$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bf05178-ebd1-3518-bf11-91abeebf1647.roa File: 3bf05178-ebd1-3518-bf11-91abeebf1647.roa (raw, json) Hash identifier: fzOEwJ89WNkoiLuz8PZUYhsgyD0SbJhDiV4zbI/KP/U= Subject key identifier: B9:5E:ED:36:D2:9D:44:B5:2B:7F:4C:00:80:AC:EF:BC:81:A1:8A:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2429D522B247E316D6E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bf05178-ebd1-3518-bf11-91abeebf1647.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:42:9d:52:2b:24:7e:31:6d:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4b3395d2-9ac1-4c40-91c8-23b45116a5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:32:f1:51:fe:a3:fb:78:70:11:a5:9f:fb:da: 19:52:3a:51:74:3f:f7:1f:86:02:21:b7:c4:d2:df: 90:d1:f8:91:db:53:a1:f8:72:56:e4:e7:fe:52:a5: 93:0c:11:9c:fc:7c:8b:f8:08:4e:17:d1:d2:95:69: 76:9d:c9:ac:25:95:90:ad:0e:11:31:6a:de:1a:4f: 0a:01:9e:56:ec:f1:78:a0:0e:c8:43:ae:19:7d:a3: 5e:a6:db:f9:09:e1:b7:61:4a:d8:94:a3:54:a2:9e: f2:f3:7d:d4:5b:d6:ed:da:4c:2c:aa:3c:5c:b7:69: 08:d4:a7:5f:5d:8b:3d:93:3e:0e:d7:12:54:76:6f: e6:1f:4c:e0:fa:4d:b5:d9:d0:e5:d0:2c:a2:f2:59: b0:d4:98:02:cc:8a:35:fd:c3:00:f8:ad:49:05:32: 54:c3:7d:b7:60:27:8e:49:a8:a7:df:4e:c9:a4:e1: e0:9d:73:98:4a:cd:ba:f5:9f:8f:80:e2:d2:ef:56: 42:2d:bb:94:48:20:10:24:1d:7e:26:88:2f:61:53: ee:a6:1d:19:b0:ca:54:87:5d:08:70:2c:64:23:21: a3:3b:5d:41:9c:5b:5e:b8:51:9c:ff:66:57:16:ce: c5:8d:26:14:2a:ab:23:ef:19:bc:ec:ab:c6:21:15: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5E:ED:36:D2:9D:44:B5:2B:7F:4C:00:80:AC:EF:BC:81:A1:8A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bf05178-ebd1-3518-bf11-91abeebf1647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f2:af:78:d1:0c:83:3e:22:08:36:59:e9:26:a2:41:79:d9: 13:dc:8c:bb:bc:de:1a:16:3e:d3:32:d0:b8:63:4b:1e:84:4f: 63:1a:9e:a1:f8:aa:a0:cb:f5:70:ca:4f:e4:82:fa:ec:9b:0b: 7e:78:d1:80:3f:29:9a:ff:3c:65:7d:e6:3f:6a:26:f1:27:ba: a2:f6:07:57:c5:a2:0d:af:4e:54:b4:2e:af:a4:e2:4c:cb:56: 23:fd:b1:2a:e6:ba:aa:15:10:12:5f:b1:e4:45:d9:94:ca:6c: 4d:47:a9:a6:f2:4f:aa:88:f6:4f:62:a2:be:d6:bc:b3:2f:25: fe:58:e9:3b:b3:08:e1:46:8d:80:34:ad:10:0d:de:02:eb:82: 10:82:70:b7:3e:9a:a0:f3:67:7d:5a:7a:72:a6:83:e6:cf:74: 0b:37:b3:b2:3e:be:6d:f6:6b:9c:40:d2:00:1b:d3:1b:7e:69: f5:06:0b:8b:92:f2:0f:17:a7:2e:c9:b2:40:d6:bb:fd:95:6a: 60:50:42:f7:1a:f2:06:69:43:ee:dc:a2:73:1b:16:ae:96:7d: d8:52:2c:11:a2:05:58:97:e2:a2:6c:5f:69:10:6d:b9:a4:41: d3:a1:56:99:1a:3b:f1:57:36:05:7e:5d:16:c3:bf:99:fc:b7: 47:60:0f:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kKdUiskfjFtboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGIzMzk1ZDItOWFjMS00YzQwLTkxYzgtMjNiNDUxMTZhNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TLxUf6j+3hwEaWf+9oZUjpRdD/3H4YCIbfE 0t+Q0fiR21Oh+HJW5Of+UqWTDBGc/HyL+AhOF9HSlWl2ncmsJZWQrQ4RMWreGk8K AZ5W7PF4oA7IQ64ZfaNeptv5CeG3YUrYlKNUop7y833UW9bt2kwsqjxct2kI1Kdf XYs9kz4O1xJUdm/mH0zg+k212dDl0Cyi8lmw1JgCzIo1/cMA+K1JBTJUw323YCeO Sain307JpOHgnXOYSs269Z+PgOLS71ZCLbuUSCAQJB1+JogvYVPuph0ZsMpUh10I cCxkIyGjO11BnFteuFGc/2ZXFs7FjSYUKqsj7xm87KvGIRUrZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLle7TbSnUS1K39MAICs77yBoYq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2JmMDUxNzgtZWJkMS0z NTE4LWJmMTEtOTFhYmVlYmYxNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACryr3jRDIM+Igg2WekmokF52RPcjLu83hoWPtMy0LhjSx6ET2ManqH4 qqDL9XDKT+SC+uybC3540YA/KZr/PGV95j9qJvEnuqL2B1fFog2vTlS0Lq+k4kzL ViP9sSrmuqoVEBJfseRF2ZTKbE1HqabyT6qI9k9ior7WvLMvJf5Y6TuzCOFGjYA0 rRAN3gLrghCCcLc+mqDzZ31aenKmg+bPdAs3s7I+vm32a5xA0gAb0xt+afUGC4uS 8g8Xpy7JskDWu/2VamBQQvca8gZpQ+7conMbFq6WfdhSLBGiBViX4qJsX2kQbbmk QdOhVpkaO/FXNgV+XRbDv5n8t0dgD3s= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:05 2025 by rpki-client