$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/611b4c45-bae6-317b-92b9-a475f79af7e1.roa File: 611b4c45-bae6-317b-92b9-a475f79af7e1.roa (raw, json) Hash identifier: MCkanpmsQusHhn8Ad1BVbARRDTu/y4ebintKIHZpopE= Subject key identifier: 65:05:D8:60:42:2A:AE:46:A8:34:D6:A2:C9:3C:5A:E1:63:E0:E1:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28EC2BB72BC930E85BD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/611b4c45-bae6-317b-92b9-a475f79af7e1.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8e:c2:bb:72:bc:93:0e:85:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=17172a5b-1be8-40e0-9a90-9fc7071d903a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:9f:b5:fa:a8:09:46:ca:24:f7:b6:51:6e: 56:c7:a3:b3:16:bb:cc:ef:8f:3f:6b:32:66:a0:46: e6:37:18:3a:01:c6:7f:df:16:62:f9:d6:c5:14:a1: aa:50:80:83:b1:7a:f3:13:a0:65:65:3f:f1:41:74: ad:b6:03:9e:b5:e8:69:6d:a8:ea:58:e4:ec:33:0c: 94:87:9e:e2:59:05:5e:65:87:f7:1d:7f:e4:bd:88: e4:62:8c:f0:e6:d8:7a:be:90:e6:43:be:19:08:ad: 17:2c:cc:a3:a9:b2:c4:15:68:a8:1f:69:85:c9:70: 50:42:f6:d0:11:cd:fe:53:bb:0c:01:d9:e1:94:5b: fc:97:23:14:93:ce:8e:34:f3:1a:a2:74:1b:54:0d: e8:94:80:12:7b:76:f8:7b:ed:cc:bf:d6:24:07:3a: 76:3d:48:3d:19:71:26:03:01:6f:8f:00:e2:6c:31: 0e:2c:ef:fc:c4:d1:22:76:48:a2:b7:92:fb:4a:de: 20:8b:fe:fd:f7:59:69:03:ea:2a:31:f5:88:90:9f: ea:a4:78:4e:9e:21:bf:a1:15:f3:e9:ad:54:1e:30: 51:a4:1e:a2:7c:3f:01:14:66:fa:5f:2a:67:1f:6b: 4d:08:ff:58:4a:ed:f6:e5:f3:40:d7:12:24:06:3d: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:05:D8:60:42:2A:AE:46:A8:34:D6:A2:C9:3C:5A:E1:63:E0:E1:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/611b4c45-bae6-317b-92b9-a475f79af7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8d:47:fd:91:b4:cf:0b:94:40:50:56:df:f8:97:3d:35:98: 2a:38:2c:0a:6d:97:cd:0d:1c:7c:e0:86:c7:16:52:ed:9a:9f: c8:82:77:6b:3b:97:49:24:31:d8:23:4a:09:e0:17:ed:5e:e8: ed:0a:7e:e2:b4:27:d1:0a:9b:d3:ba:b1:ef:16:a9:ea:db:69: 08:f8:a8:0f:ea:ed:cf:7a:fd:2d:2e:f0:db:e6:e3:cf:d0:a6: c7:b8:61:19:81:e7:73:10:ed:1d:85:4d:64:7c:b9:cd:6f:03: 7d:53:fc:b6:77:74:55:9d:59:85:74:1d:5a:e7:e1:55:d2:c2: f6:27:35:6c:2c:87:43:c7:31:98:b1:40:6e:9e:4b:a2:fb:e4: 59:db:58:65:ac:55:ea:57:63:ac:ca:65:67:03:4d:87:7d:3a: d4:04:11:a2:24:6c:86:37:3a:3d:41:1a:ff:6e:fb:67:27:7a: 81:8e:f8:4b:d9:41:fa:62:3a:11:44:44:07:3e:11:34:40:5e: 9d:69:0d:0f:0c:f4:63:36:9c:b1:66:62:57:39:cb:27:46:37: 7e:5a:e3:90:41:6a:2b:64:4d:e1:10:2c:d3:aa:e6:0c:50:0b: 22:fa:f1:81:b4:9f:94:22:98:59:ca:bd:d2:94:0a:e1:4b:c2: 01:3a:ae:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28o7Cu3K8kw6FvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTcxNzJhNWItMWJlOC00MGUwLTlhOTAtOWZjNzA3MWQ5MDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj+ftfqoCUbKJPe2UW5Wx6OzFrvM748/azJm oEbmNxg6AcZ/3xZi+dbFFKGqUICDsXrzE6BlZT/xQXSttgOetehpbajqWOTsMwyU h57iWQVeZYf3HX/kvYjkYozw5th6vpDmQ74ZCK0XLMyjqbLEFWioH2mFyXBQQvbQ Ec3+U7sMAdnhlFv8lyMUk86ONPMaonQbVA3olIASe3b4e+3Mv9YkBzp2PUg9GXEm AwFvjwDibDEOLO/8xNEidkiit5L7St4gi/7991lpA+oqMfWIkJ/qpHhOniG/oRXz 6a1UHjBRpB6ifD8BFGb6XypnH2tNCP9YSu325fNA1xIkBj18/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUF2GBCKq5GqDTWosk8WuFj4OELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjExYjRjNDUtYmFlNi0z MTdiLTkyYjktYTQ3NWY3OWFmN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNzyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+NR/2RtM8LlEBQVt/4lz01mCo4LAptl80NHHzghscWUu2an8iCd2s7 l0kkMdgjSgngF+1e6O0KfuK0J9EKm9O6se8WqerbaQj4qA/q7c96/S0u8Nvm48/Q pse4YRmB53MQ7R2FTWR8uc1vA31T/LZ3dFWdWYV0HVrn4VXSwvYnNWwsh0PHMZix QG6eS6L75FnbWGWsVepXY6zKZWcDTYd9OtQEEaIkbIY3Oj1BGv9u+2cneoGO+EvZ QfpiOhFERAc+ETRAXp1pDQ8M9GM2nLFmYlc5yydGN35a45BBaitkTeEQLNOq5gxQ CyL68YG0n5QimFnKvdKUCuFLwgE6riQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:33 2025 by rpki-client