$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd9c95b9-2aa1-31c4-9d9a-9f1ff1c73e62.roa File: bd9c95b9-2aa1-31c4-9d9a-9f1ff1c73e62.roa (raw, json) Hash identifier: Atdh+8Af44YnpIRBaFupGO/bdBMtgWt6VHuSxsDoyNQ= Subject key identifier: A0:DA:D3:75:D0:CE:E2:DA:78:10:B9:65:C6:67:CA:0E:01:4B:B7:51 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F283E4AEEBB3C9A1F6AB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd9c95b9-2aa1-31c4-9d9a-9f1ff1c73e62.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.221.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:83:e4:ae:eb:b3:c9:a1:f6:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c85f1d20-2dc2-42fc-82c7-dbae42e08d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:93:76:f8:89:bf:3d:a3:4a:a0:50:77:04: ae:8d:2e:1a:97:38:4c:0f:36:7b:c4:ed:68:15:32: 3b:39:18:c3:dc:e2:4e:de:85:ca:97:47:d2:6f:22: 55:f8:37:42:da:89:bb:32:68:c7:3e:a1:49:90:31: b3:3e:9d:18:1c:40:7b:c1:a4:47:34:7e:89:fe:e4: ef:4c:48:12:ac:7b:4f:68:e2:91:ac:6b:36:05:87: a5:fb:c2:47:84:2f:57:b3:d7:11:ff:b8:5d:f4:1f: 96:86:b9:2c:2d:c5:1f:d1:09:1a:de:cb:28:56:35: 53:a7:ab:92:79:02:6d:8c:1d:59:b1:7c:52:f5:27: 67:5c:23:3a:d7:1e:a2:60:5e:9e:b2:7e:7f:f1:d4: 99:f6:91:88:02:63:df:fb:9f:9f:f9:a3:50:48:05: c4:13:85:43:74:f5:38:46:78:71:92:1d:70:98:a8: c1:c5:c0:79:65:97:d4:b3:f7:de:b8:cb:e4:6e:23: a4:98:a6:c3:a8:3c:29:9f:1a:c4:9c:36:e2:93:24: ee:b4:90:b6:a3:4f:35:0f:a9:4c:29:a8:e1:8d:25: a9:03:b1:27:5d:93:4d:af:8f:44:10:67:2a:35:be: 7c:b3:68:e6:61:ed:80:79:01:70:e1:85:0b:aa:87: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DA:D3:75:D0:CE:E2:DA:78:10:B9:65:C6:67:CA:0E:01:4B:B7:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd9c95b9-2aa1-31c4-9d9a-9f1ff1c73e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b8:bb:75:a2:57:8a:c2:74:46:96:99:e7:57:a9:c1:a9:eb: c1:40:db:e2:18:07:b6:6c:29:5b:42:68:2a:ea:ac:5c:dd:0e: 02:07:52:d2:35:3e:16:c4:76:fe:1e:55:f1:7e:64:88:e6:d0: f7:16:f6:78:9c:f0:a2:8e:5c:34:b1:93:1c:03:40:2b:9c:d2: 87:49:49:60:7a:40:37:85:ef:0c:4b:1d:60:ed:98:b1:dd:68: 3f:38:02:3c:6c:33:f8:e0:9a:34:50:43:24:66:8f:1f:ec:a2: ad:b1:9b:6c:cb:5a:9d:3e:e2:8d:af:15:44:b9:c1:46:e1:0a: b1:f7:3d:cd:d9:b1:d3:33:70:9c:10:b9:ad:40:b3:8e:05:f1: 03:30:a5:08:83:55:95:ed:e3:78:7d:88:92:1a:7c:ae:a0:f9: 4f:ad:f0:83:c5:d3:eb:5a:89:c7:ba:24:83:b4:52:0c:34:88: f9:92:68:5a:2d:7a:2a:76:e8:a6:fb:f3:63:be:8d:25:dd:ca: a7:25:4d:ae:7d:d6:75:25:15:64:ed:d3:99:76:52:02:c2:3f: 91:00:28:c8:7c:84:9c:36:5e:c0:ac:8b:66:18:31:ac:da:bd: b5:ca:c2:c9:bf:1b:7c:03:b5:16:27:70:2c:88:82:45:f0:2d: 41:cb:54:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oPkruuzyaH2qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Yzg1ZjFkMjAtMmRjMi00MmZjLTgyYzctZGJhZTQyZTA4ZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye6TdviJvz2jSqBQdwSujS4alzhMDzZ7xO1o FTI7ORjD3OJO3oXKl0fSbyJV+DdC2om7MmjHPqFJkDGzPp0YHEB7waRHNH6J/uTv TEgSrHtPaOKRrGs2BYel+8JHhC9Xs9cR/7hd9B+WhrksLcUf0Qka3ssoVjVTp6uS eQJtjB1ZsXxS9SdnXCM61x6iYF6esn5/8dSZ9pGIAmPf+5+f+aNQSAXEE4VDdPU4 Rnhxkh1wmKjBxcB5ZZfUs/feuMvkbiOkmKbDqDwpnxrEnDbikyTutJC2o081D6lM KajhjSWpA7EnXZNNr49EEGcqNb58s2jmYe2AeQFw4YULqofNJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDa03XQzuLaeBC5ZcZnyg4BS7dRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmQ5Yzk1YjktMmFhMS0z MWM0LTlkOWEtOWYxZmYxYzczZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+4u3WiV4rCdEaWmedXqcGp68FA2+IYB7ZsKVtCaCrqrFzdDgIHUtI1 PhbEdv4eVfF+ZIjm0PcW9nic8KKOXDSxkxwDQCuc0odJSWB6QDeF7wxLHWDtmLHd aD84AjxsM/jgmjRQQyRmjx/soq2xm2zLWp0+4o2vFUS5wUbhCrH3Pc3ZsdMzcJwQ ua1As44F8QMwpQiDVZXt43h9iJIafK6g+U+t8IPF0+taice6JIO0Ugw0iPmSaFot eip26Kb782O+jSXdyqclTa591nUlFWTt05l2UgLCP5EAKMh8hJw2XsCsi2YYMaza vbXKwsm/G3wDtRYncCyIgkXwLUHLVBE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:07 2025 by rpki-client