$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c87c9ae-7b8c-3467-86dc-3e6b1f5c352d.roa File: 5c87c9ae-7b8c-3467-86dc-3e6b1f5c352d.roa (raw, json) Hash identifier: +aS3tsWdWSAVrFjPm6rz97bAxJUUXyC5pNZNA/vEsuU= Subject key identifier: 94:11:94:46:3A:D9:6F:0A:57:DC:0B:94:A8:11:AE:91:05:56:0B:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F275445FA1EEC4CE2D9800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c87c9ae-7b8c-3467-86dc-3e6b1f5c352d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:75:44:5f:a1:ee:c4:ce:2d:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7bdd29a1-b53a-43c0-a5b4-1ededc8fc51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:0f:04:82:cd:6f:11:65:ae:67:23:9a:c0: 75:64:e5:ff:a9:b3:0e:46:fb:38:80:3a:88:55:89: 45:72:1b:89:0c:9c:c4:19:33:a8:7d:25:4d:4c:47: e3:e9:94:36:0f:01:48:b9:9b:a0:03:f6:06:cf:42: a1:56:e8:bf:24:94:66:b6:7b:13:1b:54:7b:8a:f1: 76:49:8e:34:e6:a7:46:84:7c:da:d0:9e:20:b4:24: 9c:79:a7:3e:2e:9f:07:ef:0e:02:fa:fb:76:81:76: e6:15:d1:e8:40:ee:d6:00:43:0b:e9:88:19:6f:9c: 58:bd:00:1c:8a:81:ea:63:f4:49:70:c8:31:9d:88: b3:5c:72:78:12:27:86:37:e5:ee:0e:33:58:51:22: a4:4d:c4:d2:59:45:e6:ad:0f:96:d6:a2:b2:b1:3c: 34:d6:c7:c1:92:a3:81:29:fe:b7:83:c0:fa:57:44: 57:07:d0:88:c2:81:39:e9:92:7b:e1:fb:83:42:b4: f2:b3:76:5c:a0:cd:fa:1a:7e:16:79:fc:af:dd:f6: a8:de:f7:94:0c:38:90:6d:ec:a2:d0:71:ce:dd:f0: c2:75:dd:21:73:ba:06:1a:62:16:64:88:d5:09:ff: bb:9d:83:73:31:8b:7c:ca:a9:71:fe:4d:ad:ea:e1: 6c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:11:94:46:3A:D9:6F:0A:57:DC:0B:94:A8:11:AE:91:05:56:0B:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c87c9ae-7b8c-3467-86dc-3e6b1f5c352d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d6:fa:25:41:a5:9d:50:40:6e:2e:ac:47:9a:78:dc:c1:3e: 4b:c3:4f:7f:01:ef:7c:ca:90:80:9a:2a:b3:42:5c:2b:56:6a: 9c:d4:1f:c8:a8:40:b2:ee:92:d2:0d:3c:ae:70:a0:1a:28:4d: 6d:d4:75:33:a5:49:16:32:57:b9:c4:85:41:d0:82:54:c5:08: c2:86:56:b1:7b:13:2c:9b:6e:7d:3a:a2:d5:cd:45:9c:c2:ce: f2:41:52:3a:93:bb:23:ac:f7:f1:96:c7:a9:57:ea:f8:bd:25: c2:c2:0d:5d:72:0e:b9:a4:dd:66:d6:be:da:74:50:70:b0:73: 9e:b8:6d:be:09:f7:e5:29:a0:54:c5:ff:7a:dc:f1:16:be:3c: 75:e3:3f:b5:de:e3:34:0d:f1:b8:ac:e4:2b:3c:6b:ab:b9:d2: bd:f3:cf:b8:dc:12:6f:f9:16:97:4a:5f:08:7c:9f:c1:d4:53: a0:b3:6e:14:f2:70:5f:6f:1d:de:9f:bf:4e:23:3a:a8:92:b8: bc:8b:cd:cf:08:fd:8d:90:35:d5:40:b2:37:34:d8:65:fd:4d: 60:d0:97:27:1a:0e:d2:f0:1a:05:53:cf:db:e2:1a:d8:dc:be: 97:67:68:56:92:ee:b7:b9:7d:cb:4f:41:f8:ee:d3:d6:33:31: 5c:c1:f2:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nVEX6HuxM4tmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2JkZDI5YTEtYjUzYS00M2MwLWE1YjQtMWVkZWRjOGZjNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv0PBILNbxFlrmcjmsB1ZOX/qbMORvs4gDqI VYlFchuJDJzEGTOofSVNTEfj6ZQ2DwFIuZugA/YGz0KhVui/JJRmtnsTG1R7ivF2 SY405qdGhHza0J4gtCSceac+Lp8H7w4C+vt2gXbmFdHoQO7WAEML6YgZb5xYvQAc ioHqY/RJcMgxnYizXHJ4EieGN+XuDjNYUSKkTcTSWUXmrQ+W1qKysTw01sfBkqOB Kf63g8D6V0RXB9CIwoE56ZJ74fuDQrTys3ZcoM36Gn4Wefyv3fao3veUDDiQbeyi 0HHO3fDCdd0hc7oGGmIWZIjVCf+7nYNzMYt8yqlx/k2t6uFs7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQRlEY62W8KV9wLlKgRrpEFVgvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWM4N2M5YWUtN2I4Yy0z NDY3LTg2ZGMtM2U2YjFmNWMzNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvW+iVBpZ1QQG4urEeaeNzBPkvDT38B73zKkICaKrNCXCtWapzUH8io QLLuktINPK5woBooTW3UdTOlSRYyV7nEhUHQglTFCMKGVrF7Eyybbn06otXNRZzC zvJBUjqTuyOs9/GWx6lX6vi9JcLCDV1yDrmk3WbWvtp0UHCwc564bb4J9+UpoFTF /3rc8Ra+PHXjP7Xe4zQN8bis5Cs8a6u50r3zz7jcEm/5FpdKXwh8n8HUU6CzbhTy cF9vHd6fv04jOqiSuLyLzc8I/Y2QNdVAsjc02GX9TWDQlycaDtLwGgVTz9viGtjc vpdnaFaS7re5fctPQfju09YzMVzB8qE= -----END CERTIFICATE-----Generated at Thu Oct 16 01:33:34 2025 by rpki-client