$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e64249fd-37f4-3de2-8b58-36162d02b56f.roa File: e64249fd-37f4-3de2-8b58-36162d02b56f.roa (raw, json) Hash identifier: et5VYWd8YkdlDa78Kokt51LgQr3KMGD8Tklr/Bkt5rQ= Subject key identifier: 17:4B:71:42:5F:3A:F7:98:DB:FC:55:28:17:34:AA:7B:89:15:A6:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625E7AB5EBBAA035926500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e64249fd-37f4-3de2-8b58-36162d02b56f.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 72.219.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5e:7a:b5:eb:ba:a0:35:92:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=447fee67-a53b-47f5-8165-a3a419966f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:1a:08:89:91:8b:8f:5d:e7:c0:c8:58:a1: 28:b1:40:56:a7:22:63:46:84:c0:47:a8:ee:e8:6e: 82:04:32:1f:05:57:be:11:32:ce:cd:28:19:63:5c: 52:71:cf:c4:2b:1c:45:d1:43:13:ea:32:ce:be:9d: 48:d7:9d:e1:ae:f1:ba:5f:68:9f:3a:01:97:83:f1: af:b5:00:08:34:c1:f3:b4:49:9d:df:7b:3e:a7:84: 66:e7:fc:d3:9d:5d:82:62:6e:5a:6d:37:18:df:7a: d3:fa:08:3b:99:2c:f2:ee:f5:d9:c2:b8:48:fe:b1: 40:de:2f:aa:8d:2a:00:be:35:16:b5:2d:1d:c2:e2: c9:d6:45:98:28:73:b1:52:01:22:c7:57:8c:b3:2f: e8:22:fe:7a:03:1a:a8:02:a6:41:db:e2:43:f5:f2: 61:c0:ab:2a:99:59:1a:9f:ca:0e:c2:ac:df:01:fb: 99:aa:bd:72:76:4c:35:d2:db:44:2d:03:fa:a2:1e: f7:1b:0d:a4:dd:d4:bc:6c:c0:af:6e:a7:47:b0:37: 16:09:43:27:1c:54:85:b9:08:d7:43:1c:ba:da:ad: 84:67:66:c1:93:a8:83:6d:c9:54:d0:d8:d9:8c:24: 57:6a:de:16:1b:89:39:ce:c7:e6:79:71:d7:95:2f: ac:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4B:71:42:5F:3A:F7:98:DB:FC:55:28:17:34:AA:7B:89:15:A6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e64249fd-37f4-3de2-8b58-36162d02b56f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b7:09:96:ee:b2:f9:c0:a9:75:3d:71:ef:46:59:6d:a2:43: 38:17:49:67:a1:e8:09:06:58:2e:a1:23:32:b1:f2:b1:e2:5f: a9:42:a1:25:cf:c7:32:16:d6:f5:5d:15:46:10:ff:28:17:b8: 20:ac:1f:37:21:9a:41:dc:cd:bc:f2:55:de:24:a5:c2:84:c5: 81:75:f7:03:a2:ab:4c:2f:a7:26:be:25:a7:55:97:bd:16:dd: 13:d2:56:63:ee:9b:bc:3b:fa:17:9c:69:e7:5f:e9:9a:47:6c: 9b:ba:ef:63:04:25:6c:f6:07:94:a2:e4:37:91:22:23:a0:0d: 54:1d:3d:5d:8c:93:3f:04:9d:6d:97:77:35:88:09:4b:1d:7b: 69:f7:8b:44:54:7c:ba:b1:2f:9b:2c:4c:1d:9f:fc:d2:51:34: 43:e0:6c:22:05:2d:c4:93:49:ba:92:d8:af:87:45:c1:85:49: e6:af:67:8c:f7:93:3f:c2:2f:d6:ec:7a:fd:cf:63:4b:33:81: 38:03:9c:42:be:42:c5:30:51:92:12:81:d3:ea:3e:2d:53:58: fc:17:6a:1c:1b:25:36:86:ad:21:df:d2:cc:67:70:d0:a5:40: b8:05:4a:0d:55:1c:7f:43:cd:9e:e1:57:53:a0:b3:4a:23:a8: c5:c4:6e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYl56teu6oDWSZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NDQ3ZmVlNjctYTUzYi00N2Y1LTgxNjUtYTNhNDE5OTY2ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK4aCImRi49d58DIWKEosUBWpyJjRoTAR6ju 6G6CBDIfBVe+ETLOzSgZY1xScc/EKxxF0UMT6jLOvp1I153hrvG6X2ifOgGXg/Gv tQAINMHztEmd33s+p4Rm5/zTnV2CYm5abTcY33rT+gg7mSzy7vXZwrhI/rFA3i+q jSoAvjUWtS0dwuLJ1kWYKHOxUgEix1eMsy/oIv56AxqoAqZB2+JD9fJhwKsqmVka n8oOwqzfAfuZqr1ydkw10ttELQP6oh73Gw2k3dS8bMCvbqdHsDcWCUMnHFSFuQjX Qxy62q2EZ2bBk6iDbclU0NjZjCRXat4WG4k5zsfmeXHXlS+sBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdLcUJfOveY2/xVKBc0qnuJFaYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTY0MjQ5ZmQtMzdmNC0z ZGUyLThiNTgtMzYxNjJkMDJiNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA63CZbusvnAqXU9ce9GWW2iQzgXSWeh6AkGWC6hIzKx8rHiX6lCoSXP xzIW1vVdFUYQ/ygXuCCsHzchmkHczbzyVd4kpcKExYF19wOiq0wvpya+JadVl70W 3RPSVmPum7w7+hecaedf6ZpHbJu672MEJWz2B5Si5DeRIiOgDVQdPV2Mkz8EnW2X dzWICUsde2n3i0RUfLqxL5ssTB2f/NJRNEPgbCIFLcSTSbqS2K+HRcGFSeavZ4z3 kz/CL9bsev3PY0szgTgDnEK+QsUwUZISgdPqPi1TWPwXahwbJTaGrSHf0sxncNCl QLgFSg1VHH9DzZ7hV1Ogs0ojqMXEbrA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:16 2025 by rpki-client