$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ce5b4af-ba01-3564-b5e8-2b8e61ddacbd.roa File: 7ce5b4af-ba01-3564-b5e8-2b8e61ddacbd.roa (raw, json) Hash identifier: mZIUn87JyDgmQnJtkKFV3Uc5W0jbwX5RF56C6bPa9yk= Subject key identifier: 52:E6:4E:A4:09:AB:7C:1D:C3:91:80:A1:39:C3:8E:86:84:B8:37:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2443B745FFBE32FE13300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ce5b4af-ba01-3564-b5e8-2b8e61ddacbd.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.221.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:44:3b:74:5f:fb:e3:2f:e1:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2aac2a0f-f439-4950-a149-33833874b88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4c:2d:52:55:72:6d:51:e1:2a:7e:04:1f:e5: 49:83:a7:cf:02:ae:87:ad:5b:42:b7:f6:3e:d9:a0: 5e:7f:06:7b:30:4f:2c:a5:5a:6c:6d:13:13:ab:b5: 35:85:f3:b9:44:4c:50:32:cb:86:87:d2:cf:f8:75: 0b:7e:e7:15:1f:b1:b6:e5:77:7b:46:df:30:2b:48: 0e:b6:d2:45:e3:91:05:cf:91:b7:4f:1d:01:a0:32: 04:9a:f1:e3:21:0a:33:df:73:a4:04:c5:2e:3a:e6: 6e:a0:a4:4e:05:f1:0a:d8:b1:5b:9a:92:45:40:9b: 6e:e1:92:91:d6:a2:08:e4:1f:3d:87:ec:cb:48:0c: 6d:4a:42:98:91:08:d2:fb:d3:bc:86:62:77:6e:ad: 31:3e:ec:b8:09:de:03:30:6f:0b:74:f1:a1:41:55: 7e:9e:e4:55:44:f4:e2:b6:f6:19:8f:3c:75:74:a0: ef:c8:01:57:6e:3a:bd:14:1b:c7:2a:5c:73:b9:72: bc:2e:ce:4b:3d:15:48:4f:c6:56:1a:27:52:55:a2: 4e:42:7d:44:8e:e2:fe:1b:1c:fd:38:e1:cc:64:14: 17:1d:4b:dc:10:92:59:c0:3b:71:65:f7:ed:44:d7: 60:64:c5:55:4d:b5:ea:be:0c:7f:18:39:bd:19:11: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E6:4E:A4:09:AB:7C:1D:C3:91:80:A1:39:C3:8E:86:84:B8:37:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ce5b4af-ba01-3564-b5e8-2b8e61ddacbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5b:e9:37:57:e2:20:1b:ce:84:2c:39:2d:85:41:37:02:0b: 2d:23:44:43:a7:2c:46:06:f9:cf:7c:0c:10:98:04:91:30:88: 5c:69:ca:39:9b:b1:d4:9b:2d:27:96:d1:ec:11:94:33:83:ec: 5d:4d:6f:55:53:90:17:4d:b2:e9:fc:7e:c5:bf:b5:84:e5:91: f8:e5:f8:5f:b2:84:f6:dc:cc:1d:8d:42:ad:2e:40:d8:3e:51: 67:38:ce:8c:98:b2:a2:fc:70:59:8d:8c:fc:ac:16:5d:dc:b0: e6:2c:3b:1c:45:03:e3:cd:dd:03:b9:bb:2b:22:93:7a:f4:9b: ba:04:4a:8b:8f:7e:93:83:5a:f8:e0:16:b8:42:77:b4:6b:1d: e7:5b:00:89:06:d6:98:3c:3d:be:a5:4e:8a:30:92:c9:b6:2f: f0:38:5f:e8:bd:54:2a:b2:aa:bc:b2:65:27:30:f1:c1:ee:d6: 39:21:ff:5d:b7:e9:d7:86:63:3b:45:fd:38:60:68:55:4f:41: 4e:88:89:45:45:a1:86:cb:48:8f:e4:ee:65:fa:69:63:be:d1: 47:ba:bb:64:49:19:17:7c:39:b3:4e:ab:a3:17:0c:f3:6c:df: 34:9d:4d:13:0a:eb:60:db:a8:43:a4:14:67:e0:67:0c:42:48: 66:af:ca:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kQ7dF/74y/hMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmFhYzJhMGYtZjQzOS00OTUwLWExNDktMzM4MzM4NzRiODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkwtUlVybVHhKn4EH+VJg6fPAq6HrVtCt/Y+ 2aBefwZ7ME8spVpsbRMTq7U1hfO5RExQMsuGh9LP+HULfucVH7G25Xd7Rt8wK0gO ttJF45EFz5G3Tx0BoDIEmvHjIQoz33OkBMUuOuZuoKROBfEK2LFbmpJFQJtu4ZKR 1qII5B89h+zLSAxtSkKYkQjS+9O8hmJ3bq0xPuy4Cd4DMG8LdPGhQVV+nuRVRPTi tvYZjzx1dKDvyAFXbjq9FBvHKlxzuXK8Ls5LPRVIT8ZWGidSVaJOQn1EjuL+Gxz9 OOHMZBQXHUvcEJJZwDtxZfftRNdgZMVVTbXqvgx/GDm9GRGGowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLmTqQJq3wdw5GAoTnDjoaEuDdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2NlNWI0YWYtYmEwMS0z NTY0LWI1ZTgtMmI4ZTYxZGRhY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpb6TdX4iAbzoQsOS2FQTcCCy0jREOnLEYG+c98DBCYBJEwiFxpyjmb sdSbLSeW0ewRlDOD7F1Nb1VTkBdNsun8fsW/tYTlkfjl+F+yhPbczB2NQq0uQNg+ UWc4zoyYsqL8cFmNjPysFl3csOYsOxxFA+PN3QO5uysik3r0m7oESouPfpODWvjg FrhCd7RrHedbAIkG1pg8Pb6lToowksm2L/A4X+i9VCqyqryyZScw8cHu1jkh/123 6deGYztF/ThgaFVPQU6IiUVFoYbLSI/k7mX6aWO+0Ue6u2RJGRd8ObNOq6MXDPNs 3zSdTRMK62DbqEOkFGfgZwxCSGavyqM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:24:08 2025 by rpki-client