$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14ca067f-f537-3c13-a0f4-79ac96e70339.roa File: 14ca067f-f537-3c13-a0f4-79ac96e70339.roa (raw, json) Hash identifier: f+wcBtUQ+NA/+EwYNhCbmC4fzs+k2RK6ylalR2s7LGY= Subject key identifier: CA:BA:E6:4F:7A:25:60:F2:37:DA:0B:20:A5:32:78:34:89:FF:E2:9B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2310F43EAB1C6D747A480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14ca067f-f537-3c13-a0f4-79ac96e70339.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.195.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:31:0f:43:ea:b1:c6:d7:47:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=16f4699f-1f1b-4ae2-9462-40e2ed6f3afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:19:41:4e:ee:37:df:d5:6b:f7:c7:e6:67:2e: 63:c0:00:e6:e7:86:da:b5:4d:47:84:bf:65:9f:6d: 5b:1e:0b:31:ad:f0:8c:86:d5:28:ad:48:55:70:62: b2:c8:aa:1a:0d:cb:fe:18:b4:be:2c:64:9e:73:0f: b3:d5:d4:a6:76:4a:bc:89:06:9f:c7:18:86:1f:48: 25:45:ac:d1:08:55:09:1d:52:6b:45:6f:34:fc:d1: 3b:a3:5e:a0:9f:c7:e7:11:23:34:20:02:f4:fe:b3: ad:c5:6e:26:93:1f:2e:7c:29:6e:1f:22:02:ad:fb: cf:1f:e8:02:8f:91:c9:30:72:f6:2e:91:ab:eb:50: 9a:54:61:1f:ab:03:f4:e3:69:a1:84:60:7e:9b:6d: b8:92:9a:d7:b0:8f:e6:75:68:b0:e1:67:8e:46:e9: 02:51:eb:92:0a:23:b9:57:07:82:74:d8:12:25:67: 8a:8f:f3:1c:7b:0c:59:72:8b:9f:c1:f9:81:96:7f: 7b:02:12:fa:3e:ac:7c:6d:9e:86:13:9f:97:f3:55: 71:cd:b1:d2:7d:07:d9:4c:5d:c3:a2:53:23:fd:94: 4c:5d:c3:22:b7:e3:83:fd:52:95:c2:26:c8:0d:2e: 14:cf:a0:72:c8:27:8d:c4:f1:bb:a7:54:30:5d:bf: 7f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BA:E6:4F:7A:25:60:F2:37:DA:0B:20:A5:32:78:34:89:FF:E2:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14ca067f-f537-3c13-a0f4-79ac96e70339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.195.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d7:15:f2:11:7b:b2:e5:75:5b:42:04:b9:fa:6a:7d:17:b7: 72:33:57:0b:f0:52:55:50:e1:19:95:27:e1:e7:8f:29:34:e3: 16:d9:3d:d2:4b:4c:bc:07:11:a4:2b:66:36:9e:20:53:07:77: 83:d3:ca:28:46:67:54:16:44:0e:fa:c5:b7:a8:f0:57:df:5c: 22:b4:1e:a7:7a:32:78:39:fa:77:8a:47:f9:c7:fc:78:3a:e0: a7:bc:f3:ed:a7:11:6d:8a:bb:15:60:ad:54:9a:2e:b3:55:f9: 48:f9:4d:d1:1b:c1:3f:99:6b:9d:d1:99:db:da:5b:90:66:95: 2e:17:d8:01:1a:68:ac:ec:38:96:76:ac:46:cd:aa:3a:07:a1: 82:71:be:36:10:b8:41:25:aa:1e:0e:b0:44:80:19:eb:4c:a6: d9:15:a9:10:70:78:3e:f9:b3:cb:ea:b0:cf:be:73:c8:fe:0e: f4:e5:63:2c:8c:f2:e0:aa:6f:ca:86:20:b5:a5:38:d3:34:81: ad:f5:03:90:82:51:4e:ca:83:81:60:03:29:eb:43:11:c3:6b: 58:44:65:1b:6c:3e:28:a1:89:94:74:d6:62:0c:c6:cb:bd:f6: 73:8d:35:26:db:06:76:0d:04:2e:e5:82:49:6f:85:c0:34:d3: 80:97:d1:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jEPQ+qxxtdHpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTZmNDY5OWYtMWYxYi00YWUyLTk0NjItNDBlMmVkNmYzYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xlBTu4339Vr98fmZy5jwADm54batU1HhL9l n21bHgsxrfCMhtUorUhVcGKyyKoaDcv+GLS+LGSecw+z1dSmdkq8iQafxxiGH0gl RazRCFUJHVJrRW80/NE7o16gn8fnESM0IAL0/rOtxW4mkx8ufCluHyICrfvPH+gC j5HJMHL2LpGr61CaVGEfqwP042mhhGB+m224kprXsI/mdWiw4WeORukCUeuSCiO5 VweCdNgSJWeKj/McewxZcoufwfmBln97AhL6Pqx8bZ6GE5+X81VxzbHSfQfZTF3D olMj/ZRMXcMit+OD/VKVwibIDS4Uz6ByyCeNxPG7p1QwXb9/QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq65k96JWDyN9oLIKUyeDSJ/+KbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTRjYTA2N2YtZjUzNy0z YzEzLWEwZjQtNzlhYzk2ZTcwMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvXFfIRe7LldVtCBLn6an0Xt3IzVwvwUlVQ4RmVJ+Hnjyk04xbZPdJL TLwHEaQrZjaeIFMHd4PTyihGZ1QWRA76xbeo8FffXCK0Hqd6Mng5+neKR/nH/Hg6 4Ke88+2nEW2KuxVgrVSaLrNV+Uj5TdEbwT+Za53RmdvaW5BmlS4X2AEaaKzsOJZ2 rEbNqjoHoYJxvjYQuEElqh4OsESAGetMptkVqRBweD75s8vqsM++c8j+DvTlYyyM 8uCqb8qGILWlONM0ga31A5CCUU7Kg4FgAynrQxHDa1hEZRtsPiihiZR01mIMxsu9 9nONNSbbBnYNBC7lgklvhcA004CX0RA= -----END CERTIFICATE-----Generated at Thu Oct 16 02:01:00 2025 by rpki-client