$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/411924a3-02eb-3fee-bfaa-99c9b799789a.roa File: 411924a3-02eb-3fee-bfaa-99c9b799789a.roa (raw, json) Hash identifier: uGQxiTj0h8jeKH5EaXZm+LY5Xsqf+Dh/qbfS+C/qEXk= Subject key identifier: E7:B4:3A:24:D7:0B:09:CA:62:43:EC:26:B4:0C:46:35:29:1E:10:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24140BE039B4EF2B45700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/411924a3-02eb-3fee-bfaa-99c9b799789a.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.195.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:41:40:be:03:9b:4e:f2:b4:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6baf87b0-75e9-4076-9e27-daffe120eb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:f6:75:d9:88:f1:c8:4e:6d:25:1b:69:7e: 1f:6d:9e:25:95:99:d5:66:97:a3:92:dd:d2:af:b6: 1f:8e:f3:c4:e8:25:bc:d7:b3:2c:bd:d3:bd:c6:55: 8e:19:00:c7:f4:c1:f7:c7:77:f7:82:a0:69:aa:32: 6b:49:8b:9e:97:71:c3:cd:d0:40:3a:21:a9:98:a4: 7d:1a:70:ea:45:ed:14:ef:46:e7:2d:3d:f5:3d:14: 65:5e:75:2e:db:fd:35:06:ab:2a:b2:88:c1:d0:56: 9f:bb:99:59:02:6d:ac:69:6e:9f:37:9a:4c:fd:14: 26:a8:70:46:45:e5:8c:74:d1:4e:96:c7:e3:d7:72: d0:fa:45:d0:c0:7d:95:d5:b4:50:2e:43:99:58:95: 1a:1c:00:a2:a8:26:3d:41:c8:63:6d:c6:71:8b:d1: eb:3c:73:4b:15:a6:ce:b5:b7:29:b8:5c:5d:77:d0: ce:f2:f5:0c:9b:32:89:4d:44:82:bc:2e:7f:98:76: a4:5a:2e:53:bf:fa:19:b2:1f:5b:18:36:60:b5:35: 81:51:43:a6:8d:c7:a2:9b:10:f9:bd:c1:4e:fa:67: d0:c5:be:9e:1e:29:dc:2e:ca:81:21:03:a6:64:99: ee:d0:89:9e:d4:ca:f4:42:03:81:d3:81:95:04:aa: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B4:3A:24:D7:0B:09:CA:62:43:EC:26:B4:0C:46:35:29:1E:10:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/411924a3-02eb-3fee-bfaa-99c9b799789a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:de:99:d0:0e:8a:25:b5:6e:e6:85:18:e8:b9:71:ec:a7:32: a8:11:6c:1a:0c:97:d5:d7:30:b1:37:c6:0a:dc:75:38:5d:a9: e3:6a:57:88:5d:d6:8b:cd:fa:7a:9d:c0:44:e9:6a:a1:81:a5: 38:42:80:af:db:f4:42:2b:59:1d:97:b3:75:13:41:34:ea:66: ea:ea:8c:59:8a:1a:d8:85:8d:1f:54:ab:68:10:75:38:2a:1b: 67:93:c0:0b:0e:26:ab:a8:19:f0:d6:3a:bb:56:1d:fa:bb:d8: c4:a4:6f:cf:bd:4f:cf:f3:b8:09:81:4b:0c:19:07:f0:51:7d: e5:9e:7d:28:54:21:47:76:91:fe:16:ab:a6:b8:94:a1:76:77: 5f:44:c4:86:59:ed:f5:dc:f2:c8:98:fb:6f:4b:b1:12:5a:34: 14:7d:56:8a:80:cf:ef:12:eb:50:69:11:a1:c9:2a:7c:50:e9: e4:84:c5:c4:c6:08:66:ea:28:8f:44:b8:01:aa:07:4a:fb:fd: 8a:17:56:b6:9d:06:c0:14:ae:ff:f5:08:0d:75:ff:b4:c2:3e: 1a:32:ba:7b:30:fd:7f:03:cb:bb:59:46:3b:10:5d:18:65:95: c9:61:b6:b2:54:a4:91:ca:a6:29:a6:67:17:ef:68:28:0a:9f: 4e:71:d5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kFAvgObTvK0VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NmJhZjg3YjAtNzVlOS00MDc2LTllMjctZGFmZmUxMjBlYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t32ddmI8chObSUbaX4fbZ4llZnVZpejkt3S r7YfjvPE6CW817MsvdO9xlWOGQDH9MH3x3f3gqBpqjJrSYuel3HDzdBAOiGpmKR9 GnDqRe0U70bnLT31PRRlXnUu2/01BqsqsojB0Fafu5lZAm2saW6fN5pM/RQmqHBG ReWMdNFOlsfj13LQ+kXQwH2V1bRQLkOZWJUaHACiqCY9QchjbcZxi9HrPHNLFabO tbcpuFxdd9DO8vUMmzKJTUSCvC5/mHakWi5Tv/oZsh9bGDZgtTWBUUOmjceimxD5 vcFO+mfQxb6eHincLsqBIQOmZJnu0Ime1Mr0QgOB04GVBKpjlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe0OiTXCwnKYkPsJrQMRjUpHhBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDExOTI0YTMtMDJlYi0z ZmVlLWJmYWEtOTljOWI3OTk3ODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADemdAOiiW1buaFGOi5ceynMqgRbBoMl9XXMLE3xgrcdThdqeNqV4hd 1ovN+nqdwETpaqGBpThCgK/b9EIrWR2Xs3UTQTTqZurqjFmKGtiFjR9Uq2gQdTgq G2eTwAsOJquoGfDWOrtWHfq72MSkb8+9T8/zuAmBSwwZB/BRfeWefShUIUd2kf4W q6a4lKF2d19ExIZZ7fXc8siY+29LsRJaNBR9VoqAz+8S61BpEaHJKnxQ6eSExcTG CGbqKI9EuAGqB0r7/YoXVradBsAUrv/1CA11/7TCPhoyunsw/X8Dy7tZRjsQXRhl lclhtrJUpJHKpimmZxfvaCgKn05x1cc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:49 2025 by rpki-client