$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a15658-e621-337f-9020-560fddd1fa0b.roa File: 08a15658-e621-337f-9020-560fddd1fa0b.roa (raw, json) Hash identifier: /W0qbChgsnlLSvdFCajXaJ+508zZCM44tNXUrVqM2P0= Subject key identifier: 72:49:CD:DE:18:6D:A5:EE:26:0F:8C:B3:CC:D2:5C:8B:32:47:C3:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F277D78C2290E23C880340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a15658-e621-337f-9020-560fddd1fa0b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.199.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:77:d7:8c:22:90:e2:3c:88:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=35eea829-7665-4e8b-ad42-d82505801c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:98:73:ff:ef:88:84:82:9c:1f:c7:74:22:23: 03:8e:dd:e2:cd:86:54:74:7e:59:22:3d:70:b8:3c: 5f:2f:e9:6b:ac:dd:bb:c7:91:ec:35:5f:6a:a7:74: d0:e9:7a:3b:aa:d6:9f:9c:56:66:23:d9:07:00:3a: 96:70:ea:78:51:8f:25:09:07:b7:47:07:10:5b:bd: 24:5b:29:5a:99:7d:c7:c1:5a:20:e1:df:02:7e:70: dc:ff:64:99:2b:ed:66:01:59:18:86:2a:94:93:bd: 51:c3:b4:65:af:7c:16:c0:b1:81:50:5a:49:f6:ee: d1:6f:2a:bf:f7:d7:4d:82:58:2e:38:52:4c:e7:f2: 8a:dc:6f:85:41:b2:8a:44:15:92:63:83:f1:1d:82: 8f:7c:05:fd:6b:69:03:5c:f5:ca:f7:02:6d:76:e6: 44:93:b9:24:f7:8c:d2:95:e5:39:7e:fe:bb:3e:d2: f1:6d:f8:ba:2b:d7:b0:3a:33:e2:e3:cd:e6:21:ec: 1e:2d:f3:c7:51:ec:3a:f2:c7:ba:19:8d:3f:f6:5d: 1e:2c:94:cb:02:5e:d4:99:e8:64:6a:bc:fb:d3:92: 41:94:b1:89:06:bf:fc:c0:49:09:31:33:b2:93:47: 1f:66:0c:e2:96:f3:fa:18:a3:fd:33:33:e4:a7:13: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:49:CD:DE:18:6D:A5:EE:26:0F:8C:B3:CC:D2:5C:8B:32:47:C3:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a15658-e621-337f-9020-560fddd1fa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:59:bb:65:85:04:35:76:dc:80:ce:af:ef:6c:47:f6:7d:fc: 11:cc:62:d2:13:de:03:3d:b6:5b:45:a3:38:76:47:a4:66:aa: 18:65:93:10:78:6d:73:5b:ba:6f:6b:e8:72:43:b9:7f:1b:03: 23:ec:31:8a:de:99:d7:c6:63:54:64:e8:6b:b4:86:63:43:4d: d7:fa:c0:0c:47:73:e2:6a:95:9e:ab:e1:de:d2:09:bf:95:48: 6a:a7:0b:51:89:00:b1:a0:09:ab:2f:a1:0f:5f:0a:b0:d0:4c: 33:cc:ab:c4:94:67:f2:21:c0:b9:0c:f4:d5:15:0e:2a:c4:5f: 83:3e:f1:ad:dc:0f:80:ad:2c:1b:d9:88:c4:1f:62:bb:d8:1c: c6:a7:de:77:a7:4e:2b:20:6b:e1:24:d8:e6:53:71:c5:cc:97: 4a:ed:cc:b9:18:65:1f:99:fb:db:d3:43:3c:4a:bf:1e:5a:fa: 33:c6:36:48:dc:e4:f3:69:7f:77:c2:b4:dd:9c:ce:78:31:9a: 19:a1:16:ec:8e:8e:09:bf:84:0b:80:b6:73:3b:c2:41:e2:27: 1d:03:22:4b:41:f2:51:fd:54:31:5a:76:49:d8:2a:d4:e3:70: 5e:77:f2:82:f5:dd:05:1f:ad:30:14:01:7f:5e:a4:98:cc:16: 34:99:d2:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nfXjCKQ4jyIA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzVlZWE4MjktNzY2NS00ZThiLWFkNDItZDgyNTA1ODAxYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZhz/++IhIKcH8d0IiMDjt3izYZUdH5ZIj1w uDxfL+lrrN27x5HsNV9qp3TQ6Xo7qtafnFZmI9kHADqWcOp4UY8lCQe3RwcQW70k WylamX3HwVog4d8CfnDc/2SZK+1mAVkYhiqUk71Rw7Rlr3wWwLGBUFpJ9u7Rbyq/ 99dNglguOFJM5/KK3G+FQbKKRBWSY4PxHYKPfAX9a2kDXPXK9wJtduZEk7kk94zS leU5fv67PtLxbfi6K9ewOjPi483mIeweLfPHUew68se6GY0/9l0eLJTLAl7Umehk arz705JBlLGJBr/8wEkJMTOyk0cfZgzilvP6GKP9MzPkpxPXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJJzd4YbaXuJg+Ms8zSXIsyR8MLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDhhMTU2NTgtZTYyMS0z MzdmLTkwMjAtNTYwZmRkZDFmYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANZu2WFBDV23IDOr+9sR/Z9/BHMYtIT3gM9tltFozh2R6RmqhhlkxB4 bXNbum9r6HJDuX8bAyPsMYremdfGY1Rk6Gu0hmNDTdf6wAxHc+JqlZ6r4d7SCb+V SGqnC1GJALGgCasvoQ9fCrDQTDPMq8SUZ/IhwLkM9NUVDirEX4M+8a3cD4CtLBvZ iMQfYrvYHMan3nenTisga+Ek2OZTccXMl0rtzLkYZR+Z+9vTQzxKvx5a+jPGNkjc 5PNpf3fCtN2czngxmhmhFuyOjgm/hAuAtnM7wkHiJx0DIktB8lH9VDFadknYKtTj cF538oL13QUfrTAUAX9epJjMFjSZ0mk= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:50 2025 by rpki-client