$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc90a226-2c3c-3e39-9b7d-7e2f4741a029.roa File: bc90a226-2c3c-3e39-9b7d-7e2f4741a029.roa (raw, json) Hash identifier: 435U1lEqP7wXlA36EiU1siyaND64jYJ69kzoLAX+iUc= Subject key identifier: 95:C0:EA:0D:9C:A0:29:3C:DF:40:7C:74:17:4F:CD:84:F9:7E:20:3E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F222BF35E72B90B3FC7EA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc90a226-2c3c-3e39-9b7d-7e2f4741a029.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.199.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:22:bf:35:e7:2b:90:b3:fc:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=70ee9129-8afd-4943-a209-d9bec79aa3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:7b:4d:bf:65:da:1d:95:51:60:71:73:d5: a2:a3:b1:d8:9d:9b:a5:38:52:1c:ab:5e:78:a8:31: 57:d2:51:66:84:c3:ca:fc:33:a0:ef:8b:8e:f6:e9: 2a:a0:3a:7b:d9:ed:4e:a8:e4:a1:74:b9:8f:40:74: df:49:dc:82:1d:0b:79:0a:bd:0e:d0:02:25:c0:c3: 70:f3:7e:b6:9e:dd:d9:e6:dc:b5:c2:08:1e:ca:c2: cb:53:e0:be:94:68:80:6b:34:b0:ff:0a:5a:67:b7: 94:67:c6:49:94:08:49:87:c5:32:65:4d:46:5b:e8: 59:6c:b5:2d:5b:f9:3e:96:ff:d5:dd:b6:6d:36:78: 61:2d:3e:6c:d4:50:5b:84:65:e2:85:90:cb:98:7e: 5c:41:7a:e4:b5:af:f4:54:ad:af:16:4a:91:dd:c4: 81:72:ef:25:a5:f0:86:4d:7a:1e:dd:6b:26:ce:15: af:73:e1:ff:dd:7b:97:1a:70:22:9d:e2:b1:55:da: 02:b0:27:31:5d:65:01:56:0b:df:67:ba:ae:e1:9f: 5a:c1:be:3a:fa:0d:0f:67:a2:fd:94:7e:e0:cc:86: 00:b3:1a:ca:af:ea:fb:86:47:69:20:41:e4:bd:1f: bd:7c:dc:27:c0:02:bf:b0:89:22:61:ee:8b:b7:d2: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C0:EA:0D:9C:A0:29:3C:DF:40:7C:74:17:4F:CD:84:F9:7E:20:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc90a226-2c3c-3e39-9b7d-7e2f4741a029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:7d:18:93:0b:30:0a:bc:94:1a:f0:9c:37:36:a7:1b:8c:77: f1:71:c4:8f:43:a3:3c:f7:34:e2:24:27:29:9b:df:9c:fa:08: 08:c9:4e:fd:68:d8:ef:8f:1c:37:86:02:0a:b2:b1:79:e2:d8: be:94:48:c8:c6:ae:a5:1d:14:b1:07:3e:cd:61:e7:36:f3:87: fa:8c:2a:7e:fc:d6:cb:ca:70:26:37:2c:9e:4a:c5:58:29:a3: d0:b9:46:fa:2b:37:5f:a6:f0:1b:b2:57:d4:b9:35:29:5e:0b: df:bd:d6:d9:23:6c:7c:08:ed:57:0d:95:2b:80:b6:8d:ce:5d: 39:a9:a6:a7:e8:12:45:f3:48:1b:bc:41:cd:98:a2:73:a8:28: d6:89:dd:64:c3:7e:24:e3:90:8c:7b:5e:e2:d0:24:86:0b:ec: b2:ce:ad:7a:3b:5f:90:41:b9:95:b1:74:c4:17:49:1b:30:98: 1f:b4:0b:d8:16:54:3f:71:27:4e:d2:8a:aa:ed:b2:f5:59:70: 9a:a2:ca:cf:30:99:6c:b7:41:b3:ea:ce:4e:89:60:dd:7f:db: b9:99:2c:68:c0:06:51:ce:2d:b9:55:71:20:0a:6c:02:62:ac: 64:e5:c8:85:8b:0f:4a:88:f3:fe:59:e5:43:4a:2c:4b:a0:f2: ce:48:31:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iK/NecrkLP8fqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzBlZTkxMjktOGFmZC00OTQzLWEyMDktZDliZWM3OWFhM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNF7Tb9l2h2VUWBxc9Wio7HYnZulOFIcq154 qDFX0lFmhMPK/DOg74uO9ukqoDp72e1OqOShdLmPQHTfSdyCHQt5Cr0O0AIlwMNw 8362nt3Z5ty1wggeysLLU+C+lGiAazSw/wpaZ7eUZ8ZJlAhJh8UyZU1GW+hZbLUt W/k+lv/V3bZtNnhhLT5s1FBbhGXihZDLmH5cQXrkta/0VK2vFkqR3cSBcu8lpfCG TXoe3WsmzhWvc+H/3XuXGnAineKxVdoCsCcxXWUBVgvfZ7qu4Z9awb46+g0PZ6L9 lH7gzIYAsxrKr+r7hkdpIEHkvR+9fNwnwAK/sIkiYe6Lt9L+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXA6g2coCk830B8dBdPzYT5fiA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmM5MGEyMjYtMmMzYy0z ZTM5LTliN2QtN2UyZjQ3NDFhMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKh9GJMLMAq8lBrwnDc2pxuMd/FxxI9Dozz3NOIkJymb35z6CAjJTv1o 2O+PHDeGAgqysXni2L6USMjGrqUdFLEHPs1h5zbzh/qMKn781svKcCY3LJ5KxVgp o9C5RvorN1+m8BuyV9S5NSleC9+91tkjbHwI7VcNlSuAto3OXTmppqfoEkXzSBu8 Qc2YonOoKNaJ3WTDfiTjkIx7XuLQJIYL7LLOrXo7X5BBuZWxdMQXSRswmB+0C9gW VD9xJ07SiqrtsvVZcJqiys8wmWy3QbPqzk6JYN1/27mZLGjABlHOLblVcSAKbAJi rGTlyIWLD0qI8/5Z5UNKLEug8s5IMUc= -----END CERTIFICATE-----Generated at Thu Oct 16 01:54:24 2025 by rpki-client