$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d452c61-9b93-31ed-a0c0-7e66a74a86f9.roa File: 3d452c61-9b93-31ed-a0c0-7e66a74a86f9.roa (raw, json) Hash identifier: PS4BbFMgUcb82guxrlyn8hn2JzmMTU/uD8h+EqatCcI= Subject key identifier: 0F:0F:0C:34:16:10:74:57:78:9D:D6:FE:70:02:18:2F:E0:18:C7:8A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F220E08F679FF8EE0E0400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d452c61-9b93-31ed-a0c0-7e66a74a86f9.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:20:e0:8f:67:9f:f8:ee:0e:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=d36e1e52-ae0a-4fac-901e-c258a6b7a6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:c4:da:84:9e:af:52:8d:0c:e2:6c:7c:46: 69:58:f1:57:b1:0b:7f:31:0b:33:b7:86:cd:66:56: 00:54:5b:9c:04:fd:f6:75:7e:d3:c8:30:5f:03:55: 9d:98:db:1e:99:bd:5a:ee:7d:c2:34:4a:52:97:fd: e1:17:86:40:8d:85:8a:a8:fc:55:50:d6:6a:4e:4d: 2d:a3:0f:5c:6c:23:43:1c:1e:f1:13:2f:44:91:cc: 41:1c:ad:15:cd:58:77:ff:5f:ae:16:7d:af:30:95: 1e:71:b9:50:35:5e:bc:a2:03:a6:02:89:16:e7:25: 42:b4:4a:6f:ab:d5:f4:85:56:82:c2:a5:0b:0e:a8: 48:9e:de:38:69:2a:19:ad:37:30:af:2f:eb:28:28: 9f:d6:64:06:15:53:ed:0c:ea:dd:b3:5b:b4:4c:e9: c1:32:89:3b:a4:b1:27:31:17:80:55:40:ef:7d:78: 56:14:0d:e8:2c:1e:0e:26:8d:56:05:cb:f2:07:60: c5:f5:fe:8d:c6:1e:9f:fd:35:66:f1:f7:19:ef:3f: 39:cc:c6:bf:fe:68:8a:5c:ff:46:71:9a:af:9b:b4: ae:e5:49:53:3d:7b:9d:e6:62:4f:ac:07:7f:0d:bf: 2c:86:31:81:88:54:b2:0a:db:1b:b4:ba:30:9a:3f: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0F:0C:34:16:10:74:57:78:9D:D6:FE:70:02:18:2F:E0:18:C7:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d452c61-9b93-31ed-a0c0-7e66a74a86f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0f:73:66:ca:f2:36:f4:71:cb:13:b4:e6:6d:f4:2b:86:fc: ac:a0:0f:a2:f9:8e:88:66:64:3e:ba:0f:ce:a8:6c:69:71:8a: 18:5f:73:b8:92:3d:88:c7:78:af:c3:73:da:b9:b1:9e:e5:a0: 5e:29:54:b9:59:a4:f7:65:3a:26:87:6f:d5:2d:46:ec:eb:05: ad:3c:7f:24:da:eb:0d:37:81:b9:e1:8d:00:d5:31:ee:97:14: 4f:81:8a:c7:9d:dd:67:96:71:2a:6c:bb:95:3a:ff:07:ac:54: 7b:75:8c:14:6e:97:32:89:33:e4:26:f2:dc:9c:09:aa:e0:49: ff:4d:0f:ae:37:7a:ca:4d:ee:d2:78:a1:be:eb:c8:81:a4:f6: db:f9:b0:f2:9a:4d:86:ef:82:f0:34:65:f0:74:1b:c4:c7:f7: ef:c4:a4:97:d6:7d:2a:a7:8d:13:c3:56:5b:0f:92:45:1c:00: b9:a6:ba:db:54:da:18:49:36:4e:6d:16:fe:cc:89:c4:62:a5: 3e:34:32:b7:79:ab:a1:9a:2a:f3:94:5c:66:47:af:08:4c:4e: 9b:5f:46:69:35:1e:99:6a:b5:c7:6b:95:20:58:a7:4f:5e:43: b0:bb:3e:06:32:a0:0f:0e:66:a1:3e:f4:3e:b3:86:43:65:07: 8a:09:a9:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iDgj2ef+O4OBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDM2ZTFlNTItYWUwYS00ZmFjLTkwMWUtYzI1OGE2YjdhNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxTE2oSer1KNDOJsfEZpWPFXsQt/MQszt4bN ZlYAVFucBP32dX7TyDBfA1WdmNsemb1a7n3CNEpSl/3hF4ZAjYWKqPxVUNZqTk0t ow9cbCNDHB7xEy9EkcxBHK0VzVh3/1+uFn2vMJUecblQNV68ogOmAokW5yVCtEpv q9X0hVaCwqULDqhInt44aSoZrTcwry/rKCif1mQGFVPtDOrds1u0TOnBMok7pLEn MReAVUDvfXhWFA3oLB4OJo1WBcvyB2DF9f6Nxh6f/TVm8fcZ7z85zMa//miKXP9G cZqvm7Su5UlTPXud5mJPrAd/Db8shjGBiFSyCtsbtLowmj8XyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8PDDQWEHRXeJ3W/nACGC/gGMeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Q0NTJjNjEtOWI5My0z MWVkLWEwYzAtN2U2NmE3NGE4NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcPc2bK8jb0ccsTtOZt9CuG/KygD6L5johmZD66D86obGlxihhfc7iS PYjHeK/Dc9q5sZ7loF4pVLlZpPdlOiaHb9UtRuzrBa08fyTa6w03gbnhjQDVMe6X FE+Bised3WeWcSpsu5U6/wesVHt1jBRulzKJM+Qm8tycCargSf9ND643espN7tJ4 ob7ryIGk9tv5sPKaTYbvgvA0ZfB0G8TH9+/EpJfWfSqnjRPDVlsPkkUcALmmuttU 2hhJNk5tFv7MicRipT40Mrd5q6GaKvOUXGZHrwhMTptfRmk1HplqtcdrlSBYp09e Q7C7PgYyoA8OZqE+9D6zhkNlB4oJqeg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:09 2025 by rpki-client