$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/473e7f71-c4a4-3db0-966a-61c53377afe5.roa File: 473e7f71-c4a4-3db0-966a-61c53377afe5.roa (raw, json) Hash identifier: 5HQcIRL+cVuB67DVLD5SE0xGtXUViVc+nrSe/fSflNw= Subject key identifier: 2A:32:45:65:0D:C4:09:5C:40:85:FE:CA:41:4C:A8:07:9C:8F:C8:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24E09F42B527D02CC4680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/473e7f71-c4a4-3db0-966a-61c53377afe5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.200.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4e:09:f4:2b:52:7d:02:cc:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7ae70bca-8858-4cdd-a995-569a30193345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:b0:2b:a1:6f:f0:4d:58:24:68:10:54:e9: 27:c7:39:ab:2e:1a:12:53:39:29:bc:28:7e:16:99: 14:13:ee:0e:24:59:5f:87:51:68:c6:db:14:53:d2: 28:64:2a:60:5d:65:44:f6:55:5f:98:fc:56:62:7d: 1f:91:b4:51:8a:3c:67:48:15:74:2e:c0:ef:ad:ef: 56:9f:da:cb:9c:03:33:3f:92:0e:50:1b:19:17:0b: 1d:9f:ea:4b:79:7b:a3:14:e7:fc:35:93:03:ee:47: c6:99:7b:39:80:8b:21:81:d9:ce:13:71:68:3c:70: 82:4c:bb:14:49:e4:08:1e:64:9c:4a:74:ba:f4:a8: 85:55:38:ee:12:b5:60:dd:3f:82:8b:54:27:e5:36: 4a:8c:35:e3:6f:e6:8a:de:ca:2b:00:ce:44:3d:5f: 14:ef:a7:63:96:d6:04:21:f4:00:f7:85:52:2b:38: d5:39:ec:a3:90:76:71:4d:cd:a9:3d:c5:ef:1b:f4: 29:23:54:d9:95:39:4d:c6:45:e3:f3:af:03:ad:4d: 00:f0:b8:6b:38:58:d3:10:13:75:6f:f3:62:42:5f: b5:d3:e3:2f:01:61:90:58:c1:40:5d:a7:79:c6:90: 3b:6a:d0:ad:e2:39:27:99:98:3a:1a:d5:49:1e:6e: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:32:45:65:0D:C4:09:5C:40:85:FE:CA:41:4C:A8:07:9C:8F:C8:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/473e7f71-c4a4-3db0-966a-61c53377afe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:47:9a:22:0e:97:88:35:d2:50:bd:28:7b:dd:8b:2e:4f:db: 57:be:7b:2d:e9:30:12:e2:6c:9d:da:f1:2e:25:17:4f:1c:56: 8b:67:1a:e0:80:ec:50:00:fb:89:e0:6c:e2:41:70:1a:3d:a0: cc:17:af:26:37:f5:74:74:a4:bc:54:f5:d1:09:f8:8c:6c:3c: fe:1e:81:65:b0:74:60:95:d1:d8:b6:6c:5c:75:19:f7:f5:41: a0:27:3d:f7:6b:5b:3f:2a:bc:84:ec:8a:83:0b:49:15:a2:a3: af:e8:8a:5d:d5:92:2d:f0:b1:10:07:7e:61:8f:7f:83:d1:dc: b4:4a:94:ed:00:d4:13:f9:d8:e9:3a:89:86:8c:4f:29:fd:3b: 82:f1:2a:bc:a0:57:6b:59:fa:7a:7b:03:6c:da:66:55:f5:5b: d1:f8:ac:13:2e:81:c2:70:8f:86:e5:af:29:84:95:16:93:a7: 58:4a:2e:9a:1c:81:e7:a0:dd:b5:19:c5:4e:15:12:8e:d2:49: 84:e7:1a:3a:5e:15:ff:2c:4a:12:2e:4c:c9:7a:3c:0b:f6:69: ef:e1:7d:5f:b8:37:58:a7:48:de:97:c2:60:f2:12:ab:50:e7: 00:ce:58:2d:81:61:14:76:b2:fc:67:c3:2b:ff:9c:ca:82:19: 4f:4a:7e:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28k4J9CtSfQLMRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2FlNzBiY2EtODg1OC00Y2RkLWE5OTUtNTY5YTMwMTkzMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9ywK6Fv8E1YJGgQVOknxzmrLhoSUzkpvCh+ FpkUE+4OJFlfh1FoxtsUU9IoZCpgXWVE9lVfmPxWYn0fkbRRijxnSBV0LsDvre9W n9rLnAMzP5IOUBsZFwsdn+pLeXujFOf8NZMD7kfGmXs5gIshgdnOE3FoPHCCTLsU SeQIHmScSnS69KiFVTjuErVg3T+Ci1Qn5TZKjDXjb+aK3sorAM5EPV8U76djltYE IfQA94VSKzjVOeyjkHZxTc2pPcXvG/QpI1TZlTlNxkXj868DrU0A8LhrOFjTEBN1 b/NiQl+10+MvAWGQWMFAXad5xpA7atCt4jknmZg6GtVJHm6l0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoyRWUNxAlcQIX+ykFMqAecj8jdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDczZTdmNzEtYzRhNC0z ZGIwLTk2NmEtNjFjNTMzNzdhZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANHmiIOl4g10lC9KHvdiy5P21e+ey3pMBLibJ3a8S4lF08cVotnGuCA 7FAA+4ngbOJBcBo9oMwXryY39XR0pLxU9dEJ+IxsPP4egWWwdGCV0di2bFx1Gff1 QaAnPfdrWz8qvITsioMLSRWio6/oil3Vki3wsRAHfmGPf4PR3LRKlO0A1BP52Ok6 iYaMTyn9O4LxKrygV2tZ+np7A2zaZlX1W9H4rBMugcJwj4blrymElRaTp1hKLpoc geeg3bUZxU4VEo7SSYTnGjpeFf8sShIuTMl6PAv2ae/hfV+4N1inSN6XwmDyEqtQ 5wDOWC2BYRR2svxnwyv/nMqCGU9Kfi4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:43 2025 by rpki-client