$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5260d2e-ace8-3631-a650-0ae9a41e520c.roa File: a5260d2e-ace8-3631-a650-0ae9a41e520c.roa (raw, json) Hash identifier: rZM30cUmnAFjzrpO6RqXZTGOA/jvN4wdHCWutmVxBes= Subject key identifier: AB:BC:51:9C:9F:FE:CE:F3:AD:37:1A:96:1E:21:31:CB:0B:5C:F7:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24AC34DF446CA80E675C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5260d2e-ace8-3631-a650-0ae9a41e520c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4a:c3:4d:f4:46:ca:80:e6:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=9ced7606-3a64-488b-ac7b-48f1d900f34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:68:43:fc:72:56:f7:d3:b5:a2:0b:75:bc: ea:81:5d:65:51:40:85:fc:24:41:6e:75:97:b2:a3: 6d:5d:9e:26:a5:f2:46:fc:a2:47:91:c7:1d:b5:51: ab:5a:c5:3d:02:94:2a:5c:aa:34:df:99:50:d9:bc: b0:27:21:0a:79:f9:e9:ed:19:fa:c9:5f:3b:34:6b: cc:e8:d7:23:7a:48:50:90:cc:2f:63:ba:ee:e3:fc: d7:e2:f7:63:cf:12:24:33:2d:85:f8:e5:38:e0:d3: a2:de:ab:e6:b2:b6:c6:0d:b5:f8:f4:0f:2f:2d:1a: c6:74:f5:33:e2:7b:2b:24:e0:27:d5:ec:2b:b7:c6: f3:80:16:3e:cb:5a:3b:06:3e:1b:6b:20:16:34:3d: f5:09:97:31:eb:21:86:a4:73:90:00:a6:f0:74:29: 7b:a2:f5:ce:73:68:8b:9d:b9:48:ec:64:f7:b5:4b: 43:27:cf:68:19:58:8a:85:af:85:73:2a:bf:03:8f: c1:50:f6:92:71:28:b1:35:54:a5:43:92:ce:c7:d7: e0:f1:ec:fa:d3:e6:dc:a4:a2:22:8c:14:45:37:03: 34:31:7c:18:10:b8:f9:06:24:a6:ee:f2:00:6e:28: 56:52:4b:2f:6a:1e:e2:c1:f7:24:18:32:2b:c1:e6: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BC:51:9C:9F:FE:CE:F3:AD:37:1A:96:1E:21:31:CB:0B:5C:F7:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5260d2e-ace8-3631-a650-0ae9a41e520c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:dd:97:8f:77:f8:5f:65:d9:f8:a7:4a:e2:a1:5a:6f:88:e2: b2:dd:65:77:37:40:38:e6:59:e9:ff:3d:a4:3c:28:9a:60:19: ef:7c:c2:fa:ea:e3:c6:dc:55:d1:1f:37:14:b1:e8:06:d7:69: c2:fc:c7:47:8e:04:5d:f7:54:8d:7a:a9:77:55:c5:d6:8f:e4: 7f:d2:5e:03:26:d8:8e:97:d2:cc:6d:d5:fd:19:7a:6e:2d:dd: 9a:1d:32:0a:03:1b:14:aa:81:d1:24:ea:52:c9:26:2c:a0:1e: 4b:1f:78:00:94:6e:ef:5b:ef:67:bb:58:f4:7c:03:6d:eb:4d: 52:64:85:b2:51:0b:89:34:d8:49:3e:bd:a4:66:78:24:ba:e1: e2:f8:6e:08:94:a6:d4:8b:7c:fd:bf:a2:63:6e:3b:b9:4e:39: de:0e:1f:04:3d:cd:a5:a2:d3:2f:09:8b:59:5c:90:bd:01:ec: 59:bc:e8:81:94:55:8a:6b:01:cb:12:db:40:d5:07:70:5d:6f: 4c:05:f0:a7:40:b1:91:a9:8c:a5:02:e2:2c:4e:b5:ad:93:24: 28:4c:03:1a:33:d0:f3:6e:0c:6d:93:aa:2d:be:da:85:3e:24: ac:00:69:5a:2a:79:2d:af:c6:08:05:be:7c:07:ea:d7:8d:8f: cf:1f:8b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28krDTfRGyoDmdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWNlZDc2MDYtM2E2NC00ODhiLWFjN2ItNDhmMWQ5MDBmMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixpoQ/xyVvfTtaILdbzqgV1lUUCF/CRBbnWX sqNtXZ4mpfJG/KJHkccdtVGrWsU9ApQqXKo035lQ2bywJyEKefnp7Rn6yV87NGvM 6NcjekhQkMwvY7ru4/zX4vdjzxIkMy2F+OU44NOi3qvmsrbGDbX49A8vLRrGdPUz 4nsrJOAn1ewrt8bzgBY+y1o7Bj4bayAWND31CZcx6yGGpHOQAKbwdCl7ovXOc2iL nblI7GT3tUtDJ89oGViKha+Fcyq/A4/BUPaScSixNVSlQ5LOx9fg8ez60+bcpKIi jBRFNwM0MXwYELj5BiSm7vIAbihWUksvah7iwfckGDIrweaCxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKu8UZyf/s7zrTcalh4hMcsLXPeQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTUyNjBkMmUtYWNlOC0z NjMxLWE2NTAtMGFlOWE0MWU1MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrdl493+F9l2finSuKhWm+I4rLdZXc3QDjmWen/PaQ8KJpgGe98wvrq 48bcVdEfNxSx6AbXacL8x0eOBF33VI16qXdVxdaP5H/SXgMm2I6X0sxt1f0Zem4t 3ZodMgoDGxSqgdEk6lLJJiygHksfeACUbu9b72e7WPR8A23rTVJkhbJRC4k02Ek+ vaRmeCS64eL4bgiUptSLfP2/omNuO7lOOd4OHwQ9zaWi0y8Ji1lckL0B7Fm86IGU VYprAcsS20DVB3Bdb0wF8KdAsZGpjKUC4ixOta2TJChMAxoz0PNuDG2Tqi2+2oU+ JKwAaVoqeS2vxggFvnwH6teNj88fi6U= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:30 2025 by rpki-client