$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c5d858f-99c9-35f4-87d1-78ec66d962c5.roa File: 7c5d858f-99c9-35f4-87d1-78ec66d962c5.roa (raw, json) Hash identifier: Qxx2Lt7yUj8KGysIQuyo6sTl9prY4EPO7CiL0xRcHH0= Subject key identifier: BA:BF:93:99:71:71:ED:FA:8E:AE:E5:6A:11:B7:88:B8:FB:95:AB:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2877475B2141F301F2120 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c5d858f-99c9-35f4-87d1-78ec66d962c5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.195.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:87:74:75:b2:14:1f:30:1f:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1777ac7a-7a2a-4721-b5b2-f854cddbd2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:cb:ba:aa:7e:00:c3:68:80:7a:bf:fa:1c: e0:85:8c:bc:44:8c:cb:0d:7e:ea:67:47:91:2a:5b: c1:b4:c5:26:95:fc:4f:c8:82:2e:8b:f0:e5:e7:66: 13:3a:14:72:cd:3e:b4:5f:9d:fa:82:28:29:d4:23: ab:cc:f6:f9:16:d8:de:1e:c9:c8:1b:49:95:0e:97: 6c:e9:64:ad:65:70:a4:b9:c3:75:ac:85:67:d8:0d: 77:c0:8f:65:94:a5:2e:dc:40:7f:89:00:3d:67:84: af:a4:cb:04:2c:1e:8e:73:18:1f:51:15:ce:5e:4b: 31:18:86:f6:d7:82:1c:1d:64:a1:95:22:86:90:86: b8:b3:ed:4e:fb:c8:05:de:8b:99:cc:9f:90:a3:de: f8:e2:fc:40:3a:11:12:e0:cc:a1:3e:3e:91:4f:02: 3b:2b:69:6f:9a:41:59:37:bc:4e:03:71:5e:4e:ff: cb:07:ca:aa:e8:37:17:83:54:e1:26:09:29:c5:1e: 6b:90:1c:8a:5a:ec:bd:0a:5a:57:a5:21:d7:c3:91: 28:43:a7:2c:7b:91:91:d8:b3:5a:a5:6e:e2:2a:b7: dd:5b:1c:6c:89:e3:01:ad:82:32:91:40:36:90:4d: 6c:ff:b8:9e:7e:de:82:39:eb:a4:63:d5:06:bb:bb: 60:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BF:93:99:71:71:ED:FA:8E:AE:E5:6A:11:B7:88:B8:FB:95:AB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c5d858f-99c9-35f4-87d1-78ec66d962c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.195.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b1:b3:cd:ff:13:9b:66:4a:79:24:cf:c7:47:29:d3:54:b0: 49:6b:5e:ac:ea:8e:a8:f6:40:81:08:87:0e:1f:5c:d0:96:ca: bb:fc:8d:74:b4:2f:e9:8b:ee:ae:89:21:c8:93:71:ab:45:fd: 21:6d:56:b1:c9:df:cc:96:10:b9:b5:96:df:ca:15:39:10:90: c1:40:ca:b3:df:b7:fe:9d:ed:e2:ba:7f:ce:a1:c3:12:61:1b: 08:66:c7:53:7b:83:1c:35:5d:d8:3b:55:1c:b9:aa:2c:ca:8f: 5e:09:9c:b3:79:9b:22:5b:01:38:f9:ae:6c:13:e4:fa:79:36: aa:f1:1e:b4:8f:3a:31:df:53:bd:7c:5f:41:87:a4:54:44:18: 71:7a:cf:b3:1f:54:c9:73:42:d6:89:bc:6d:50:c3:5d:9d:13: fb:1c:07:ed:fd:1b:d7:a0:61:dd:b7:59:41:f1:57:23:d4:fd: 49:ed:73:f4:5c:d0:bf:df:38:de:68:57:43:f5:cc:fe:b2:b9: 3c:89:4b:37:8c:99:d8:de:33:e1:0d:dd:7b:59:eb:6d:c4:7a: 83:7c:31:e2:a8:8f:63:0d:5a:6c:f5:7f:a5:09:77:1a:e8:45: ac:4f:f2:5b:4d:9c:40:9a:d5:dc:83:86:7b:27:cf:12:41:54: 4c:f2:81:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28od0dbIUHzAfISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTc3N2FjN2EtN2EyYS00NzIxLWI1YjItZjg1NGNkZGJkMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3nLuqp+AMNogHq/+hzghYy8RIzLDX7qZ0eR KlvBtMUmlfxPyIIui/Dl52YTOhRyzT60X536gigp1COrzPb5FtjeHsnIG0mVDpds 6WStZXCkucN1rIVn2A13wI9llKUu3EB/iQA9Z4SvpMsELB6OcxgfURXOXksxGIb2 14IcHWShlSKGkIa4s+1O+8gF3ouZzJ+Qo9744vxAOhES4MyhPj6RTwI7K2lvmkFZ N7xOA3FeTv/LB8qq6DcXg1ThJgkpxR5rkByKWuy9ClpXpSHXw5EoQ6cse5GR2LNa pW7iKrfdWxxsieMBrYIykUA2kE1s/7ieft6COeukY9UGu7tgWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq/k5lxce36jq7lahG3iLj7lasBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2M1ZDg1OGYtOTljOS0z NWY0LTg3ZDEtNzhlYzY2ZDk2MmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMOMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGxs83/E5tmSnkkz8dHKdNUsElrXqzqjqj2QIEIhw4fXNCWyrv8jXS0 L+mL7q6JIciTcatF/SFtVrHJ38yWELm1lt/KFTkQkMFAyrPft/6d7eK6f86hwxJh Gwhmx1N7gxw1Xdg7VRy5qizKj14JnLN5myJbATj5rmwT5Pp5NqrxHrSPOjHfU718 X0GHpFREGHF6z7MfVMlzQtaJvG1Qw12dE/scB+39G9egYd23WUHxVyPU/Untc/Rc 0L/fON5oV0P1zP6yuTyJSzeMmdjeM+EN3XtZ623EeoN8MeKoj2MNWmz1f6UJdxro RaxP8ltNnECa1dyDhnsnzxJBVEzygbE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:54:23 2025 by rpki-client