$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/600e8643-6780-359a-abae-902a0822aab0.roa File: 600e8643-6780-359a-abae-902a0822aab0.roa (raw, json) Hash identifier: 1bw1ne+LjccBQu4ymbXp430eCKvZyscj+EADInrFk7M= Subject key identifier: 42:93:0E:C4:C0:38:3E:72:B7:35:37:94:7C:14:87:7F:A9:96:4B:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27E29B95D432FD52A3800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/600e8643-6780-359a-abae-902a0822aab0.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7e:29:b9:5d:43:2f:d5:2a:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ce481d2d-c534-4541-9a0f-e3adddf67dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:08:49:00:14:a2:b4:9c:16:97:d2:f2:04: 7f:01:5c:90:87:07:f0:6f:30:62:bd:64:94:fd:cc: 50:fb:d0:38:c3:a9:5c:5a:84:be:e9:a8:a7:b0:75: e6:48:b5:23:20:06:29:61:de:b2:90:f7:b2:88:e0: 78:5b:10:16:34:e0:2d:32:0a:5f:38:4c:89:66:79: c5:a0:55:8c:90:cd:f5:a3:3b:9e:a4:1f:4c:42:16: 85:30:23:db:78:d0:c1:75:88:8d:45:35:5c:71:c6: c0:08:e7:16:96:f6:77:ef:31:62:3e:84:22:3e:15: 71:fc:52:4d:ba:f9:cb:a3:8f:13:ec:3c:fb:49:ac: 76:e7:03:18:94:1a:81:c2:7c:1b:70:bb:73:61:81: 37:45:4b:01:db:9b:67:52:e2:89:d7:5f:4f:c8:2c: dd:13:c2:9a:12:83:af:5c:b9:bd:b2:43:c9:6b:f3: a5:c1:fd:77:46:a1:cd:97:4b:9b:c4:b7:92:7f:07: 13:cd:52:38:e7:e4:6b:73:1d:80:13:db:88:9f:29: 3b:a6:61:5a:4e:ad:93:92:23:13:f8:7e:cc:39:90: 6b:35:6b:8c:f0:0b:00:c0:97:1a:41:1a:4d:0d:2b: 98:49:bc:ce:6b:ac:d1:02:e8:3c:30:20:56:4e:00: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:0E:C4:C0:38:3E:72:B7:35:37:94:7C:14:87:7F:A9:96:4B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/600e8643-6780-359a-abae-902a0822aab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:01:f2:c1:b1:75:16:d3:71:ce:e5:69:86:9c:fb:e1:52:3b: 86:ef:fe:ee:22:aa:33:8d:f4:48:4b:4e:75:84:89:98:49:a6: bb:d7:07:07:04:3b:03:ba:80:4e:d3:97:ad:a4:c3:74:94:84: bd:87:fe:b6:6c:f9:36:7a:e1:ab:f2:8d:3a:dc:d6:4f:06:70: c6:d2:9c:80:74:5b:a0:da:71:47:8a:d8:00:0e:02:e3:1b:6a: b9:22:d3:f6:c7:79:fd:14:af:60:07:5b:50:e7:c0:b2:a9:ef: be:3f:ca:8a:d9:72:7b:96:c7:57:39:e1:8c:a0:95:ee:5e:30: 9d:f3:d9:8c:3e:6d:e1:86:f2:44:e1:4e:64:29:5c:1c:26:cf: 30:81:55:a1:d5:7b:e4:a9:eb:49:a5:5d:b1:6b:ee:bc:ae:c7: 01:b0:39:9b:7e:c6:e8:36:a4:d0:4c:b3:0b:d2:ba:8b:e6:15: 13:20:48:c4:6d:39:67:6d:11:09:a6:74:e5:e0:de:e1:4e:8c: a1:4f:7c:c1:50:85:2c:73:31:6e:a0:0d:d9:23:15:61:b6:e8: 7f:cf:66:d8:b6:d0:bb:08:6c:db:a2:a2:55:58:9a:66:00:95: 0c:13:37:28:f6:de:02:16:fd:15:09:fb:ed:ed:1b:ad:8d:0c: 62:4a:7f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28n4puV1DL9UqOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Y2U0ODFkMmQtYzUzNC00NTQxLTlhMGYtZTNhZGRkZjY3ZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEMISQAUorScFpfS8gR/AVyQhwfwbzBivWSU /cxQ+9A4w6lcWoS+6ainsHXmSLUjIAYpYd6ykPeyiOB4WxAWNOAtMgpfOEyJZnnF oFWMkM31ozuepB9MQhaFMCPbeNDBdYiNRTVcccbACOcWlvZ37zFiPoQiPhVx/FJN uvnLo48T7Dz7Sax25wMYlBqBwnwbcLtzYYE3RUsB25tnUuKJ119PyCzdE8KaEoOv XLm9skPJa/Olwf13RqHNl0ubxLeSfwcTzVI45+Rrcx2AE9uInyk7pmFaTq2TkiMT +H7MOZBrNWuM8AsAwJcaQRpNDSuYSbzOa6zRAug8MCBWTgAq0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKTDsTAOD5ytzU3lHwUh3+plktUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjAwZTg2NDMtNjc4MC0z NTlhLWFiYWUtOTAyYTA4MjJhYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcB8sGxdRbTcc7laYac++FSO4bv/u4iqjON9EhLTnWEiZhJprvXBwcE OwO6gE7Tl62kw3SUhL2H/rZs+TZ64avyjTrc1k8GcMbSnIB0W6DacUeK2AAOAuMb arki0/bHef0Ur2AHW1DnwLKp774/yorZcnuWx1c54Yygle5eMJ3z2Yw+beGG8kTh TmQpXBwmzzCBVaHVe+Sp60mlXbFr7ryuxwGwOZt+xug2pNBMswvSuovmFRMgSMRt OWdtEQmmdOXg3uFOjKFPfMFQhSxzMW6gDdkjFWG26H/PZti20LsIbNuiolVYmmYA lQwTNyj23gIW/RUJ++3tG62NDGJKf2c= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:24 2025 by rpki-client