$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a55f4a51-3348-33ef-9b47-de09417b2735.roa File: a55f4a51-3348-33ef-9b47-de09417b2735.roa (raw, json) Hash identifier: g6NN304veJQj3qkbmEye1AwBtF1uCAkrTvD/3WO4Qvc= Subject key identifier: 92:7F:29:7B:58:23:99:6B:36:8C:C7:84:A3:17:6E:C7:BC:09:38:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28B7F5825E0232DAB4F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a55f4a51-3348-33ef-9b47-de09417b2735.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8b:7f:58:25:e0:23:2d:ab:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=5ceaccd0-0b3e-4053-a2a6-005b284f7208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:3b:f1:41:13:d5:26:c9:29:6e:5a:f4:1b: 48:ba:7e:72:b1:0b:32:78:86:83:83:9e:d4:e1:14: ce:b1:fb:1b:89:c7:a1:77:a6:82:89:75:77:52:60: a5:78:0c:6e:54:cd:04:67:1c:3a:fa:a2:9f:f1:3f: f1:57:14:ee:87:82:51:48:3e:8a:51:7b:40:c2:81: bd:6b:7e:d3:12:ca:d9:0a:c3:5c:16:89:b5:89:53: 7a:f1:dd:83:0c:5c:29:07:ed:63:7a:92:f1:34:df: 7a:fe:56:4b:e3:ef:11:7a:5b:b1:ee:ca:a9:9d:00: d2:27:c2:bf:d1:99:07:b8:8e:73:06:6d:59:6e:26: d2:b2:3d:c2:01:68:f5:f6:bc:8a:30:c8:fd:02:db: 35:29:98:dc:66:64:bd:60:7d:d2:4b:a0:a6:6e:09: 35:04:ed:6b:75:7e:df:5d:0b:50:a9:7b:e2:3c:d7: ca:01:11:eb:c4:b8:2b:a7:a1:d3:56:90:64:e8:ce: 0e:4c:58:0a:73:69:41:4d:9f:c0:85:ca:fc:d7:81: 24:38:ec:66:c1:f1:e3:0e:a4:38:b6:d9:24:d3:13: 78:1f:0b:71:db:a4:d2:26:a9:06:ce:f3:f2:28:85: bb:ce:79:4e:e5:c7:76:c3:d6:7d:40:2a:43:a1:38: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7F:29:7B:58:23:99:6B:36:8C:C7:84:A3:17:6E:C7:BC:09:38:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a55f4a51-3348-33ef-9b47-de09417b2735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:05:5b:87:8a:c6:32:b9:d5:f9:66:e7:c4:bc:c4:29:bc:98: c6:4b:06:ae:19:c0:16:f5:b4:e0:c3:29:cd:4d:2b:dd:3e:00: 83:5d:01:08:02:a6:8b:52:c8:be:b4:76:6e:51:8e:55:3c:a4: 85:67:79:25:00:93:65:8b:a0:db:f2:fb:92:26:1f:a9:89:d4: 3b:a1:66:f4:1a:12:b8:96:2e:44:c4:8c:b1:6b:67:01:b0:e7: ff:79:a1:b1:2c:27:e2:96:d9:c0:d9:95:f4:ee:2f:e6:7c:ed: dc:7e:e7:a8:e7:23:59:e0:11:3d:b4:ff:5c:73:52:a0:bf:d8: 8a:6f:b2:06:3f:29:f1:89:80:be:33:82:74:e2:16:a9:8e:f8: 87:4e:ef:2d:a1:a7:d8:94:62:e3:b1:61:bf:5c:b0:ab:23:48: 54:39:37:01:ec:64:4a:eb:95:26:e4:6b:6b:ec:ac:c9:00:a8: 34:24:45:38:a5:bd:df:20:2c:e8:5b:1d:fe:98:88:4d:d6:f2: 0b:27:85:aa:3a:3f:87:b1:99:fe:ab:2e:a4:86:a0:6a:88:28: b9:77:9c:06:14:34:89:21:d2:86:3e:b1:d6:7b:cb:a2:de:15: 22:ec:f3:c6:7c:c6:8b:d4:e9:eb:a4:f7:a8:eb:78:3e:51:0c: 75:05:11:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ot/WCXgIy2rT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NWNlYWNjZDAtMGIzZS00MDUzLWEyYTYtMDA1YjI4NGY3MjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBE78UET1SbJKW5a9BtIun5ysQsyeIaDg57U 4RTOsfsbicehd6aCiXV3UmCleAxuVM0EZxw6+qKf8T/xVxTuh4JRSD6KUXtAwoG9 a37TEsrZCsNcFom1iVN68d2DDFwpB+1jepLxNN96/lZL4+8Relux7sqpnQDSJ8K/ 0ZkHuI5zBm1ZbibSsj3CAWj19ryKMMj9Ats1KZjcZmS9YH3SS6Cmbgk1BO1rdX7f XQtQqXviPNfKARHrxLgrp6HTVpBk6M4OTFgKc2lBTZ/Ahcr814EkOOxmwfHjDqQ4 ttkk0xN4Hwtx26TSJqkGzvPyKIW7znlO5cd2w9Z9QCpDoTjR/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ/KXtYI5lrNozHhKMXbse8CThXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTU1ZjRhNTEtMzM0OC0z M2VmLTliNDctZGUwOTQxN2IyNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNz0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0FW4eKxjK51flm58S8xCm8mMZLBq4ZwBb1tODDKc1NK90+AINdAQgC potSyL60dm5RjlU8pIVneSUAk2WLoNvy+5ImH6mJ1DuhZvQaEriWLkTEjLFrZwGw 5/95obEsJ+KW2cDZlfTuL+Z87dx+56jnI1ngET20/1xzUqC/2IpvsgY/KfGJgL4z gnTiFqmO+IdO7y2hp9iUYuOxYb9csKsjSFQ5NwHsZErrlSbka2vsrMkAqDQkRTil vd8gLOhbHf6YiE3W8gsnhao6P4exmf6rLqSGoGqIKLl3nAYUNIkh0oY+sdZ7y6Le FSLs88Z8xovU6euk96jreD5RDHUFEQI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:54:21 2025 by rpki-client