$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa File: c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa (raw, json) Hash identifier: cxF23F89+I28Tsa/tyWELGAtXGBwqULOYopk2hmRNbo= Subject key identifier: 90:76:65:EE:F2:6A:28:6E:AE:A7:97:4E:43:DA:89:8E:0D:84:FF:94 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625F0E24B994C244D7A000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 72.219.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5f:0e:24:b9:94:c2:44:d7:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=85f0ddc8-f8b4-4e93-a537-d85c2a6832a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:cf:be:a4:97:12:cc:15:cc:87:9c:0d:f2: 7d:91:36:b2:b6:30:3a:47:bc:54:5d:ea:bf:e2:34: e0:59:8f:02:54:ce:65:0f:f2:24:83:ff:4f:cd:e3: c6:3c:36:62:80:d8:2e:72:e4:91:ab:9d:01:74:e5: a3:b1:75:1d:37:e1:ec:37:65:8b:be:fc:fe:2c:d8: 03:9b:2a:a9:0b:66:c8:27:b2:34:24:77:ed:64:55: e8:57:a9:b4:80:75:84:d8:25:b2:ee:b7:6b:44:a5: d2:64:07:3a:89:a3:8d:d6:8c:90:4c:c1:d5:f5:56: 08:90:e2:c5:ab:b3:db:39:91:48:f3:f7:d5:16:ed: 2a:86:1a:48:e3:b4:42:2a:e5:3e:b0:4e:1b:c3:82: 1a:64:54:9e:bf:a9:59:cf:af:8d:b5:cb:5f:51:12: 64:42:4b:6c:3f:7b:e2:35:3a:b9:d4:6c:47:b0:15: 7b:72:9f:20:8a:6f:bb:73:b0:b9:10:1c:ba:df:28: a3:b5:52:ad:55:74:21:e9:1b:94:f6:42:10:5a:69: 15:c9:1e:86:7e:55:7a:3c:fa:4f:9a:21:9d:6b:61: 41:e4:de:6a:3f:cf:8b:a0:8b:7c:7b:12:85:32:6f: c1:d1:13:e6:0c:41:ab:dd:f0:9e:66:ab:f8:3b:cc: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:76:65:EE:F2:6A:28:6E:AE:A7:97:4E:43:DA:89:8E:0D:84:FF:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c8:91:c3:08:9e:1a:a6:1c:cb:43:a0:dd:ca:1c:67:ac:29: 93:32:30:b6:ff:4a:77:d3:02:82:35:72:70:f2:45:c6:83:da: b9:35:76:42:c2:39:bc:1a:42:17:c2:25:98:04:23:49:cd:85: 96:50:b5:ff:cf:e9:b7:45:f5:8b:6b:af:db:d2:6c:97:c5:28: a5:3e:e4:85:c9:8d:b0:40:0f:7d:b7:0b:c3:4b:c0:d2:b5:7b: f0:e9:c4:ee:a5:8b:17:33:89:32:b2:e9:ed:f5:86:dc:c4:b5: 15:62:45:2a:3f:dc:dc:d2:c6:20:ac:92:2f:5a:98:e0:68:f0: 69:8f:f7:a7:f1:ff:72:83:cc:3e:fc:f8:11:01:d0:cc:a9:7f: b0:ec:e3:2e:ce:84:2d:d3:00:38:fd:96:0d:a4:85:96:c2:1d: 93:cf:04:e7:e2:12:26:52:79:5f:7a:69:77:1c:e5:28:d9:6d: 03:53:a1:12:9b:7e:76:de:bd:c8:e9:7b:41:e9:8a:73:10:74: 85:ea:b4:57:d7:5b:5e:73:12:87:10:c9:6b:6d:e4:dc:dc:71: 0c:e8:21:e2:25:6d:e7:3e:a3:4c:ba:f7:64:8b:5e:e1:4f:46: 54:59:eb:0e:74:6c:36:e7:5d:45:5c:14:55:8d:48:de:f4:89: db:3a:21:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYl8OJLmUwkTXoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ODVmMGRkYzgtZjhiNC00ZTkzLWE1MzctZDg1YzJhNjgzMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA193PvqSXEswVzIecDfJ9kTaytjA6R7xUXeq/ 4jTgWY8CVM5lD/Ikg/9PzePGPDZigNgucuSRq50BdOWjsXUdN+HsN2WLvvz+LNgD myqpC2bIJ7I0JHftZFXoV6m0gHWE2CWy7rdrRKXSZAc6iaON1oyQTMHV9VYIkOLF q7PbOZFI8/fVFu0qhhpI47RCKuU+sE4bw4IaZFSev6lZz6+NtctfURJkQktsP3vi NTq51GxHsBV7cp8gim+7c7C5EBy63yijtVKtVXQh6RuU9kIQWmkVyR6GflV6PPpP miGda2FB5N5qP8+LoIt8exKFMm/B0RPmDEGr3fCeZqv4O8wfoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB2Ze7yaihurqeXTkPaiY4NhP+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzM4ZDg4ZWQtYWQzMi0z YzY2LTkzZDMtN2Y5YzMyZDU3MTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTIkcMInhqmHMtDoN3KHGesKZMyMLb/SnfTAoI1cnDyRcaD2rk1dkLC ObwaQhfCJZgEI0nNhZZQtf/P6bdF9Ytrr9vSbJfFKKU+5IXJjbBAD323C8NLwNK1 e/DpxO6lixcziTKy6e31htzEtRViRSo/3NzSxiCski9amOBo8GmP96fx/3KDzD78 +BEB0Mypf7Ds4y7OhC3TADj9lg2khZbCHZPPBOfiEiZSeV96aXcc5SjZbQNToRKb fnbevcjpe0HpinMQdIXqtFfXW15zEocQyWtt5NzccQzoIeIlbec+o0y692SLXuFP RlRZ6w50bDbnXUVcFFWNSN70ids6IUU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:19 2025 by rpki-client