$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecd17783-cece-315e-99ce-6c1f053af864.roa File: ecd17783-cece-315e-99ce-6c1f053af864.roa (raw, json) Hash identifier: AvQt2jrYZKoExTwPSwRX7DpPuG9G6Zb7HmaRQZ+hIRk= Subject key identifier: 28:FB:45:83:94:2D:5B:4A:6A:AC:CB:B3:5C:5F:43:A7:85:96:40:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BA667A4C75A91661F87CC7880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecd17783-cece-315e-99ce-6c1f053af864.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.192.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a4:c7:5a:91:66:1f:87:cc:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=5c24a85b-9803-4402-a7c3-04b2d5e8caa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:c1:10:db:ac:10:ed:97:53:9e:a0:7c:32: a2:42:0c:78:55:91:97:e5:f7:c6:98:0a:93:81:5b: 56:a3:31:45:90:2b:62:9c:50:16:8e:e5:15:93:fb: 1c:cd:f2:4b:29:84:97:eb:23:dd:f6:a9:32:c7:f6: 14:8a:be:b6:8f:96:3e:86:a9:ab:b0:d5:eb:ee:80: c2:37:f4:5b:79:2d:2c:63:76:4a:d0:2e:44:ba:8e: f4:e4:9c:80:f1:0e:1e:e7:ff:b0:ba:13:f3:08:81: 9a:05:f2:c4:78:48:ba:2f:17:cb:9a:9c:64:58:10: ad:89:73:dd:50:a1:ba:4e:c9:d4:0d:76:8f:98:9c: 8b:3c:e0:ac:3b:1b:1d:19:7b:7f:14:66:c1:da:6e: af:e6:8e:af:da:8d:e4:bd:cd:f1:1d:4b:b9:8b:43: a7:0d:8a:06:a0:d1:39:4e:51:1f:1a:62:02:72:76: 05:b5:05:ed:14:c6:da:a0:9f:00:7c:65:61:05:38: 47:58:a5:2b:a3:bb:d3:b4:04:f3:d5:c6:b6:ac:0a: 71:3a:2a:8a:39:e2:67:a4:ae:d4:6c:0a:19:e0:b8: db:78:5e:20:df:ec:df:e9:df:b4:60:f9:20:11:59: 20:5a:97:1e:57:7e:9a:d5:f2:a2:51:76:99:db:57: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FB:45:83:94:2D:5B:4A:6A:AC:CB:B3:5C:5F:43:A7:85:96:40:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecd17783-cece-315e-99ce-6c1f053af864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:80:2b:bd:a6:de:39:6d:ac:6e:3b:63:68:57:65:bf:62:d8: 7c:b3:a4:f9:4e:89:97:4a:4f:84:31:90:92:70:db:70:db:e3: 71:c9:7e:9f:1e:20:b4:91:49:98:5b:20:1b:8b:4c:77:12:08: 87:9b:9d:66:4b:f7:70:fc:2c:56:43:73:95:d9:a5:b4:85:c7: 8d:c0:c6:71:db:fe:29:10:ee:71:cf:8a:8b:02:e1:8f:12:46: c5:cd:a0:b2:50:6e:44:93:12:ce:e4:20:df:75:fe:7e:c1:86: 96:82:7b:8f:c1:26:a9:b4:ca:42:72:7f:97:11:1d:d0:6c:9b: 5d:80:de:ea:03:3e:02:01:5b:4c:1c:20:1f:a8:1a:d7:a2:03: 57:34:db:42:b2:e6:b1:70:d4:ba:44:13:b1:4c:18:02:28:c4: 98:64:e9:df:3e:72:bc:34:99:a9:30:f9:78:be:bc:05:80:67: 55:54:a4:11:8f:96:19:18:fb:c1:49:b4:85:be:7f:ac:f8:fe: da:9f:79:84:a9:5b:2c:1e:37:89:1c:e1:bb:5e:b6:60:cf:51: e2:00:7f:30:d2:f9:a0:9c:99:a0:62:d8:38:88:96:65:32:6b: a8:5a:bf:ca:94:0f:ec:9e:03:c5:1d:d8:70:48:5d:1a:b2:8a: 85:57:a7:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6THWpFmH4fMeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NWMyNGE4NWItOTgwMy00NDAyLWE3YzMtMDRiMmQ1ZThjYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPzBENusEO2XU56gfDKiQgx4VZGX5ffGmAqT gVtWozFFkCtinFAWjuUVk/sczfJLKYSX6yPd9qkyx/YUir62j5Y+hqmrsNXr7oDC N/RbeS0sY3ZK0C5Euo705JyA8Q4e5/+wuhPzCIGaBfLEeEi6LxfLmpxkWBCtiXPd UKG6TsnUDXaPmJyLPOCsOxsdGXt/FGbB2m6v5o6v2o3kvc3xHUu5i0OnDYoGoNE5 TlEfGmICcnYFtQXtFMbaoJ8AfGVhBThHWKUro7vTtATz1ca2rApxOiqKOeJnpK7U bAoZ4LjbeF4g3+zf6d+0YPkgEVkgWpceV36a1fKiUXaZ21dWNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj7RYOULVtKaqzLs1xfQ6eFlkBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWNkMTc3ODMtY2VjZS0z MTVlLTk5Y2UtNmMxZjA1M2FmODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6AK72m3jltrG47Y2hXZb9i2HyzpPlOiZdKT4QxkJJw23Db43HJfp8e ILSRSZhbIBuLTHcSCIebnWZL93D8LFZDc5XZpbSFx43AxnHb/ikQ7nHPiosC4Y8S RsXNoLJQbkSTEs7kIN91/n7BhpaCe4/BJqm0ykJyf5cRHdBsm12A3uoDPgIBW0wc IB+oGteiA1c020Ky5rFw1LpEE7FMGAIoxJhk6d8+crw0makw+Xi+vAWAZ1VUpBGP lhkY+8FJtIW+f6z4/tqfeYSpWyweN4kc4btetmDPUeIAfzDS+aCcmaBi2DiIlmUy a6hav8qUD+yeA8Ud2HBIXRqyioVXp4g= -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:05 2025 by rpki-client