$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5c3c0c0-22dc-3567-bb7d-a9ebf9813125.roa File: a5c3c0c0-22dc-3567-bb7d-a9ebf9813125.roa (raw, json) Hash identifier: VfgMQNK4c38ACkC4UkEq630ON6qDTKJLuMGYmbYFu2g= Subject key identifier: 29:E5:46:F8:8C:9B:3B:1A:9E:FF:C0:70:BE:DE:90:89:85:33:F3:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21C70D8914F7DDAF17280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5c3c0c0-22dc-3567-bb7d-a9ebf9813125.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.221.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1c:70:d8:91:4f:7d:da:f1:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a40449e2-910e-4cd4-b13e-d74a5d3ae39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:1b:d6:da:65:f6:a1:97:27:d2:16:03:aa: 5a:e8:e2:4d:ba:e0:4c:bb:96:de:9a:ac:96:a9:e1: f0:b0:00:df:67:1b:7f:e5:b5:55:4e:7b:4a:be:f3: a9:7b:cb:e1:ee:a4:80:e3:aa:20:5d:69:43:de:2e: f1:8e:c1:ae:bd:b4:7c:35:5e:83:90:24:2c:7b:0e: 32:17:52:2e:d0:f1:da:47:25:ef:fe:21:55:e3:54: 84:38:19:b9:26:09:ee:13:48:8a:76:1f:5f:73:5c: 23:ef:2d:7d:c3:97:6c:ee:59:44:e4:80:50:93:dc: 82:0e:f3:9a:7d:d6:37:26:4c:0e:f4:ab:9f:34:db: a7:2d:47:60:1a:69:c5:85:55:56:76:44:a4:86:b3: 7b:88:08:41:68:73:bf:a9:34:7f:c0:e3:df:da:7e: 81:87:bf:a6:71:c2:19:e5:ff:83:b7:64:68:bd:e5: a4:43:37:0c:ce:9b:64:7d:c0:7b:24:25:62:5e:df: 49:4a:62:bc:5f:96:48:b4:3f:b3:4b:db:ec:f7:41: bb:3f:91:32:c6:18:bf:e4:51:6c:fc:f9:d5:30:a3: 62:78:9d:d4:6c:09:62:91:2b:11:5d:01:8f:7c:97: 4b:55:4b:57:e4:93:b1:11:95:1b:9b:86:2e:ac:a1: e1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:46:F8:8C:9B:3B:1A:9E:FF:C0:70:BE:DE:90:89:85:33:F3:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5c3c0c0-22dc-3567-bb7d-a9ebf9813125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bb:e6:11:c3:0c:4a:11:57:26:4c:cc:e6:95:16:02:9a:b6: 70:c0:72:7e:96:ba:33:46:b4:ef:d1:08:da:3a:51:b9:1d:08: f1:9d:82:c3:5e:23:fd:69:49:76:ec:c1:51:70:cb:2c:eb:5a: ff:89:3c:4a:37:60:01:da:4a:b7:1f:5f:57:9e:5b:62:f0:28: e6:ae:98:dd:7b:c2:f3:3f:a4:75:a1:25:ec:58:e9:ed:f1:19: 88:d1:c4:a2:55:1f:eb:62:7c:3a:b4:8c:ad:50:82:cc:5c:bc: 54:6c:0a:31:27:dd:e8:ac:e1:fe:ff:78:66:68:af:18:2f:5f: 55:99:fa:0c:12:04:ed:23:bb:d4:b6:71:43:ab:35:8c:ca:2b: 43:ad:91:a9:dc:13:94:c0:ce:7c:15:55:b0:d3:31:e1:b2:8c: 3f:80:7b:51:6f:0f:45:f9:e9:19:62:50:ef:6f:d6:6b:21:e8: a1:7f:d6:73:63:22:17:b1:00:8e:dc:01:64:5c:b1:73:90:ef: ea:f0:45:f2:95:01:d1:25:26:da:14:d6:6d:c2:16:8a:0d:5a: 0c:49:6d:84:ae:4d:f2:fa:c7:75:cd:a4:8a:6e:dd:5e:e4:d4: 3b:7e:c0:81:08:44:ec:a4:b5:55:b3:ef:44:ab:72:69:82:8e: 23:e7:59:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hxw2JFPfdrxcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTQwNDQ5ZTItOTEwZS00Y2Q0LWIxM2UtZDc0YTVkM2FlMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+ob1tpl9qGXJ9IWA6pa6OJNuuBMu5bemqyW qeHwsADfZxt/5bVVTntKvvOpe8vh7qSA46ogXWlD3i7xjsGuvbR8NV6DkCQsew4y F1Iu0PHaRyXv/iFV41SEOBm5JgnuE0iKdh9fc1wj7y19w5ds7llE5IBQk9yCDvOa fdY3JkwO9KufNNunLUdgGmnFhVVWdkSkhrN7iAhBaHO/qTR/wOPf2n6Bh7+mccIZ 5f+Dt2RoveWkQzcMzptkfcB7JCViXt9JSmK8X5ZItD+zS9vs90G7P5Eyxhi/5FFs /PnVMKNieJ3UbAlikSsRXQGPfJdLVUtX5JOxEZUbm4YurKHhXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnlRviMmzsanv/AcL7ekImFM/MxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTVjM2MwYzAtMjJkYy0z NTY3LWJiN2QtYTllYmY5ODEzMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy75hHDDEoRVyZMzOaVFgKatnDAcn6WujNGtO/RCNo6UbkdCPGdgsNe I/1pSXbswVFwyyzrWv+JPEo3YAHaSrcfX1eeW2LwKOaumN17wvM/pHWhJexY6e3x GYjRxKJVH+tifDq0jK1QgsxcvFRsCjEn3eis4f7/eGZorxgvX1WZ+gwSBO0ju9S2 cUOrNYzKK0OtkancE5TAznwVVbDTMeGyjD+Ae1FvD0X56RliUO9v1msh6KF/1nNj IhexAI7cAWRcsXOQ7+rwRfKVAdElJtoU1m3CFooNWgxJbYSuTfL6x3XNpIpu3V7k 1Dt+wIEIROyktVWz70SrcmmCjiPnWfs= -----END CERTIFICATE-----Generated at Thu Oct 16 01:33:46 2025 by rpki-client