlhLTg2NjQtNzBjOGY4NTUxMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLiixxLWdFGMjxfl7NpRZjFL0Dgtfwx5W7J9 Gx7TGDo1kLMtnrVLDUPmzB+vJQHQ8wkQ7uUvMjXuYuR5L9BqjWUyG9qU5Ps89Ue0 3avL4SuKI3oY44S2JXY0JGs+NZGW3sEVd1S3LKO/zUOs9WLxGZdt34T9lBRoQpQj /O9/FBEmP03JubhdoH7WKqU9Bts8/W7UHH9WQKXBoOBnYjDfBJXnY4gwN5dwmCIW uvhVEhVIZPRgEdgn+RhdNnppeOfKAVAYUVPQuTH1vMWWXn28RDFlCChpayFTni9E 2ML6QBzHyCE5PDF1H7QvSdqPFA1TknK7Sthu/RedJHn6VNoE7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEXDJUDF8yy1AxVflwDPiLoZ8gjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmJhYWZjNzktMDFjZS0z YmEwLTk3ZDUtZTBhMTM4ODVmNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMR2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3MwsklGwcrTvp/Liui7w2ze0uutRGDk7YP2ANeHyBIGngBMVOTsuiv Ui0sfHMZsrzQIEPrO+uuwZLLuqmdMMjITZsYdX772wvkpVLGJvfkwUyG4qs8Iegt CZQ+GEImqsoo4ox9TbV+yN7A4Go38OfYGaAOPN7OimbI+wsvLrId5/+RA+S+vMjc w8PQkhXswzx33MGL43Y4TDRKERnGXHXBsQjz0fKAO45ka3OFBTtPHGc29LgYYtkG DvV/W6YOJqTEqkpTUaep3rNv1pSLJZgvkL029Onl7+stvVGF4Js0xgKFhdXUlPTI kvgP0Sh21T/diYnkHq8A2AbExOCLxVg= -----END CERTIFICATE-----Generated at Tue Nov 4 08:07:47 2025 by rpki-client