$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8b175e1-5daa-3700-9038-d0150f42013c.roa File: b8b175e1-5daa-3700-9038-d0150f42013c.roa (raw, json) Hash identifier: g2JFwl8ge9iLmmArzUXSNkYYmyFp4wCjuqOuw2yRrWY= Subject key identifier: CA:8E:1D:41:88:7F:F3:50:8A:28:95:34:7C:82:00:11:A9:27:0C:10 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F292DCC9EACCD485360200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8b175e1-5daa-3700-9038-d0150f42013c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:92:dc:c9:ea:cc:d4:85:36:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7f4acf5c-cd42-4cbf-868f-71492400d765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:be:58:9d:b4:cf:56:c4:90:1d:14:84:77: 06:f4:3c:d0:36:5b:35:57:f6:41:fd:e7:1e:85:4e: 5b:83:76:c8:bf:00:6b:12:be:9f:fb:7d:fc:df:93: 9b:f0:b6:7e:7b:45:8f:b5:97:10:e7:a7:89:e4:63: bf:3f:83:fc:68:b0:bb:d5:48:c7:25:82:fb:06:9b: 69:e8:1e:24:2d:54:5f:b3:40:7a:c4:26:34:35:38: 68:ed:f3:39:59:73:a8:64:a1:c2:c6:b3:f0:4b:18: c7:2a:7e:e1:95:45:4f:01:96:03:c6:ba:ef:a2:14: cb:69:df:1d:e6:f6:bc:d7:bc:df:b5:ed:e1:e3:ed: ec:76:bb:8c:fc:f5:da:5e:86:c6:18:6a:4c:a6:89: b7:12:10:8a:c8:82:4e:78:56:10:25:76:fb:69:dd: 89:7f:20:24:92:53:f8:87:1d:94:cc:17:88:43:ff: 75:82:ed:54:40:d0:65:d0:d0:67:13:2f:bf:76:5e: c4:fd:3b:7a:18:12:b8:fa:ec:b3:9d:f6:85:24:b2: 3b:92:bd:b5:b2:9e:2f:bd:02:2d:e6:a9:71:fc:94: 76:32:a6:9e:b1:b0:dc:1b:f0:5e:7a:49:9c:bc:25: 18:cc:e5:ef:b1:77:59:ef:a7:dc:60:89:c2:a5:a1: 62:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8E:1D:41:88:7F:F3:50:8A:28:95:34:7C:82:00:11:A9:27:0C:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8b175e1-5daa-3700-9038-d0150f42013c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:32:a2:37:d9:9c:ad:6e:10:04:af:10:7f:10:5a:fc:f0:74: 7e:e6:b8:18:e2:2a:3c:5b:e7:af:b1:53:ec:10:80:70:66:9c: f1:98:71:0f:ae:e0:92:79:c6:15:51:9b:4c:cc:3c:4e:ba:2f: 0d:6b:79:b6:3a:4f:3a:b9:97:23:ed:ec:88:45:dd:13:1b:53: 83:39:af:ed:ec:6e:1b:20:85:d1:3f:ff:55:0b:ae:5c:0e:6e: 53:8a:ee:af:d2:04:83:56:20:3d:8c:2a:84:59:b0:c4:81:f1: 77:20:88:eb:ce:cd:0a:a4:af:68:69:03:78:e1:bd:21:13:d8: 92:69:29:12:bf:7f:af:4d:56:a3:0e:f6:ef:3c:c9:b7:a9:c4: 63:3b:2a:85:ba:b8:bb:a0:c6:df:cd:3d:fb:8c:c4:35:cc:c7: 32:cb:ed:80:dd:f1:26:a1:e9:03:a5:62:50:51:5c:90:df:20: 2e:c0:d9:15:5e:af:d6:4b:50:89:41:93:27:d2:81:aa:10:2d: a9:33:76:b9:f1:86:46:1c:ae:bb:11:17:61:d5:9e:0b:f5:7f: 55:d2:10:50:a8:ac:07:e7:54:6a:81:d8:56:fd:c6:e7:ff:4a: 41:ce:3c:fa:c1:90:ad:b4:0b:13:89:ce:4e:a1:95:06:ac:89: fa:82:23:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pLcyerM1IU2AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2Y0YWNmNWMtY2Q0Mi00Y2JmLTg2OGYtNzE0OTI0MDBkNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFq+WJ20z1bEkB0UhHcG9DzQNls1V/ZB/ece hU5bg3bIvwBrEr6f+33835Ob8LZ+e0WPtZcQ56eJ5GO/P4P8aLC71UjHJYL7Bptp 6B4kLVRfs0B6xCY0NTho7fM5WXOoZKHCxrPwSxjHKn7hlUVPAZYDxrrvohTLad8d 5va817zfte3h4+3sdruM/PXaXobGGGpMpom3EhCKyIJOeFYQJXb7ad2JfyAkklP4 hx2UzBeIQ/91gu1UQNBl0NBnEy+/dl7E/Tt6GBK4+uyznfaFJLI7kr21sp4vvQIt 5qlx/JR2MqaesbDcG/BeekmcvCUYzOXvsXdZ76fcYInCpaFiWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqOHUGIf/NQiiiVNHyCABGpJwwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjhiMTc1ZTEtNWRhYS0z NzAwLTkwMzgtZDAxNTBmNDIwMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIyojfZnK1uEASvEH8QWvzwdH7muBjiKjxb56+xU+wQgHBmnPGYcQ+u 4JJ5xhVRm0zMPE66Lw1rebY6Tzq5lyPt7IhF3RMbU4M5r+3sbhsghdE//1ULrlwO blOK7q/SBINWID2MKoRZsMSB8XcgiOvOzQqkr2hpA3jhvSET2JJpKRK/f69NVqMO 9u88ybepxGM7KoW6uLugxt/NPfuMxDXMxzLL7YDd8Sah6QOlYlBRXJDfIC7A2RVe r9ZLUIlBkyfSgaoQLakzdrnxhkYcrrsRF2HVngv1f1XSEFCorAfnVGqB2Fb9xuf/ SkHOPPrBkK20CxOJzk6hlQasifqCI9c= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:06 2025 by rpki-client