$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af744dd5-a346-34fc-8b07-977fe53aed75.roa File: af744dd5-a346-34fc-8b07-977fe53aed75.roa (raw, json) Hash identifier: QvM13mOICB41mMg2MzpJYrY3sV7dTSjGlTCyNijdYBc= Subject key identifier: 91:AB:46:F2:0D:84:2F:5A:71:3E:0B:23:96:4B:21:06:DD:85:AD:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671D1324A7A77F94606780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af744dd5-a346-34fc-8b07-977fe53aed75.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.193.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1d:13:24:a7:a7:7f:94:60:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=6aa439d4-3de2-4f68-98a8-284655b0bac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:8a:fa:9a:62:23:c2:67:5d:c5:cb:30:a5: 32:cd:6e:32:68:6f:ee:8e:b2:dc:c8:f9:5b:d4:9c: ed:2e:37:45:16:ea:52:d7:31:df:46:6a:aa:fd:00: 6b:79:86:e1:08:07:a3:84:9a:7f:92:33:bd:42:94: 92:0b:f9:73:4a:65:98:6a:d3:52:1c:cb:68:96:6a: 0c:2d:e4:ce:b5:d1:ac:ab:6c:85:60:44:fd:a2:bb: 72:a7:dd:43:1b:50:a2:5a:fb:12:bc:5b:a6:7a:a3: 22:58:95:a1:68:90:42:db:d4:00:5c:49:79:5f:58: 4f:07:b4:3a:58:85:8f:11:08:e8:59:20:bc:28:cc: 55:58:53:9f:dc:eb:fe:97:ad:61:53:16:a2:14:1d: c5:30:cd:01:ce:6e:ad:90:9d:d6:a1:4d:a9:6d:23: 97:e4:f9:86:42:6e:c6:c6:65:42:5e:48:1d:a1:f1: 93:51:d4:e8:ce:1c:50:c9:ce:67:f8:31:a6:b9:85: cd:79:55:fd:59:35:4f:ef:41:9a:52:c0:cd:37:36: af:19:b0:0b:30:8f:bc:3d:1e:86:4f:83:96:52:28: 34:0d:91:af:fc:46:05:ce:58:28:1c:e8:d4:7a:b6: d4:d4:1c:3b:10:ca:01:2d:bf:f7:80:9b:61:5d:c4: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AB:46:F2:0D:84:2F:5A:71:3E:0B:23:96:4B:21:06:DD:85:AD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af744dd5-a346-34fc-8b07-977fe53aed75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8a:cb:45:cc:ff:9a:fe:cc:a7:3a:84:19:14:e0:ef:f8:15: ad:4f:9b:b6:00:4c:5b:09:c3:de:05:36:ab:6e:99:5f:43:50: d6:a2:1e:1f:49:f8:4e:69:06:fa:b9:3e:f6:e1:2d:03:f6:bc: aa:2b:46:d6:88:5b:93:71:53:8c:6f:ee:97:7e:57:b7:0d:65: 3b:2f:1b:d7:99:4b:62:cf:7d:2a:cf:0c:0b:7e:4d:58:f8:e9: 59:0b:a6:07:98:b7:c6:37:ec:09:d8:52:76:62:2a:80:a3:7d: de:5c:c2:5c:f6:0d:c3:ff:25:b8:c9:ff:83:c7:ab:85:0a:e7: 79:37:b8:55:fb:22:77:89:6e:2b:9c:e6:d5:fa:c5:22:e6:a4: 9d:12:bd:09:cc:a7:52:2f:eb:fe:1c:8e:ef:21:48:a3:fa:63: b1:15:fb:90:96:77:d4:a4:2a:af:56:85:9a:9c:4f:b1:49:26: 83:20:0f:ac:64:a8:b1:a0:77:df:b2:ab:7f:51:90:f9:c6:31: 43:6e:77:54:19:ee:5c:88:e7:e8:85:ec:20:41:4e:85:cd:68: 68:96:9c:d5:c0:5f:7a:4e:d3:23:74:68:eb:de:a1:0e:47:c2: 7c:0f:6b:b1:cf:db:90:ce:56:aa:83:f9:c0:54:e5:a1:47:a7: 7b:93:20:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZx0TJKenf5RgZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NmFhNDM5ZDQtM2RlMi00ZjY4LTk4YTgtMjg0NjU1YjBiYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldGK+ppiI8JnXcXLMKUyzW4yaG/ujrLcyPlb 1JztLjdFFupS1zHfRmqq/QBreYbhCAejhJp/kjO9QpSSC/lzSmWYatNSHMtolmoM LeTOtdGsq2yFYET9ortyp91DG1CiWvsSvFumeqMiWJWhaJBC29QAXEl5X1hPB7Q6 WIWPEQjoWSC8KMxVWFOf3Ov+l61hUxaiFB3FMM0Bzm6tkJ3WoU2pbSOX5PmGQm7G xmVCXkgdofGTUdTozhxQyc5n+DGmuYXNeVX9WTVP70GaUsDNNzavGbALMI+8PR6G T4OWUig0DZGv/EYFzlgoHOjUerbU1Bw7EMoBLb/3gJthXcT1UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGrRvINhC9acT4LI5ZLIQbdha3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY3NDRkZDUtYTM0Ni0z NGZjLThiMDctOTc3ZmU1M2FlZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6Ky0XM/5r+zKc6hBkU4O/4Fa1Pm7YATFsJw94FNqtumV9DUNaiHh9J +E5pBvq5PvbhLQP2vKorRtaIW5NxU4xv7pd+V7cNZTsvG9eZS2LPfSrPDAt+TVj4 6VkLpgeYt8Y37AnYUnZiKoCjfd5cwlz2DcP/JbjJ/4PHq4UK53k3uFX7IneJbiuc 5tX6xSLmpJ0SvQnMp1Iv6/4cju8hSKP6Y7EV+5CWd9SkKq9WhZqcT7FJJoMgD6xk qLGgd9+yq39RkPnGMUNud1QZ7lyI5+iF7CBBToXNaGiWnNXAX3pO0yN0aOveoQ5H wnwPa7HP25DOVqqD+cBU5aFHp3uTIBQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:57 2025 by rpki-client