$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7470c2ab-8bc6-3440-80fe-bc46e522265e.roa File: 7470c2ab-8bc6-3440-80fe-bc46e522265e.roa (raw, json) Hash identifier: Yi7Wk3Dz0WUcqWHp56w9WGbKusREsjuRoGJFVP+vMtQ= Subject key identifier: 8E:B6:17:C5:9C:21:62:3E:B9:9C:91:CD:D7:42:C7:70:37:C1:37:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23A9A8B5BC7951A559D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7470c2ab-8bc6-3440-80fe-bc46e522265e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:3a:9a:8b:5b:c7:95:1a:55:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=debed5f1-8e6b-4ae8-a673-33d7661b882d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cf:12:fd:25:5c:97:df:61:6c:cd:6e:12:4b: 91:76:8b:fd:14:e4:e4:15:96:1e:c2:0e:68:cd:2b: 2b:f4:e9:34:4d:27:83:ef:68:7e:e1:7b:5c:ce:71: e0:f6:bb:aa:60:80:79:c9:06:e3:92:1e:26:a7:0f: 22:2b:6e:1e:4e:d2:23:32:b6:c5:66:d6:8c:a0:3e: 62:e0:ad:ad:3e:14:a4:38:fa:0f:a3:e5:81:1c:f3: 9e:00:b8:e3:e2:1c:a0:2a:0a:46:19:62:8e:ea:4f: 55:2c:7a:65:81:91:6f:da:8c:39:59:ce:82:f4:ba: f7:76:0d:65:72:e6:3c:db:0a:e5:ab:aa:a3:9f:18: f6:cc:d0:45:fd:e8:c3:d6:71:a7:3f:a3:ba:63:47: 33:a7:e0:72:ac:fa:10:9e:eb:0f:84:03:57:ce:91: 6f:19:a4:38:23:62:3d:a0:70:79:75:60:64:33:ee: fa:b2:63:13:59:a6:b8:20:04:85:56:de:2c:92:18: 48:a3:06:47:ea:9e:8e:f8:a4:4e:40:b4:6e:cc:a1: 47:3e:11:8f:78:76:ba:51:2a:a0:c0:1b:44:f0:73: 78:27:d6:73:e5:93:57:a2:b4:8a:dd:b3:1d:ea:42: 06:ee:bc:19:c9:3a:20:13:7e:db:4e:96:e4:2b:fa: 1e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:17:C5:9C:21:62:3E:B9:9C:91:CD:D7:42:C7:70:37:C1:37:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7470c2ab-8bc6-3440-80fe-bc46e522265e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a4:6a:7b:76:73:61:ff:c7:a4:37:5e:69:49:dc:8a:69:35: f3:94:3a:5d:6b:27:b9:b0:e2:02:f4:35:9d:5e:35:98:69:cd: 9a:b3:55:0e:1b:bb:c1:81:11:92:f2:cb:85:d9:dc:c0:ce:c0: ea:92:6d:49:c7:8c:fc:29:a4:29:c3:5d:c5:64:f4:60:0a:c0: d0:f1:49:74:b4:e9:b2:10:fc:b1:e9:42:09:e8:52:32:0a:dc: dd:56:b0:41:b2:41:00:91:d6:03:6e:e5:aa:ce:60:2b:a2:65: 7f:e9:91:13:27:ff:63:f2:4b:85:27:d8:e8:a9:bd:46:d2:e9: 89:f1:2c:e2:3f:ec:1c:15:69:dc:3c:8c:51:a3:1a:24:a8:73: cb:14:c7:ad:8d:fe:45:14:71:3c:91:59:3e:7d:a9:02:9d:16: aa:77:e0:98:a5:f8:97:77:45:73:66:d8:6d:3a:bb:ce:ad:cc: ce:d2:28:52:a7:7b:23:bd:3a:d3:9d:27:82:1e:91:eb:e4:ac: 31:61:5c:54:07:de:26:01:dc:d1:c5:95:ab:0c:cc:a5:45:eb: a7:da:fc:3f:a8:1c:14:43:d2:90:c7:9a:b9:61:60:8d:da:a5: 24:1c:d5:94:c5:a6:dd:2a:07:23:36:83:c9:3d:76:8d:1e:42: 91:21:22:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jqai1vHlRpVnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZGViZWQ1ZjEtOGU2Yi00YWU4LWE2NzMtMzNkNzY2MWI4ODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM8S/SVcl99hbM1uEkuRdov9FOTkFZYewg5o zSsr9Ok0TSeD72h+4XtcznHg9ruqYIB5yQbjkh4mpw8iK24eTtIjMrbFZtaMoD5i 4K2tPhSkOPoPo+WBHPOeALjj4hygKgpGGWKO6k9VLHplgZFv2ow5Wc6C9Lr3dg1l cuY82wrlq6qjnxj2zNBF/ejD1nGnP6O6Y0czp+ByrPoQnusPhANXzpFvGaQ4I2I9 oHB5dWBkM+76smMTWaa4IASFVt4skhhIowZH6p6O+KROQLRuzKFHPhGPeHa6USqg wBtE8HN4J9Zz5ZNXorSK3bMd6kIG7rwZyTogE37bTpbkK/oevQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI62F8WcIWI+uZyRzddCx3A3wTdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzQ3MGMyYWItOGJjNi0z NDQwLTgwZmUtYmM0NmU1MjIyNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKikant2c2H/x6Q3XmlJ3IppNfOUOl1rJ7mw4gL0NZ1eNZhpzZqzVQ4b u8GBEZLyy4XZ3MDOwOqSbUnHjPwppCnDXcVk9GAKwNDxSXS06bIQ/LHpQgnoUjIK 3N1WsEGyQQCR1gNu5arOYCuiZX/pkRMn/2PyS4Un2OipvUbS6YnxLOI/7BwVadw8 jFGjGiSoc8sUx62N/kUUcTyRWT59qQKdFqp34Jil+Jd3RXNm2G06u86tzM7SKFKn eyO9OtOdJ4IekevkrDFhXFQH3iYB3NHFlasMzKVF66fa/D+oHBRD0pDHmrlhYI3a pSQc1ZTFpt0qByM2g8k9do0eQpEhIsg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:25 2025 by rpki-client