$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82d420ba-9542-30ae-83e4-929e93b4fbde.roa File: 82d420ba-9542-30ae-83e4-929e93b4fbde.roa (raw, json) Hash identifier: LFhRy7Zc2i60z9NjLW/3dRqwwdXi+8f58IFuAfzwYlc= Subject key identifier: 80:DD:AD:A1:B6:48:CD:CD:05:ED:CA:4B:92:C6:62:48:70:63:75:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27F3356B590E00F90B5E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82d420ba-9542-30ae-83e4-929e93b4fbde.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7f:33:56:b5:90:e0:0f:90:b5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c84d4514-10a1-4eee-903e-a2d10ea35b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:d4:1c:73:0c:51:41:5f:0b:8f:21:40:af: f7:a8:39:4e:c5:89:a3:a3:b0:ea:1a:58:a0:3e:c5: 1f:e0:31:71:5a:5c:0e:14:64:f3:6c:e8:2c:85:63: 96:87:17:43:dc:55:60:7b:f4:21:19:29:3a:db:5f: 9d:a8:d5:0e:44:2b:93:aa:eb:ba:17:e4:28:de:12: 26:d7:76:a3:fd:be:f0:8a:ae:37:2c:ce:e3:d5:f2: 20:f9:21:84:91:80:fd:2f:09:86:fe:d1:86:3e:f2: 1d:bd:c4:91:fc:cc:ff:19:7c:37:e1:8d:ca:13:f0: 44:25:3b:bc:a0:87:2a:52:88:81:de:6f:63:ba:15: 91:6e:ac:f1:5d:a5:02:d4:5b:cb:b9:e0:5e:00:0a: bc:52:4a:00:ba:96:5a:2d:c9:7d:18:8b:32:ed:e9: 9f:d9:c1:bf:ae:ab:84:fc:f4:5c:90:87:84:98:1c: 56:1c:91:dd:3f:ce:43:8b:d5:cd:f1:ca:40:ad:53: 65:3d:b1:72:6c:02:8d:b0:55:30:85:0c:29:ec:a4: fd:7e:21:a5:6d:54:06:0d:89:a3:bb:22:e4:31:dd: bd:ee:67:c1:f7:5f:8a:5a:98:d7:36:bb:82:f5:80: 01:0c:a3:d6:9f:41:4f:4d:bc:59:ef:d3:51:22:92: 46:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DD:AD:A1:B6:48:CD:CD:05:ED:CA:4B:92:C6:62:48:70:63:75:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82d420ba-9542-30ae-83e4-929e93b4fbde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c2:68:76:96:89:c5:2b:5c:4d:6e:07:5a:0a:1f:cf:66:53: 32:2e:4c:d7:b2:3e:4c:ac:7d:b0:8e:51:56:aa:b9:20:62:a6: 02:b2:6e:a2:8f:8b:dc:5a:30:c4:41:ad:6d:f8:63:77:d7:ba: 7b:15:6d:43:9b:f1:8d:d3:91:af:54:ca:90:06:f8:e1:49:6f: 24:02:e8:0b:3d:4e:1a:6e:90:c6:fb:ff:24:18:d1:22:36:82: 27:3b:5d:fa:7d:d8:45:31:e3:5d:0b:72:e0:d1:40:37:09:b0: a8:40:34:5a:e8:c2:92:57:bc:9e:73:59:a1:e9:77:c7:8e:ea: 6d:68:e0:a2:56:23:77:c6:24:de:75:d0:ce:3e:4c:66:03:47: 6b:5a:4a:2a:87:ec:c3:96:5d:6d:f2:67:8e:6e:48:ae:73:e3: f1:60:fd:89:1c:79:67:c9:a2:9f:4f:4e:98:4c:b8:9a:d1:ea: 6d:45:28:07:20:9b:12:a5:1e:08:d7:d1:ba:09:76:51:7b:50: ab:75:b0:ae:dd:d7:e5:ec:d7:d1:80:1b:0a:f3:36:e9:76:88: 20:65:7e:3c:ab:69:bc:59:b0:69:e6:f5:c7:06:65:07:96:17: 95:68:26:66:0f:83:38:4c:b0:a0:8f:9e:e0:94:a7:10:c1:f8: a9:cc:52:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28n8zVrWQ4A+QteAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Yzg0ZDQ1MTQtMTBhMS00ZWVlLTkwM2UtYTJkMTBlYTM1YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr7UHHMMUUFfC48hQK/3qDlOxYmjo7DqGlig PsUf4DFxWlwOFGTzbOgshWOWhxdD3FVge/QhGSk621+dqNUORCuTquu6F+Qo3hIm 13aj/b7wiq43LM7j1fIg+SGEkYD9LwmG/tGGPvIdvcSR/Mz/GXw34Y3KE/BEJTu8 oIcqUoiB3m9juhWRbqzxXaUC1FvLueBeAAq8UkoAupZaLcl9GIsy7emf2cG/rquE /PRckIeEmBxWHJHdP85Di9XN8cpArVNlPbFybAKNsFUwhQwp7KT9fiGlbVQGDYmj uyLkMd297mfB91+KWpjXNruC9YABDKPWn0FPTbxZ79NRIpJGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDdraG2SM3NBe3KS5LGYkhwY3X6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODJkNDIwYmEtOTU0Mi0z MGFlLTgzZTQtOTI5ZTkzYjRmYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjCaHaWicUrXE1uB1oKH89mUzIuTNeyPkysfbCOUVaquSBipgKybqKP i9xaMMRBrW34Y3fXunsVbUOb8Y3Tka9UypAG+OFJbyQC6As9ThpukMb7/yQY0SI2 gic7Xfp92EUx410LcuDRQDcJsKhANFrowpJXvJ5zWaHpd8eO6m1o4KJWI3fGJN51 0M4+TGYDR2taSiqH7MOWXW3yZ45uSK5z4/Fg/YkceWfJop9PTphMuJrR6m1FKAcg mxKlHgjX0boJdlF7UKt1sK7d1+Xs19GAGwrzNul2iCBlfjyrabxZsGnm9ccGZQeW F5VoJmYPgzhMsKCPnuCUpxDB+KnMUl4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:39 2025 by rpki-client