$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/854ffdc2-cd12-30b8-ae67-d408e0a3c989.roa File: 854ffdc2-cd12-30b8-ae67-d408e0a3c989.roa (raw, json) Hash identifier: Z63iq9ucMC3I59goZlGHy4jj7jiSwRd/CFxIj8+rUpQ= Subject key identifier: 5D:76:B7:10:F4:DD:EA:7A:96:CF:AA:15:9A:97:7B:5E:85:D7:56:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20333029416BF7937D940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/854ffdc2-cd12-30b8-ae67-d408e0a3c989.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:03:33:02:94:16:bf:79:37:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a262735a-3f9e-4212-8e8a-d24b0942d5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:bc:b9:a7:2b:2f:c7:07:6c:e0:77:e7:58: 0d:81:73:de:8b:07:f0:a5:b0:4c:a1:77:5b:7e:53: 35:10:ee:8e:82:fc:62:29:da:1c:0a:f7:0b:7e:b3: 6a:91:06:3a:79:c0:34:5e:80:28:ec:d4:dd:1a:35: e5:29:90:5d:71:88:40:97:3e:71:87:cf:2d:bb:68: f4:5f:55:e8:34:86:13:49:05:01:2f:38:b6:85:b7: e1:5e:99:27:5d:84:81:37:af:4e:be:b0:e9:c0:e8: b3:fa:5a:9c:39:38:0b:2a:d0:57:57:9d:29:5d:d9: 06:6f:6e:c9:ea:ff:5b:a5:70:a0:d7:fa:cc:4d:cb: e7:b0:23:a4:ee:59:72:17:70:c6:6d:03:12:20:bd: ec:9d:7b:c5:6f:dc:dc:9a:83:56:17:db:e2:1a:46: 94:4f:29:3f:85:e1:68:58:8f:ae:f0:c9:5c:0f:4f: 35:ac:4a:c9:bd:de:40:18:26:e7:13:e3:34:6a:20: 9a:20:8f:1b:88:ba:20:e1:65:0a:b5:1d:46:c4:a0: 59:20:e9:18:52:17:77:30:ea:b6:56:8c:22:f1:28: 7a:38:f9:67:99:2a:84:3b:d5:67:05:e3:08:1e:77: 6b:cb:f8:59:ad:ea:cc:9d:d0:bb:37:32:85:38:bd: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:76:B7:10:F4:DD:EA:7A:96:CF:AA:15:9A:97:7B:5E:85:D7:56:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/854ffdc2-cd12-30b8-ae67-d408e0a3c989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ff:d6:e7:c9:5e:9d:97:dd:47:23:4d:ca:e4:6b:d3:b1:f5: f7:de:6a:cd:1e:e8:83:e0:05:61:d1:81:ef:ed:ab:de:ef:b6: 7f:ab:93:0b:76:3f:92:2f:8b:9a:22:87:17:ac:75:71:b3:d0: 42:76:be:f4:b4:0e:f8:98:41:1f:72:2d:8c:47:52:65:02:9a: 0c:b7:f6:6b:dc:95:df:8d:4e:54:11:b3:3b:b7:9f:94:c3:bb: 1f:d5:5a:31:82:bd:91:1d:55:e4:0a:95:28:39:4b:3a:de:70: f9:ea:c2:eb:56:6d:de:e4:7e:82:28:28:e9:54:b3:a2:c4:fb: b0:60:6b:78:3e:49:ea:c7:67:ea:b8:fc:01:b5:33:eb:ee:0f: 21:0c:73:09:4b:3e:5a:9c:50:e2:74:f7:19:c8:8c:d9:61:dc: 7b:45:16:18:3a:64:41:25:f5:41:4d:08:70:94:97:d9:76:6e: 58:f9:6f:3d:33:3c:25:6c:08:36:00:a0:a3:8c:10:1d:48:dc: c7:6f:45:d9:33:02:f1:d1:09:b8:68:44:22:6a:6a:51:50:88: 3f:a3:fa:16:26:01:eb:b1:ac:9d:3f:33:77:2a:2d:5e:83:63: 48:1e:58:84:fa:7d:f2:00:bb:e8:2e:b1:68:f0:cc:c6:53:89: a6:e8:69:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gMzApQWv3k32UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTI2MjczNWEtM2Y5ZS00MjEyLThlOGEtZDI0YjA5NDJkNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZO8uacrL8cHbOB351gNgXPeiwfwpbBMoXdb flM1EO6OgvxiKdocCvcLfrNqkQY6ecA0XoAo7NTdGjXlKZBdcYhAlz5xh88tu2j0 X1XoNIYTSQUBLzi2hbfhXpknXYSBN69OvrDpwOiz+lqcOTgLKtBXV50pXdkGb27J 6v9bpXCg1/rMTcvnsCOk7llyF3DGbQMSIL3snXvFb9zcmoNWF9viGkaUTyk/heFo WI+u8MlcD081rErJvd5AGCbnE+M0aiCaII8biLog4WUKtR1GxKBZIOkYUhd3MOq2 Vowi8Sh6OPlnmSqEO9VnBeMIHndry/hZrerMndC7NzKFOL19MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF12txD03ep6ls+qFZqXe16F11YCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODU0ZmZkYzItY2QxMi0z MGI4LWFlNjctZDQwOGUwYTNjOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNo0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKH/1ufJXp2X3UcjTcrka9Ox9ffeas0e6IPgBWHRge/tq97vtn+rkwt2 P5Ivi5oihxesdXGz0EJ2vvS0DviYQR9yLYxHUmUCmgy39mvcld+NTlQRszu3n5TD ux/VWjGCvZEdVeQKlSg5SzrecPnqwutWbd7kfoIoKOlUs6LE+7Bga3g+SerHZ+q4 /AG1M+vuDyEMcwlLPlqcUOJ09xnIjNlh3HtFFhg6ZEEl9UFNCHCUl9l2blj5bz0z PCVsCDYAoKOMEB1I3MdvRdkzAvHRCbhoRCJqalFQiD+j+hYmAeuxrJ0/M3cqLV6D Y0geWIT6ffIAu+gusWjwzMZTiaboaZU= -----END CERTIFICATE-----Generated at Thu Oct 16 02:04:07 2025 by rpki-client