$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/834bf97d-cf46-3dee-aec2-cd5778b359a7.roa File: 834bf97d-cf46-3dee-aec2-cd5778b359a7.roa (raw, json) Hash identifier: CnquGi1uaPqcGBDUn+uh78+mzjZKMJiGkjbvPX1e72w= Subject key identifier: CC:0B:63:D1:92:72:32:C2:BC:38:51:1C:45:B3:F6:2B:C1:29:42:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29D6868CCD7F965AFD0D0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/834bf97d-cf46-3dee-aec2-cd5778b359a7.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.195.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9d:68:68:cc:d7:f9:65:af:d0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=525407d1-8078-4d38-870f-856075807178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:db:73:5f:80:ed:66:81:76:a2:74:fa:b5: d4:d4:ec:8b:d1:b7:47:42:85:19:e9:82:cc:8a:d5: 1b:21:ec:a0:16:e5:3d:0b:b1:16:23:a5:85:8a:43: 52:c1:25:63:c1:9b:7f:5a:50:74:71:56:28:cd:2b: 5f:26:cf:63:3c:fe:ef:37:ba:91:5d:16:e3:3f:c3: 97:43:21:c7:8f:c9:dc:8b:40:0f:36:22:cd:7c:9f: 97:6f:75:ad:56:1d:5b:55:75:06:13:e8:13:86:d1: 1a:95:61:c0:8e:80:43:59:8b:9e:b7:f6:c7:75:b1: f8:ae:89:52:37:f3:78:72:13:b6:d0:a8:32:67:55: ea:73:b0:51:70:6a:4c:72:25:65:92:4d:eb:59:5b: 87:35:43:97:33:f0:b1:41:90:22:60:0b:cb:55:55: 08:57:54:78:27:1c:90:ec:4c:2b:5d:db:f7:a5:48: a4:a0:a0:e4:5f:06:cb:2c:65:80:8d:9f:74:64:9d: 1a:7e:4a:bc:b9:d0:aa:80:a5:1a:7c:1f:15:63:19: 86:90:c9:34:82:80:d3:65:3e:a1:18:71:28:95:c5: de:9c:a6:68:45:58:ad:da:bd:9e:1f:24:84:47:d8: 84:80:ac:a7:a6:b9:8a:a1:7f:7b:71:c7:e2:38:60: a8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:63:D1:92:72:32:C2:BC:38:51:1C:45:B3:F6:2B:C1:29:42:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/834bf97d-cf46-3dee-aec2-cd5778b359a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.195.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5c:9a:8c:c8:d3:83:d2:23:ab:af:f9:15:3c:69:97:cd:cc: 5d:8c:4b:03:8d:67:6f:e9:c3:43:56:dd:23:04:e9:ec:c7:1f: cc:4f:17:65:a8:f2:31:85:72:d1:c4:51:31:5d:91:fb:e8:74: 80:da:71:9b:ba:1c:54:33:b0:30:48:41:d1:f5:96:34:30:75: d2:67:17:5d:ed:4f:91:c1:a2:b6:3f:b6:1e:08:62:86:df:99: 70:2f:f3:dd:08:c4:62:e2:2f:5b:f0:f1:b2:bd:2f:ec:dc:33: cb:24:9d:58:4a:43:45:e7:f5:81:65:32:b8:e3:2e:1b:7a:5d: 0a:9c:5b:ff:e9:ee:53:06:c3:e7:fb:74:29:bd:0b:02:62:fa: 4b:a7:74:34:07:29:b9:93:c7:4f:2f:82:a6:e0:33:b2:1a:3b: 41:7e:dc:cc:e2:5b:60:c2:75:a3:25:e8:43:4c:3a:95:68:6b: 30:1c:5e:ad:71:43:ab:d9:17:a3:d6:79:9d:27:83:86:d8:b5: d9:50:82:26:13:25:81:d2:29:c5:0b:cb:34:53:73:53:7b:f4: 1f:cd:ce:0e:00:86:31:e1:34:12:26:6a:43:05:31:a0:bb:3c: eb:b1:1f:12:f2:a6:cf:7d:57:cd:2b:f2:00:e2:fb:8d:42:83: 7f:2f:59:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28p1oaMzX+WWv0NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTI1NDA3ZDEtODA3OC00ZDM4LTg3MGYtODU2MDc1ODA3MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRbbc1+A7WaBdqJ0+rXU1OyL0bdHQoUZ6YLM itUbIeygFuU9C7EWI6WFikNSwSVjwZt/WlB0cVYozStfJs9jPP7vN7qRXRbjP8OX QyHHj8nci0APNiLNfJ+Xb3WtVh1bVXUGE+gThtEalWHAjoBDWYuet/bHdbH4rolS N/N4chO20KgyZ1Xqc7BRcGpMciVlkk3rWVuHNUOXM/CxQZAiYAvLVVUIV1R4JxyQ 7EwrXdv3pUikoKDkXwbLLGWAjZ90ZJ0afkq8udCqgKUafB8VYxmGkMk0goDTZT6h GHEolcXenKZoRVit2r2eHySER9iEgKynprmKoX97ccfiOGCohQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwLY9GScjLCvDhRHEWz9ivBKUKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODM0YmY5N2QtY2Y0Ni0z ZGVlLWFlYzItY2Q1Nzc4YjM1OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdcmozI04PSI6uv+RU8aZfNzF2MSwONZ2/pw0NW3SME6ezHH8xPF2Wo 8jGFctHEUTFdkfvodIDacZu6HFQzsDBIQdH1ljQwddJnF13tT5HBorY/th4IYobf mXAv890IxGLiL1vw8bK9L+zcM8sknVhKQ0Xn9YFlMrjjLht6XQqcW//p7lMGw+f7 dCm9CwJi+kundDQHKbmTx08vgqbgM7IaO0F+3MziW2DCdaMl6ENMOpVoazAcXq1x Q6vZF6PWeZ0ng4bYtdlQgiYTJYHSKcULyzRTc1N79B/Nzg4AhjHhNBImakMFMaC7 POuxHxLyps99V80r8gDi+41Cg38vWS4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:33:30 2025 by rpki-client