$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa File: cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa (raw, json) Hash identifier: mx0F9Oi67/Qks9iwa24F5CQ0Xkyvmw1OIJabCx22n4s= Subject key identifier: 46:53:0E:B8:3B:40:08:F4:7F:E8:75:EC:D3:E1:33:27:0A:37:BD:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B59A1D09414AB4F1EDFC3A5C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.194.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d0:94:14:ab:4f:1e:df:c3:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=dcbc9db2-f2fd-4d2d-80d9-12a9e8acd494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:24:ae:4b:1c:87:d2:e1:b7:e4:36:3d:f3:9e: d0:31:24:1d:09:0a:1c:75:2c:72:df:a7:a7:42:99: f0:9b:d8:5d:97:be:d0:ba:01:25:84:15:d0:21:8c: bf:4d:20:d9:53:a5:79:91:2c:08:84:49:da:6a:d7: 5e:ec:60:4b:ce:0f:97:07:a7:91:3b:8e:89:66:fc: 30:b0:bd:9c:af:db:28:00:0a:27:88:01:67:fc:4e: dd:7b:36:91:c6:ae:49:fe:9b:6b:4c:50:b3:e0:2e: a1:a0:58:6b:c4:c9:73:6f:0d:b2:cb:d5:2d:c8:e1: b7:51:9a:97:0e:82:03:5a:58:40:30:d2:79:ae:2a: 34:29:a2:8b:c2:8b:6b:b4:ba:33:a0:c2:17:ce:18: 77:50:b9:37:d1:53:02:6c:aa:d8:22:57:6c:62:61: a1:85:07:b4:90:ad:a8:36:68:d1:39:73:e2:f7:54: 2d:07:e8:d5:46:0a:f3:85:a1:c3:7d:46:da:1e:80: 93:d0:2f:4f:f2:ac:35:a1:54:10:82:16:18:4f:5f: 4c:d6:80:28:73:30:c1:bd:3f:50:d6:c1:2c:be:e6: 49:4f:f7:bf:78:6d:2a:2f:f6:79:91:2b:5b:c5:8b: dd:2b:2d:71:cd:63:8f:9d:3b:fe:1f:9a:1b:83:68: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:53:0E:B8:3B:40:08:F4:7F:E8:75:EC:D3:E1:33:27:0A:37:BD:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.194.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:51:c9:7d:d5:27:3c:2d:3e:14:ee:3f:ba:c8:6b:4c:01:1c: d7:44:fe:65:d6:36:a8:1a:10:16:45:26:09:b1:01:f8:e6:58: f1:e9:1e:5a:68:a3:d0:1d:c7:92:51:92:c8:e5:ea:bf:42:a1: 46:17:00:2a:b1:8c:17:06:7a:60:df:64:ae:e6:83:ca:fe:23: 22:8c:50:67:58:36:14:e0:7b:08:90:5c:62:f1:f1:4a:23:61: 46:29:a7:8e:c3:83:c2:9d:be:9d:5a:d2:7b:19:42:f8:be:ee: 74:61:a5:66:60:9d:33:9e:3b:e5:7d:b2:00:f1:6b:40:67:6a: aa:b2:b1:47:4a:17:68:5b:9f:29:8a:7a:32:d3:9a:5b:fa:4b: d1:60:35:4e:fc:c9:a3:20:a0:5a:31:f9:fd:6b:92:6e:3e:83: 0c:82:07:33:45:c8:fb:0c:17:30:c3:0d:b0:8a:77:25:6d:5c: e6:e1:b0:d4:97:e1:e0:de:15:1a:0e:25:d2:93:2f:69:7a:2a: 7a:2e:dc:62:a3:de:b6:56:75:26:77:c4:c5:c3:90:59:35:5e: f9:c9:33:f2:38:31:2c:44:f0:12:fa:14:39:45:5a:4d:8f:00: 82:d7:59:59:66:54:a9:0e:46:85:ad:93:b5:01:f7:09:0d:b3: 07:46:d2:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZodCUFKtPHt/DpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk ZGNiYzlkYjItZjJmZC00ZDJkLTgwZDktMTJhOWU4YWNkNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCSuSxyH0uG35DY9857QMSQdCQocdSxy36en Qpnwm9hdl77QugElhBXQIYy/TSDZU6V5kSwIhEnaatde7GBLzg+XB6eRO46JZvww sL2cr9soAAoniAFn/E7dezaRxq5J/ptrTFCz4C6hoFhrxMlzbw2yy9UtyOG3UZqX DoIDWlhAMNJ5rio0KaKLwotrtLozoMIXzhh3ULk30VMCbKrYIldsYmGhhQe0kK2o NmjROXPi91QtB+jVRgrzhaHDfUbaHoCT0C9P8qw1oVQQghYYT19M1oAoczDBvT9Q 1sEsvuZJT/e/eG0qL/Z5kStbxYvdKy1xzWOPnTv+H5obg2j3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZTDrg7QAj0f+h17NPhMycKN73oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2QzNWFhYjgtMzA4Ny0z NmExLWEyNDItYTVlMWFhZGI2ZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESMLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlRyX3VJzwtPhTuP7rIa0wBHNdE/mXWNqgaEBZFJgmxAfjmWPHpHlpo o9Adx5JRksjl6r9CoUYXACqxjBcGemDfZK7mg8r+IyKMUGdYNhTgewiQXGLx8Uoj YUYpp47Dg8Kdvp1a0nsZQvi+7nRhpWZgnTOeO+V9sgDxa0BnaqqysUdKF2hbnymK ejLTmlv6S9FgNU78yaMgoFox+f1rkm4+gwyCBzNFyPsMFzDDDbCKdyVtXObhsNSX 4eDeFRoOJdKTL2l6Knou3GKj3rZWdSZ3xMXDkFk1XvnJM/I4MSxE8BL6FDlFWk2P AILXWVlmVKkORoWtk7UB9wkNswdG0gc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:28 2025 by rpki-client