$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f5c0531-7ac3-3308-a63d-a4db76bb237b.roa File: 2f5c0531-7ac3-3308-a63d-a4db76bb237b.roa (raw, json) Hash identifier: fkz6DlhkwK7KNkJpa7Mt0T6wRqBAkM3wi1C+o75M/Z4= Subject key identifier: 9B:4F:4F:9C:AA:43:88:F0:82:51:EC:F5:13:6F:F7:86:5D:7E:5A:DE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24E2C183873B36F506740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f5c0531-7ac3-3308-a63d-a4db76bb237b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.197.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4e:2c:18:38:73:b3:6f:50:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=35e6cf9f-c4a9-4632-9f0e-133965f986c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6e:80:92:cb:36:59:a4:82:1e:fd:6e:4e:10: ed:f0:d4:ae:cb:94:13:29:02:15:96:6d:8f:a5:e1: 7c:2d:23:4f:e4:e9:b7:bf:90:28:7b:03:42:f1:05: ed:72:5c:aa:46:c9:c9:37:92:5a:56:5d:a1:2f:a8: 66:b1:96:14:b2:c1:49:ed:b8:26:c0:ef:57:7c:f5: ab:58:8d:51:ce:30:9a:c1:ed:4d:46:92:bf:d7:95: 10:d8:a8:98:60:9a:6d:b3:65:9a:4f:aa:71:ba:e3: 82:3f:9c:eb:c9:c7:c0:37:d1:c7:ce:2e:72:4c:b0: ff:e4:dc:b0:33:83:00:c3:53:66:9f:a5:da:17:51: 62:9f:3c:a9:4f:59:4a:d9:bf:08:56:47:41:8e:fe: e3:a0:73:ea:df:f5:41:6c:1c:59:24:cb:3f:63:8f: 54:9c:21:40:9d:bb:d6:52:2a:89:69:20:b8:7a:9c: bc:c1:b0:42:d7:71:76:0b:8c:9e:32:e6:ff:be:dd: b9:9b:0b:8b:37:43:59:d9:13:1d:6a:83:35:5f:0b: 53:81:59:7a:e1:02:7e:4d:65:fb:56:f3:28:19:68: 29:8e:9d:f4:50:be:2b:9f:79:8b:29:26:56:76:29: 63:98:c2:62:5e:1a:be:54:c2:76:f5:f4:f8:f3:fb: cb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4F:4F:9C:AA:43:88:F0:82:51:EC:F5:13:6F:F7:86:5D:7E:5A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f5c0531-7ac3-3308-a63d-a4db76bb237b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2b:1b:65:d8:07:65:e1:1e:4c:77:8a:4a:7e:ef:e1:65:f3: 00:62:ce:39:b0:e7:eb:3e:f8:63:0f:e0:ae:ae:3a:b8:85:aa: 73:7f:99:a0:d0:d5:44:49:8d:da:c7:ee:ac:7e:55:73:ec:e3: eb:55:4b:9d:db:07:a5:2f:88:0f:53:7a:78:09:79:5c:1c:f7: 59:52:b6:b4:a9:77:66:b3:d7:e6:70:ab:6a:41:b8:b1:a2:52: b3:b9:12:1e:f2:5d:4e:e2:c2:0d:de:35:81:ea:75:d2:13:90: 00:6a:57:4e:75:48:96:23:d9:2c:c7:71:4b:fa:af:f2:56:52: b9:6a:66:49:e0:25:1a:0c:75:e5:b3:d6:c2:0e:51:0e:a7:3e: 42:0a:73:07:6c:0a:22:66:5b:c1:b0:24:02:58:4d:96:54:bd: 5a:47:fb:fc:b8:f0:1a:6f:ea:8f:84:35:00:8d:2e:84:2a:b8: 89:6e:17:63:92:48:8f:82:70:b3:79:ec:69:79:25:e7:08:59: 91:aa:57:33:92:e9:11:3c:14:fe:2e:9c:cd:f2:15:73:bd:2c: fa:05:59:e1:a3:d7:f9:ba:d9:25:5e:e7:22:e5:fc:f8:36:63: a3:9d:51:ce:36:52:ae:6d:6b:29:cc:2a:12:f5:3e:98:b1:1b: 52:48:16:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28k4sGDhzs29QZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzVlNmNmOWYtYzRhOS00NjMyLTlmMGUtMTMzOTY1Zjk4NmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh26Akss2WaSCHv1uThDt8NSuy5QTKQIVlm2P peF8LSNP5Om3v5AoewNC8QXtclyqRsnJN5JaVl2hL6hmsZYUssFJ7bgmwO9XfPWr WI1RzjCawe1NRpK/15UQ2KiYYJpts2WaT6pxuuOCP5zrycfAN9HHzi5yTLD/5Nyw M4MAw1Nmn6XaF1FinzypT1lK2b8IVkdBjv7joHPq3/VBbBxZJMs/Y49UnCFAnbvW UiqJaSC4epy8wbBC13F2C4yeMub/vt25mwuLN0NZ2RMdaoM1XwtTgVl64QJ+TWX7 VvMoGWgpjp30UL4rn3mLKSZWdiljmMJiXhq+VMJ29fT48/vL0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtPT5yqQ4jwglHs9RNv94ZdflreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmY1YzA1MzEtN2FjMy0z MzA4LWE2M2QtYTRkYjc2YmIyMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0rG2XYB2XhHkx3ikp+7+Fl8wBizjmw5+s++GMP4K6uOriFqnN/maDQ 1URJjdrH7qx+VXPs4+tVS53bB6UviA9TengJeVwc91lStrSpd2az1+Zwq2pBuLGi UrO5Eh7yXU7iwg3eNYHqddITkABqV051SJYj2SzHcUv6r/JWUrlqZkngJRoMdeWz 1sIOUQ6nPkIKcwdsCiJmW8GwJAJYTZZUvVpH+/y48Bpv6o+ENQCNLoQquIluF2OS SI+CcLN57Gl5JecIWZGqVzOS6RE8FP4unM3yFXO9LPoFWeGj1/m62SVe5yLl/Pg2 Y6OdUc42Uq5taynMKhL1PpixG1JIFqo= -----END CERTIFICATE-----Generated at Thu Oct 16 01:57:23 2025 by rpki-client