$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaa247ab-3aea-3cba-844e-8630e768f8ca.roa File: aaa247ab-3aea-3cba-844e-8630e768f8ca.roa (raw, json) Hash identifier: QWbl5GoCUqQGjLn38SsNQdujbd88rj1ras/6anD0AUE= Subject key identifier: 44:41:37:5E:58:BE:CA:D6:8A:41:73:BE:A2:2B:65:89:14:32:6C:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2712797295C919C4F59A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaa247ab-3aea-3cba-844e-8630e768f8ca.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:71:27:97:29:5c:91:9c:4f:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b2025782-5754-4c7d-988f-2bd0659c3298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2c:33:a0:44:c2:00:35:5a:e8:4e:cc:75:b5: ac:f1:23:23:67:a1:dc:eb:9f:d1:c8:64:a5:69:f7: 0d:16:4f:98:fe:35:c7:3d:e5:16:32:57:f0:f8:88: fd:83:bc:e7:96:0c:a1:ee:40:a9:4d:27:55:62:1a: d1:3c:39:d9:cf:7f:cc:26:86:20:91:80:fa:40:64: 4c:d7:ec:87:c3:6a:d6:33:70:09:7d:9d:ed:a8:23: a6:33:c1:b3:b8:07:b8:79:ec:91:0b:6e:75:23:a4: ff:18:21:38:c8:d1:f0:c8:12:a5:1d:38:d3:64:5a: a6:79:17:c9:93:d8:88:80:80:a3:a3:49:32:ab:f2: 2c:2d:b3:94:a3:c1:a3:98:4d:13:89:72:58:4d:eb: 9f:81:91:ec:6b:f0:86:e2:e5:b8:a3:66:1e:f5:13: f7:06:7b:43:ed:51:b5:ea:e5:aa:ec:50:fd:6b:7e: 3d:fd:0b:d8:52:f5:09:75:38:bf:bb:8f:52:ad:65: fa:94:55:34:ed:2f:9c:24:52:78:6c:1f:8f:64:a0: 2b:c6:29:1f:3b:af:d6:68:f1:d3:1f:ba:ee:65:f8: 75:0e:16:3f:06:0f:86:e4:44:e3:06:42:5a:87:82: 0b:19:ca:87:be:1c:c7:a7:14:b2:45:2c:c8:61:83: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:41:37:5E:58:BE:CA:D6:8A:41:73:BE:A2:2B:65:89:14:32:6C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaa247ab-3aea-3cba-844e-8630e768f8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:fa:d5:b2:cc:be:a0:7f:49:60:34:d3:8a:c4:fe:4e:2f:3b: 95:c1:e7:ef:8f:76:46:4e:ec:bc:5c:e5:9e:4e:9f:54:cc:bc: 8d:20:78:79:0b:09:ca:2d:66:a6:a7:7b:5e:aa:ce:31:83:83: 5e:46:df:93:5a:34:71:4e:35:7f:83:47:f0:a9:26:36:17:8b: 00:80:ca:bd:17:cd:ab:99:9b:b3:e5:65:e9:b6:a9:2e:96:b2: 4d:fb:a7:03:07:6c:35:2b:88:f7:41:d4:66:f1:d7:d3:62:a2: ef:a1:9d:79:b9:1b:5f:93:3e:8d:b3:90:49:d5:3c:4a:52:b6: c2:9d:6e:db:33:3d:b9:74:99:15:33:49:e2:9e:ea:27:7a:c8: df:97:88:55:78:5e:80:1e:b2:31:f1:a3:4c:7a:0b:7b:46:31: df:05:80:dc:55:67:1f:9d:b3:60:43:19:6a:58:2c:a2:cd:35: 97:66:15:9f:dc:47:7f:3b:f8:1d:ff:54:08:ae:e8:e0:bd:fd: 9d:b8:ca:2d:15:8d:80:89:38:a0:42:e5:e5:4b:39:28:a4:cb: c1:86:ae:c2:80:f0:86:b1:2c:76:f9:48:a2:72:c5:74:88:88: e1:7e:5f:8c:91:06:50:43:6e:3b:6a:a2:a4:fe:62:ff:24:8a: c5:b8:39:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nEnlylckZxPWaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YjIwMjU3ODItNTc1NC00YzdkLTk4OGYtMmJkMDY1OWMzMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CwzoETCADVa6E7MdbWs8SMjZ6Hc65/RyGSl afcNFk+Y/jXHPeUWMlfw+Ij9g7znlgyh7kCpTSdVYhrRPDnZz3/MJoYgkYD6QGRM 1+yHw2rWM3AJfZ3tqCOmM8GzuAe4eeyRC251I6T/GCE4yNHwyBKlHTjTZFqmeRfJ k9iIgICjo0kyq/IsLbOUo8GjmE0TiXJYTeufgZHsa/CG4uW4o2Ye9RP3BntD7VG1 6uWq7FD9a349/QvYUvUJdTi/u49SrWX6lFU07S+cJFJ4bB+PZKArxikfO6/WaPHT H7ruZfh1DhY/Bg+G5ETjBkJah4ILGcqHvhzHpxSyRSzIYYNGLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERBN15YvsrWikFzvqIrZYkUMmwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFhMjQ3YWItM2FlYS0z Y2JhLTg0NGUtODYzMGU3NjhmOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT61bLMvqB/SWA004rE/k4vO5XB5++PdkZO7Lxc5Z5On1TMvI0geHkL CcotZqane16qzjGDg15G35NaNHFONX+DR/CpJjYXiwCAyr0XzauZm7PlZem2qS6W sk37pwMHbDUriPdB1Gbx19Niou+hnXm5G1+TPo2zkEnVPEpStsKdbtszPbl0mRUz SeKe6id6yN+XiFV4XoAesjHxo0x6C3tGMd8FgNxVZx+ds2BDGWpYLKLNNZdmFZ/c R387+B3/VAiu6OC9/Z24yi0VjYCJOKBC5eVLOSiky8GGrsKA8IaxLHb5SKJyxXSI iOF+X4yRBlBDbjtqoqT+Yv8kisW4Oew= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:29 2025 by rpki-client