$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a92c5102-4ece-320d-95f6-146a44b98c1e.roa File: a92c5102-4ece-320d-95f6-146a44b98c1e.roa (raw, json) Hash identifier: FNrqQUAPtCeZAaGC0eghZbPoEkxB63cw4R/Or/J7oU0= Subject key identifier: 64:B0:E2:C3:54:1A:AE:E7:E1:FE:AE:2D:BC:DF:D9:17:1A:2F:6A:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F22171D32445E256FB84E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a92c5102-4ece-320d-95f6-146a44b98c1e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.65.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:21:71:d3:24:45:e2:56:fb:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=9aff2cd5-53f4-44b4-b315-563b4db629b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:11:f0:13:b5:62:12:0f:27:0a:cd:06:a9: 77:a5:1c:ac:e2:cc:d1:fc:b7:8a:01:3b:58:80:8c: da:6b:96:36:e3:80:e7:ea:29:de:84:61:a6:94:55: ef:81:8c:48:f0:8d:32:6c:6c:f4:1e:4b:c8:7c:54: 6b:54:7a:5a:8b:d9:cc:cf:aa:95:01:dd:15:98:02: 60:88:57:c1:71:d5:39:d0:f5:ee:69:2f:2c:dd:98: 65:04:4c:20:2d:37:2d:5f:59:bb:96:ce:9f:19:28: 5e:5c:7f:52:20:eb:dd:c3:ba:df:9e:1d:9c:9a:fb: ce:9e:3a:7c:93:20:fc:dd:42:f1:05:42:3d:f8:f9: 83:f4:1f:ab:9e:2a:dc:cb:d3:80:3f:a9:a3:8f:8c: 9a:d8:be:b2:4d:2a:07:88:c8:59:0e:46:48:33:b1: 04:13:11:67:e5:2a:2f:ed:7a:fc:a0:59:b6:81:4b: 67:bc:ec:1f:2c:12:29:fa:12:5a:66:0d:13:3f:e8: 93:b3:6d:3c:51:a1:ab:56:2a:83:7a:60:6d:10:39: 48:28:a9:f1:c3:64:62:f2:6d:c1:35:2b:61:92:a9: 0b:60:54:e8:11:f3:95:9b:e7:9f:2e:22:25:48:dd: 9b:87:00:74:77:b8:2a:57:c7:76:f4:a5:9d:e5:6a: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B0:E2:C3:54:1A:AE:E7:E1:FE:AE:2D:BC:DF:D9:17:1A:2F:6A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a92c5102-4ece-320d-95f6-146a44b98c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:1d:ed:9f:6f:0d:0c:49:a2:b3:af:eb:5a:35:4c:b3:50:9e: ad:c0:ce:08:6b:df:4b:0a:cf:c0:e9:59:8d:f8:f0:f4:21:5e: 7d:6f:90:2e:8e:e0:71:b0:b6:a5:09:f2:ca:f6:a8:c2:8a:4c: 60:29:55:6d:6a:ce:45:db:2c:0b:4a:b5:cf:77:47:f7:e4:22: d5:99:49:11:6f:62:92:cb:6c:d7:9f:bf:b2:65:05:e7:13:96: a2:cf:dc:6d:a1:2d:07:10:72:d1:44:b5:ba:ac:7e:fa:e2:df: ec:ca:50:32:07:47:2d:7a:10:20:78:c8:10:35:c7:0c:d8:65: f2:40:de:78:64:85:9b:41:14:ff:6a:99:70:86:f0:fd:e1:99: d3:13:87:9d:8a:ed:40:0d:d3:c2:e4:d9:c2:eb:d6:ba:19:57: 2c:3b:73:d3:5b:59:69:53:b2:f8:a2:0f:a5:b0:39:6b:b6:8f: 52:6d:ed:87:ce:17:ac:02:d1:67:c0:43:c1:db:e1:0e:28:9f: a8:37:f4:85:b3:2c:86:3a:e8:37:2e:ae:61:49:de:be:b4:0f: a7:46:ec:10:17:33:9f:a4:ef:cf:b1:f9:6a:b4:af:a3:47:ff: a3:05:b3:b4:8a:d7:a4:71:46:e2:a8:d6:0e:33:e3:ec:95:2e: 6b:e3:07:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iFx0yRF4lb7hOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWFmZjJjZDUtNTNmNC00NGI0LWIzMTUtNTYzYjRkYjYyOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz8R8BO1YhIPJwrNBql3pRys4szR/LeKATtY gIzaa5Y244Dn6inehGGmlFXvgYxI8I0ybGz0HkvIfFRrVHpai9nMz6qVAd0VmAJg iFfBcdU50PXuaS8s3ZhlBEwgLTctX1m7ls6fGSheXH9SIOvdw7rfnh2cmvvOnjp8 kyD83ULxBUI9+PmD9B+rnircy9OAP6mjj4ya2L6yTSoHiMhZDkZIM7EEExFn5Sov 7Xr8oFm2gUtnvOwfLBIp+hJaZg0TP+iTs208UaGrViqDemBtEDlIKKnxw2Ri8m3B NSthkqkLYFToEfOVm+efLiIlSN2bhwB0d7gqV8d29KWd5WrPgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSw4sNUGq7n4f6uLbzf2RcaL2p9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTkyYzUxMDItNGVjZS0z MjBkLTk1ZjYtMTQ2YTQ0Yjk4YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsd7Z9vDQxJorOv61o1TLNQnq3Azghr30sKz8DpWY348PQhXn1vkC6O 4HGwtqUJ8sr2qMKKTGApVW1qzkXbLAtKtc93R/fkItWZSRFvYpLLbNefv7JlBecT lqLP3G2hLQcQctFEtbqsfvri3+zKUDIHRy16ECB4yBA1xwzYZfJA3nhkhZtBFP9q mXCG8P3hmdMTh52K7UAN08Lk2cLr1roZVyw7c9NbWWlTsviiD6WwOWu2j1Jt7YfO F6wC0WfAQ8Hb4Q4on6g39IWzLIY66DcurmFJ3r60D6dG7BAXM5+k78+x+Wq0r6NH /6MFs7SK16RxRuKo1g4z4+yVLmvjB+s= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:08 2025 by rpki-client