$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78134a9f-482e-3722-b63b-fe53aaf49573.roa File: 78134a9f-482e-3722-b63b-fe53aaf49573.roa (raw, json) Hash identifier: fSM/N5gaKkCRIhH8AtcZQnxk/Qa/+VmdCFmAy8M2fo8= Subject key identifier: E9:E0:FC:56:13:EF:3D:29:6D:CE:D7:18:0B:B8:9A:FD:22:D4:B8:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F223240C8AA29AD8EFD840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78134a9f-482e-3722-b63b-fe53aaf49573.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.199.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:23:24:0c:8a:a2:9a:d8:ef:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=46a4762d-5724-418d-aada-b0a50472cee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:f1:46:a5:9e:76:04:99:bf:b2:7d:67:89: 99:be:be:7f:13:4e:92:c0:61:cc:ee:66:5d:f0:63: 47:93:d7:54:08:1f:bc:a7:99:de:6f:b6:f6:c2:23: 38:de:c9:f1:bd:c1:eb:95:db:3a:cb:4d:e9:42:d2: 48:32:78:71:39:f1:16:17:4a:9b:1a:5d:da:a5:85: 3c:62:40:30:9c:1f:89:ee:d7:8e:bb:a8:3d:9a:8a: 18:11:6c:08:4c:9b:76:d8:1b:06:91:5c:9b:e5:08: c2:35:d3:3b:c6:8d:71:c7:a0:72:c6:ee:fb:69:10: 3d:4b:b9:69:56:6f:db:ca:b7:16:9b:46:49:01:d7: 1e:07:98:f1:50:58:ab:99:38:6d:23:e0:81:f2:68: 32:4c:88:0f:3b:bf:0d:62:6b:63:71:1d:eb:d6:1b: f5:e4:85:65:76:1e:39:c5:e3:79:ae:8a:dc:a0:9b: 19:a5:e5:15:b6:4d:a4:dc:7d:3d:1f:fc:38:85:43: 41:0e:9b:54:4f:b0:6f:bf:29:71:74:c0:bd:2d:e5: 3f:7d:bb:5e:59:95:f0:6e:21:43:96:85:6e:10:88: 05:1e:aa:d2:61:59:2f:96:1d:66:4b:db:ba:3a:a9: ab:f6:cb:c9:54:db:9b:5b:8f:e0:30:dc:65:e5:c1: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:FC:56:13:EF:3D:29:6D:CE:D7:18:0B:B8:9A:FD:22:D4:B8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78134a9f-482e-3722-b63b-fe53aaf49573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:da:f3:c1:99:48:75:42:ad:c8:1a:05:54:6b:9f:de:14:4c: ba:78:ba:23:59:4a:89:fd:42:60:c0:57:16:7a:5d:ea:38:ff: ad:b3:22:c9:c7:63:06:a4:55:bc:c8:7d:6c:1f:33:b9:2b:ac: 64:a9:81:39:a9:5e:d6:64:d1:af:09:ec:83:4d:48:a5:99:1b: 7a:e5:1f:aa:b3:0d:b8:a6:35:70:54:e0:9f:40:55:c7:af:66: 09:33:05:d6:89:b1:e5:d1:f1:49:54:31:0a:42:4b:56:df:61: 53:71:40:81:78:e9:11:d6:28:63:ed:85:02:64:c3:7d:b6:8f: c8:d7:f5:ed:1c:e3:ab:91:5e:db:73:64:23:38:31:14:02:87: 12:f0:e6:4c:e4:f4:cf:81:01:41:3f:91:56:50:91:8d:f8:2d: 16:60:2a:26:5b:6a:7b:5a:d5:f4:7c:87:2c:e6:96:e9:a2:49: 3c:8f:4d:02:45:3b:8d:09:5c:43:33:51:b2:f0:4f:22:80:73: 7a:b3:83:af:9b:e4:df:02:27:d5:44:e4:2d:22:76:12:3b:a0: 8b:6b:d5:b6:a2:40:6b:30:3c:d2:59:d4:7b:5e:c9:6d:98:ab: d9:a7:0e:28:25:ce:58:2b:b2:6f:89:39:6e:6b:72:6a:d7:d4: 26:90:da:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iMkDIqimtjv2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDZhNDc2MmQtNTcyNC00MThkLWFhZGEtYjBhNTA0NzJjZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtfxRqWedgSZv7J9Z4mZvr5/E06SwGHM7mZd 8GNHk9dUCB+8p5neb7b2wiM43snxvcHrlds6y03pQtJIMnhxOfEWF0qbGl3apYU8 YkAwnB+J7teOu6g9mooYEWwITJt22BsGkVyb5QjCNdM7xo1xx6Byxu77aRA9S7lp Vm/byrcWm0ZJAdceB5jxUFirmThtI+CB8mgyTIgPO78NYmtjcR3r1hv15IVldh45 xeN5rorcoJsZpeUVtk2k3H09H/w4hUNBDptUT7BvvylxdMC9LeU/fbteWZXwbiFD loVuEIgFHqrSYVkvlh1mS9u6Oqmr9svJVNubW4/gMNxl5cEsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOng/FYT7z0pbc7XGAu4mv0i1LidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzgxMzRhOWYtNDgyZS0z NzIyLWI2M2ItZmU1M2FhZjQ5NTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACja88GZSHVCrcgaBVRrn94UTLp4uiNZSon9QmDAVxZ6Xeo4/62zIsnH YwakVbzIfWwfM7krrGSpgTmpXtZk0a8J7INNSKWZG3rlH6qzDbimNXBU4J9AVcev ZgkzBdaJseXR8UlUMQpCS1bfYVNxQIF46RHWKGPthQJkw322j8jX9e0c46uRXttz ZCM4MRQChxLw5kzk9M+BAUE/kVZQkY34LRZgKiZbanta1fR8hyzmlumiSTyPTQJF O40JXEMzUbLwTyKAc3qzg6+b5N8CJ9VE5C0idhI7oItr1baiQGswPNJZ1HteyW2Y q9mnDiglzlgrsm+JOW5rcmrX1CaQ2u0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:52:44 2025 by rpki-client