$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa3a185-b296-31d8-8c33-6d188efffc41.roa File: 4aa3a185-b296-31d8-8c33-6d188efffc41.roa (raw, json) Hash identifier: aS3VzynBU8qVYM2qmJra21eDcNhGuyx20un2LKL0n30= Subject key identifier: 1A:A0:9B:5D:59:75:28:95:31:6C:BB:30:FA:83:93:03:21:46:19:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29A68CF592E81EE570580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa3a185-b296-31d8-8c33-6d188efffc41.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.199.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9a:68:cf:59:2e:81:ee:57:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b9fd0d35-584b-4e2f-b4e3-92795519a3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:f2:39:ab:37:f3:7b:e4:d0:36:46:f7:ff: 45:c9:4e:8f:34:5b:c8:fd:c6:23:de:fa:12:56:f2: 1e:99:93:ca:92:85:92:4b:d3:74:ec:a0:c5:d9:36: 98:06:e5:6e:16:1d:74:ff:37:82:47:f1:9a:c4:06: 6b:30:10:ef:44:fe:0b:6d:3c:1c:d8:06:70:b9:1f: ac:fc:08:dd:78:b3:1b:b5:e0:98:d9:36:d6:29:08: b4:11:eb:dd:94:97:1f:e1:ca:85:36:cb:59:3a:ac: b8:cd:13:bf:1d:98:64:10:b0:20:f4:ca:b8:b0:40: 44:08:af:11:f9:54:96:4e:f6:d3:a0:92:95:1a:87: f0:45:eb:98:e4:77:0e:05:f7:da:1f:55:00:e9:90: d8:be:4c:aa:86:29:6f:f1:93:7d:39:e6:71:9d:3a: de:fa:3e:3b:74:03:8c:f1:e3:ca:9e:09:71:34:ea: a5:d0:a2:cb:37:af:f7:9b:cc:32:ea:e2:db:be:d5: 78:ed:42:20:6c:51:06:ca:0f:72:d6:5e:04:4c:38: f0:9e:1b:f2:83:63:ea:2d:03:f4:41:19:f6:10:cc: 16:38:01:42:12:4c:8a:9c:92:c4:01:b7:87:8a:b8: 08:b6:f2:3c:a4:b2:6d:de:7f:02:5a:22:6a:7d:fb: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A0:9B:5D:59:75:28:95:31:6C:BB:30:FA:83:93:03:21:46:19:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa3a185-b296-31d8-8c33-6d188efffc41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:de:c3:bc:4b:f5:2b:ac:42:4d:12:5a:f5:58:d3:9c:7a:09: 93:4e:cf:e6:fe:85:1e:d0:87:f4:bd:4b:74:9c:13:47:46:16: 19:d7:73:06:15:d3:66:d2:55:a0:8f:8f:24:ae:3d:62:53:52: 78:c5:c3:69:13:22:41:3d:ab:63:70:62:d6:36:d6:a2:14:9f: c9:53:93:29:88:6b:75:04:a6:c4:af:6a:94:be:71:02:0f:79: 7f:6f:c4:98:bb:23:8e:f9:8a:11:9f:de:48:6a:c2:6b:50:4f: 88:17:09:2c:bf:5f:08:3e:02:ca:12:92:cc:ed:59:23:fe:6c: bb:4d:da:50:fa:3b:ac:ae:15:be:d0:6c:9f:b6:00:5c:4f:52: 02:1f:42:06:e5:83:1d:a3:87:ae:60:4d:f6:33:21:e0:a5:09: 22:eb:d6:76:08:bc:75:6a:51:3e:87:f4:66:b2:c1:b4:38:e8: 65:ae:12:06:58:30:e7:69:54:1a:9c:3b:10:d1:3a:ee:ec:95: 2c:01:13:f5:35:5f:b0:51:3e:76:1b:18:9e:f5:78:b4:cb:cb: 2e:54:a9:1e:64:39:21:4f:0a:eb:77:99:dc:57:f5:bd:01:a9: c9:56:52:d1:d0:2d:a5:8d:d7:e3:1e:da:d2:a5:59:ab:e5:9d: 02:f8:61:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ppoz1kuge5XBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YjlmZDBkMzUtNTg0Yi00ZTJmLWI0ZTMtOTI3OTU1MTlhM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7vyOas383vk0DZG9/9FyU6PNFvI/cYj3voS VvIemZPKkoWSS9N07KDF2TaYBuVuFh10/zeCR/GaxAZrMBDvRP4LbTwc2AZwuR+s /AjdeLMbteCY2TbWKQi0EevdlJcf4cqFNstZOqy4zRO/HZhkELAg9Mq4sEBECK8R +VSWTvbToJKVGofwReuY5HcOBffaH1UA6ZDYvkyqhilv8ZN9OeZxnTre+j47dAOM 8ePKnglxNOql0KLLN6/3m8wy6uLbvtV47UIgbFEGyg9y1l4ETDjwnhvyg2PqLQP0 QRn2EMwWOAFCEkyKnJLEAbeHirgItvI8pLJt3n8CWiJqffvPLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqgm11ZdSiVMWy7MPqDkwMhRhnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGFhM2ExODUtYjI5Ni0z MWQ4LThjMzMtNmQxODhlZmZmYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7ew7xL9SusQk0SWvVY05x6CZNOz+b+hR7Qh/S9S3ScE0dGFhnXcwYV 02bSVaCPjySuPWJTUnjFw2kTIkE9q2NwYtY21qIUn8lTkymIa3UEpsSvapS+cQIP eX9vxJi7I475ihGf3khqwmtQT4gXCSy/Xwg+AsoSksztWSP+bLtN2lD6O6yuFb7Q bJ+2AFxPUgIfQgblgx2jh65gTfYzIeClCSLr1nYIvHVqUT6H9GaywbQ46GWuEgZY MOdpVBqcOxDROu7slSwBE/U1X7BRPnYbGJ71eLTLyy5UqR5kOSFPCut3mdxX9b0B qclWUtHQLaWN1+Me2tKlWavlnQL4YRg= -----END CERTIFICATE-----Generated at Thu Oct 16 01:48:59 2025 by rpki-client