$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa File: 07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa (raw, json) Hash identifier: N/nvkN285BBUTXZQoL1pmLN2XGAQR0Zz3wW2giEUw9Y= Subject key identifier: B5:97:FC:76:6A:78:B2:99:EE:FD:7C:8C:D4:B9:45:D1:FC:E6:9D:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2452EDD52CD21789E1BE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.221.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:45:2e:dd:52:cd:21:78:9e:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c4467e9b-43ed-4ebc-890a-fdaf00072042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:b4:b6:d0:1f:4c:a0:b2:97:d2:e2:52:a0: 5b:01:92:fe:84:cc:9b:b9:da:9e:97:6d:b2:d2:eb: 51:52:a8:0e:28:a5:d2:b8:f5:fb:13:54:b7:53:af: 58:62:2a:4e:d7:2a:e5:52:98:af:b2:87:70:56:2a: 9f:ce:0c:bc:a9:ba:39:74:2c:e0:aa:5d:b1:c9:ad: bb:85:d7:01:8e:14:c7:4f:a7:83:e6:08:94:d1:51: 8a:8f:54:6b:29:ca:38:dd:b3:d9:d8:58:38:45:dd: b0:5e:b7:a2:d8:75:bf:75:74:10:4f:89:a7:27:a9: 7b:01:22:4d:ae:7a:63:a2:d4:ba:98:cc:90:46:49: 9a:b1:2d:e8:76:62:f3:4b:0b:fc:74:e8:28:69:76: af:f5:70:7d:e9:0c:d8:8d:2d:0d:50:8c:24:97:de: 77:33:1f:6c:1e:95:01:ee:67:01:c4:1b:aa:74:c8: 9a:e9:fa:69:c4:60:b4:91:a9:b9:0f:ca:57:9f:95: 28:50:bf:49:ee:9b:37:65:05:07:0e:3a:f0:d9:94: 20:c6:61:86:35:c9:e6:5f:81:6e:f4:7b:bc:e2:2e: 36:c0:1f:23:42:56:52:6e:7b:a0:48:00:1b:4c:05: 08:57:58:6d:c4:89:9b:df:e2:ca:1f:bc:a0:b5:81: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:97:FC:76:6A:78:B2:99:EE:FD:7C:8C:D4:B9:45:D1:FC:E6:9D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:63:5a:d8:83:23:e4:12:d9:54:b5:1d:55:7f:03:8b:c0:eb: 84:d8:b5:3f:12:7c:f1:87:2f:01:09:51:93:53:75:50:5f:78: 44:56:f2:bb:95:8f:66:50:f6:16:21:c9:80:41:d6:89:ea:6f: 39:d7:e1:53:d5:36:ec:f2:a2:ab:bb:37:0d:c2:b6:7d:5e:fb: e2:c1:fd:10:59:fa:54:cc:20:1f:ab:26:2b:86:09:9d:42:a6: aa:09:33:22:18:cf:85:a1:9f:42:f8:29:3c:05:1b:9e:c7:23: 84:f0:73:5c:29:91:dc:b3:5a:cc:d5:5a:17:89:bd:d7:73:52: 1b:fa:93:ed:71:63:a8:3e:8b:15:74:55:47:e4:6e:19:22:57: 2c:3b:85:b4:a0:60:84:8b:bc:0f:ae:47:f6:71:d5:76:58:0e: ba:4e:ce:c3:e5:f9:d1:4f:06:d0:1f:6f:a4:cb:56:64:34:5a: b5:1f:e7:03:30:99:ff:57:17:f1:1d:31:a1:14:16:a4:1d:be: 5a:bf:87:23:77:b6:cb:f6:61:5d:f7:9c:6c:1e:c0:a2:c1:91: 8c:8f:db:c6:9c:18:01:74:e9:d6:f4:2a:ac:5c:1c:27:63:bb: d4:0d:d3:f0:21:31:e2:91:f9:d9:03:54:bb:a8:00:3e:ce:03: 9a:7f:47:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kUu3VLNIXieG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzQ0NjdlOWItNDNlZC00ZWJjLTg5MGEtZmRhZjAwMDcyMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoS0ttAfTKCyl9LiUqBbAZL+hMybudqel22y 0utRUqgOKKXSuPX7E1S3U69YYipO1yrlUpivsodwViqfzgy8qbo5dCzgql2xya27 hdcBjhTHT6eD5giU0VGKj1RrKco43bPZ2Fg4Rd2wXrei2HW/dXQQT4mnJ6l7ASJN rnpjotS6mMyQRkmasS3odmLzSwv8dOgoaXav9XB96QzYjS0NUIwkl953Mx9sHpUB 7mcBxBuqdMia6fppxGC0kam5D8pXn5UoUL9J7ps3ZQUHDjrw2ZQgxmGGNcnmX4Fu 9Hu84i42wB8jQlZSbnugSAAbTAUIV1htxImb3+LKH7ygtYEHkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWX/HZqeLKZ7v18jNS5RdH85p23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDdlNmExOTYtYzRmNy0z ZWFmLWI1YzItNjNmZWVmNzdhYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpjWtiDI+QS2VS1HVV/A4vA64TYtT8SfPGHLwEJUZNTdVBfeERW8ruV j2ZQ9hYhyYBB1onqbznX4VPVNuzyoqu7Nw3Ctn1e++LB/RBZ+lTMIB+rJiuGCZ1C pqoJMyIYz4Whn0L4KTwFG57HI4Twc1wpkdyzWszVWheJvddzUhv6k+1xY6g+ixV0 VUfkbhkiVyw7hbSgYISLvA+uR/Zx1XZYDrpOzsPl+dFPBtAfb6TLVmQ0WrUf5wMw mf9XF/EdMaEUFqQdvlq/hyN3tsv2YV33nGwewKLBkYyP28acGAF06db0KqxcHCdj u9QN0/AhMeKR+dkDVLuoAD7OA5p/RwM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:35 2025 by rpki-client