$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7db92d9a-373a-3f44-8da9-e793b2713d0c.roa File: 7db92d9a-373a-3f44-8da9-e793b2713d0c.roa (raw, json) Hash identifier: gXllu1CdzNV8LN+qtXtuSuuWYTzDa/JrtB0elpngV8Q= Subject key identifier: ED:50:A0:5A:92:93:D3:AD:6A:BF:B7:C4:B1:13:14:18:9E:73:6B:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27DB75ABDDD99DAD4CD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7db92d9a-373a-3f44-8da9-e793b2713d0c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7d:b7:5a:bd:dd:99:da:d4:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=f6a96f66-3cac-41d6-8e1f-3b7a7f2a3362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:05:b9:d5:32:d3:d8:18:f6:9e:73:b4:d8:b3: 93:cf:57:8b:86:b9:5f:a9:63:91:98:77:ee:0e:4c: 6d:a1:8d:bb:8c:b0:f2:38:1c:40:b4:38:6a:c6:18: e1:e4:ff:35:40:ab:0f:61:8a:63:95:2a:96:11:d2: dd:74:8e:a9:a0:76:49:1c:d0:a9:36:81:82:75:c6: c0:eb:1e:00:70:af:ca:eb:63:96:4d:cd:48:b7:b5: cd:51:ba:bd:e0:86:92:d1:ca:88:77:94:e2:5d:01: 31:56:cb:46:ac:21:4f:3d:df:35:7c:49:d2:d1:09: f7:1b:69:df:06:cb:b3:16:53:00:c3:1f:1b:80:26: 15:89:86:fd:a0:51:6f:3d:36:a6:64:f9:c7:38:e9: c3:76:51:24:6d:4f:85:8d:c2:4d:f6:99:30:37:b6: ae:4e:1c:69:b4:2f:af:64:13:14:41:2a:db:77:86: bb:34:81:81:0e:01:00:5a:de:72:3b:3b:10:67:f8: ab:92:0d:87:b0:74:4e:eb:4a:1a:e7:c9:41:c2:98: f6:b2:a8:56:9f:ad:50:af:a3:e0:16:83:c3:78:69: 21:6c:c2:a0:b1:37:20:3a:85:fd:ef:1f:49:86:b0: 5e:9c:73:bc:e4:50:e9:c6:29:41:45:6c:c4:b2:3e: 86:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:50:A0:5A:92:93:D3:AD:6A:BF:B7:C4:B1:13:14:18:9E:73:6B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7db92d9a-373a-3f44-8da9-e793b2713d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6f:11:cb:20:2c:08:5d:c6:15:a8:db:a9:ba:de:53:0d:63: a6:5a:61:db:68:df:cb:bf:6f:4a:4f:cc:a6:7c:32:0c:f8:c5: 91:f6:5e:0b:22:19:f3:a1:5b:fd:1d:73:91:21:72:5c:9a:87: e0:e2:e3:52:d3:ab:ea:92:82:0e:01:ab:b5:3f:46:c7:7d:8a: 15:58:33:65:a7:94:f3:97:8f:60:31:62:9a:e0:26:60:93:04: 42:98:aa:c2:e4:d6:f3:83:4f:5d:49:f3:0c:57:49:57:4b:5a: e6:f2:8c:3f:9d:9c:c6:5d:04:6a:dc:54:8c:7f:38:60:3a:da: f0:a9:b1:94:54:de:9d:be:db:ad:ad:3a:32:79:77:a6:e2:20: 10:a0:12:72:ae:e4:e0:c2:4b:89:db:22:c3:7c:12:fe:22:77: 80:a8:ba:a8:99:19:cb:cf:24:e7:81:bf:36:72:be:14:cf:eb: a5:7c:93:e6:32:44:26:09:66:bc:4e:49:3c:2f:33:3b:62:41: fd:33:f9:71:f8:c9:44:73:f6:35:4b:e2:76:94:cc:f1:a0:f6: 3a:ef:d2:88:62:2a:46:31:e8:9a:e5:ba:a7:48:07:60:7b:a1: 49:e9:dd:9f:4a:77:20:ef:d4:22:3c:9d:24:91:d4:32:59:46: 1a:4b:71:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28n23Wr3dmdrUzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZjZhOTZmNjYtM2NhYy00MWQ2LThlMWYtM2I3YTdmMmEzMzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAW51TLT2Bj2nnO02LOTz1eLhrlfqWORmHfu DkxtoY27jLDyOBxAtDhqxhjh5P81QKsPYYpjlSqWEdLddI6poHZJHNCpNoGCdcbA 6x4AcK/K62OWTc1It7XNUbq94IaS0cqId5TiXQExVstGrCFPPd81fEnS0Qn3G2nf BsuzFlMAwx8bgCYViYb9oFFvPTamZPnHOOnDdlEkbU+FjcJN9pkwN7auThxptC+v ZBMUQSrbd4a7NIGBDgEAWt5yOzsQZ/irkg2HsHRO60oa58lBwpj2sqhWn61Qr6Pg FoPDeGkhbMKgsTcgOoX97x9JhrBenHO85FDpxilBRWzEsj6GRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1QoFqSk9Otar+3xLETFBiec2sjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2RiOTJkOWEtMzczYS0z ZjQ0LThkYTktZTc5M2IyNzEzZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNzsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElvEcsgLAhdxhWo26m63lMNY6ZaYdto38u/b0pPzKZ8Mgz4xZH2Xgsi GfOhW/0dc5Ehclyah+Di41LTq+qSgg4Bq7U/Rsd9ihVYM2WnlPOXj2AxYprgJmCT BEKYqsLk1vODT11J8wxXSVdLWubyjD+dnMZdBGrcVIx/OGA62vCpsZRU3p2+262t OjJ5d6biIBCgEnKu5ODCS4nbIsN8Ev4id4CouqiZGcvPJOeBvzZyvhTP66V8k+Yy RCYJZrxOSTwvMztiQf0z+XH4yURz9jVL4naUzPGg9jrv0ohiKkYx6JrluqdIB2B7 oUnp3Z9KdyDv1CI8nSSR1DJZRhpLccc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:27:11 2025 by rpki-client