$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/94dababd-5dcf-3724-b2de-8ff0ff6a925c.roa File: 94dababd-5dcf-3724-b2de-8ff0ff6a925c.roa (raw, json) Hash identifier: 3Z8gPW7g1bImktII6W2hfO+dh0Pw+3xvmOO+4CCogXo= Subject key identifier: 91:A4:D4:6E:CB:E4:92:F3:17:06:F4:91:53:A8:F0:3B:A5:79:AF:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F296A4F86A9BBD5365CF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/94dababd-5dcf-3724-b2de-8ff0ff6a925c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.66.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:96:a4:f8:6a:9b:bd:53:65:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=22659a61-d7bd-4040-9422-d4c67466f2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:3d:68:18:7d:54:f8:10:08:fd:d9:34:5b: b9:ee:d9:bb:6e:e6:1e:00:d1:1f:e9:06:84:69:86: 87:58:9e:8d:08:cc:23:b6:42:a1:76:81:0d:f2:ee: fc:99:ca:b7:76:a6:c2:04:10:6b:a0:28:8e:9d:fc: d0:06:a8:2e:e3:63:6f:25:f7:d3:19:90:75:e0:14: 4d:20:6a:f5:1a:eb:33:a9:b5:08:aa:55:40:3d:fe: 88:d3:30:48:e2:35:85:6a:6e:96:ba:8e:76:8a:87: 95:6a:0b:71:1b:75:22:70:78:82:c6:42:24:f3:1d: 08:65:e7:5f:82:1b:04:aa:64:98:b6:4f:ad:84:56: 08:e4:c5:be:27:92:8d:b2:f5:68:78:c1:f2:cc:9a: 28:b0:1e:3c:3e:02:5a:3b:6c:36:4a:f1:15:e2:8f: c1:83:70:b8:db:f2:c1:61:b4:67:fe:e6:eb:0f:3d: 75:ee:36:54:23:5f:6c:1b:a8:93:0b:8e:cf:74:8a: b7:3c:1c:5a:64:43:8a:7f:2c:f6:3d:04:94:25:eb: 6f:38:2a:ef:72:83:31:3a:17:c1:b8:33:16:9c:fc: 3f:9b:be:06:06:d2:75:d5:46:2a:07:dc:9c:6f:58: eb:73:1e:cd:ae:e9:ec:26:d8:9c:bf:e8:36:52:96: 59:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:D4:6E:CB:E4:92:F3:17:06:F4:91:53:A8:F0:3B:A5:79:AF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/94dababd-5dcf-3724-b2de-8ff0ff6a925c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:97:eb:10:44:b6:10:75:3a:d6:e8:21:7a:b3:31:3a:f6:9f: ca:5b:75:d1:c5:d0:c2:98:b3:13:98:62:6d:03:ff:96:88:4b: e7:97:38:7b:ee:31:68:4d:64:81:f5:69:36:73:84:6c:ed:90: 3d:49:29:8c:21:42:76:66:09:21:79:0a:52:f8:ad:a5:b4:80: 4f:84:f3:e5:e4:9f:d4:5b:73:20:04:64:91:5c:73:b3:5d:5b: 83:61:83:82:f2:8e:77:c2:e5:a0:b8:c1:3d:ed:19:57:02:68: 91:c4:72:2c:e6:05:5d:d9:b4:45:2a:22:7f:79:3d:12:3c:90: d2:df:6d:75:c5:82:0e:2e:0e:26:da:b2:78:be:9b:24:f8:a1: 62:10:0b:38:95:76:5c:bb:2d:a7:bf:5d:88:2a:84:61:1e:d3: 1d:f2:66:1b:49:3d:73:e1:c2:c9:58:07:c2:7e:b1:5c:80:c1: c0:33:13:62:e0:bd:2e:7b:a2:0f:24:99:a5:89:bb:04:76:65: 2f:a7:1a:ad:70:72:41:e2:ea:d1:c3:45:64:cc:40:1d:52:8f: fc:23:45:21:88:ea:52:aa:3d:d1:74:23:41:63:59:5c:6e:f1: 1c:b4:c3:25:d8:83:2d:56:ce:55:32:db:0b:ca:75:98:eb:b2: 6a:22:63:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pak+GqbvVNlzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjI2NTlhNjEtZDdiZC00MDQwLTk0MjItZDRjNjc0NjZmMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybQ9aBh9VPgQCP3ZNFu57tm7buYeANEf6QaE aYaHWJ6NCMwjtkKhdoEN8u78mcq3dqbCBBBroCiOnfzQBqgu42NvJffTGZB14BRN IGr1GuszqbUIqlVAPf6I0zBI4jWFam6Wuo52ioeVagtxG3UicHiCxkIk8x0IZedf ghsEqmSYtk+thFYI5MW+J5KNsvVoeMHyzJoosB48PgJaO2w2SvEV4o/Bg3C42/LB YbRn/ubrDz117jZUI19sG6iTC47PdIq3PBxaZEOKfyz2PQSUJetvOCrvcoMxOhfB uDMWnPw/m74GBtJ11UYqB9ycb1jrcx7NrunsJticv+g2UpZZxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGk1G7L5JLzFwb0kVOo8Dulea8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTRkYWJhYmQtNWRjZi0z NzI0LWIyZGUtOGZmMGZmNmE5MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKX6xBEthB1OtboIXqzMTr2n8pbddHF0MKYsxOYYm0D/5aIS+eXOHvu MWhNZIH1aTZzhGztkD1JKYwhQnZmCSF5ClL4raW0gE+E8+Xkn9RbcyAEZJFcc7Nd W4Nhg4LyjnfC5aC4wT3tGVcCaJHEcizmBV3ZtEUqIn95PRI8kNLfbXXFgg4uDiba sni+myT4oWIQCziVdly7Lae/XYgqhGEe0x3yZhtJPXPhwslYB8J+sVyAwcAzE2Lg vS57og8kmaWJuwR2ZS+nGq1wckHi6tHDRWTMQB1Sj/wjRSGI6lKqPdF0I0FjWVxu 8Ry0wyXYgy1WzlUy2wvKdZjrsmoiY/s= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:00 2025 by rpki-client