$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb0ab292-6134-3561-aa16-fe6ff5ef12da.roa File: cb0ab292-6134-3561-aa16-fe6ff5ef12da.roa (raw, json) Hash identifier: e5xPX2S6zy3CBoB//DSBkz8/6SvzpT2gYdfTwugcaOE= Subject key identifier: 73:49:E1:C8:C7:47:90:C2:D5:07:A7:B4:E9:67:1C:E3:66:9F:E5:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01D002D8209B1C1BE16F40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb0ab292-6134-3561-aa16-fe6ff5ef12da.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.223.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:d0:02:d8:20:9b:1c:1b:e1:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=6d844686-c154-4ef0-8228-67f59612293c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:87:18:cd:6c:4d:fd:22:ac:b9:8b:9e:d4: 79:f0:17:6c:44:d9:db:31:e7:89:08:dc:53:50:95: b0:ec:ae:fb:d6:fd:a6:fc:ae:f2:ca:a0:4f:cd:71: 5b:e5:76:5c:b2:48:7f:0a:05:14:5d:dd:fe:e5:23: 9f:f9:5c:eb:6e:2b:b5:e3:5b:78:7c:7e:36:8f:f6: ab:1a:f5:49:29:4a:a8:a6:7f:5d:07:c1:76:10:cf: e0:38:2b:32:27:2a:27:48:6b:87:5b:dc:1f:f9:61: 0f:fd:83:7b:96:a8:27:83:ec:96:29:84:2e:b7:38: e3:36:4e:ed:ff:72:4a:8d:cc:2f:9c:2d:37:ea:0a: 0c:5f:04:20:4f:7a:09:00:24:59:da:fe:f4:66:f1: b2:21:d3:56:6f:4b:e7:00:0c:0b:ca:fc:f5:cf:2c: 1a:b8:89:41:3e:89:d2:6a:c9:99:a4:b6:4f:14:4f: 54:50:9b:84:78:ed:48:fa:63:48:a7:d0:59:b4:f3: f0:46:79:93:88:dc:9c:39:64:06:9f:c2:08:58:65: 84:b4:ab:7c:93:c9:0f:37:b5:79:74:b6:39:de:35: fe:a4:82:d3:91:c2:ab:d4:c4:28:22:e1:0a:2b:34: 35:5b:18:bc:8e:11:6f:00:b0:74:22:be:23:db:98: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:49:E1:C8:C7:47:90:C2:D5:07:A7:B4:E9:67:1C:E3:66:9F:E5:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb0ab292-6134-3561-aa16-fe6ff5ef12da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2d:e3:5d:76:e1:9c:bc:03:0c:ff:78:6e:e1:fb:37:45:b9: 9f:8a:93:3e:59:a8:4e:ed:6d:5e:0c:b1:8e:d5:c3:33:63:94: cc:ce:34:8c:3f:20:17:61:93:dc:f5:9a:ce:20:ed:88:47:2a: 25:88:f3:8f:7a:de:70:cc:85:ac:0d:6d:8d:ae:f6:c3:1a:a9: 5b:8f:4b:44:9d:d5:0f:59:aa:90:fe:5b:f0:c3:32:7e:da:79: 5e:d7:36:2d:02:a5:74:ea:02:4e:23:00:fc:c0:d1:99:22:a3: a6:a7:d8:66:49:20:3a:59:17:0f:56:8e:44:07:87:06:e4:59: 95:16:cc:4b:43:e2:6f:dc:3f:10:5d:84:16:66:69:da:87:e6: e7:13:5c:d2:02:ec:78:ae:83:c6:7a:d8:91:15:ec:82:0a:5f: 40:e6:4b:35:e0:83:5e:29:17:93:62:51:88:ff:76:2a:1a:3f: 0a:b6:78:c2:34:12:67:49:34:a1:f0:ad:01:6e:bf:21:40:9f: 10:cc:1f:41:3c:88:32:b1:68:5a:5a:4a:f6:08:82:b1:c6:4e: a4:c7:49:6d:28:dc:7b:0d:d8:0d:b6:7e:c3:25:23:dd:ca:cd: b2:84:95:e5:f1:1f:b8:0d:a0:94:e1:32:36:0e:6b:0e:0b:1c: ea:8a:95:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAdAC2CCbHBvhb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NmQ4NDQ2ODYtYzE1NC00ZWYwLTgyMjgtNjdmNTk2MTIyOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk76HGM1sTf0irLmLntR58BdsRNnbMeeJCNxT UJWw7K771v2m/K7yyqBPzXFb5XZcskh/CgUUXd3+5SOf+Vzrbiu141t4fH42j/ar GvVJKUqopn9dB8F2EM/gOCsyJyonSGuHW9wf+WEP/YN7lqgng+yWKYQutzjjNk7t /3JKjcwvnC036goMXwQgT3oJACRZ2v70ZvGyIdNWb0vnAAwLyvz1zywauIlBPonS asmZpLZPFE9UUJuEeO1I+mNIp9BZtPPwRnmTiNycOWQGn8IIWGWEtKt8k8kPN7V5 dLY53jX+pILTkcKr1MQoIuEKKzQ1Wxi8jhFvALB0Ir4j25h4uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNJ4cjHR5DC1QentOlnHONmn+UnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2IwYWIyOTItNjEzNC0z NTYxLWFhMTYtZmU2ZmY1ZWYxMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEst41124Zy8Awz/eG7h+zdFuZ+Kkz5ZqE7tbV4MsY7VwzNjlMzONIw/ IBdhk9z1ms4g7YhHKiWI84963nDMhawNbY2u9sMaqVuPS0Sd1Q9ZqpD+W/DDMn7a eV7XNi0CpXTqAk4jAPzA0Zkio6an2GZJIDpZFw9WjkQHhwbkWZUWzEtD4m/cPxBd hBZmadqH5ucTXNIC7Hiug8Z62JEV7IIKX0DmSzXgg14pF5NiUYj/dioaPwq2eMI0 EmdJNKHwrQFuvyFAnxDMH0E8iDKxaFpaSvYIgrHGTqTHSW0o3HsN2A22fsMlI93K zbKEleXxH7gNoJThMjYOaw4LHOqKlbM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:49 2025 by rpki-client