$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2c8724d-aecc-32f8-ac48-ab86b4772846.roa File: c2c8724d-aecc-32f8-ac48-ab86b4772846.roa (raw, json) Hash identifier: mYkDLBo2VXOliEZVp5s3ro4fjV40v5PwHZ7zhtw3b2k= Subject key identifier: 18:4B:5E:EB:A8:4A:09:64:52:F4:F5:A1:5E:AB:79:FA:F2:CC:C7:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2447830A72742DAD8A580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2c8724d-aecc-32f8-ac48-ab86b4772846.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:44:78:30:a7:27:42:da:d8:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=159b45fd-e1a5-4cee-9ed4-655f1f3ec529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:d2:c3:b0:28:4b:ae:cd:ff:f1:98:fa:fa: fd:7d:87:b0:a1:76:83:be:65:bd:a0:ec:f0:c4:26: 3d:ac:82:48:1a:74:74:72:b1:75:99:c2:bb:e8:f0: ff:31:a2:ce:be:c4:f6:ac:cc:ae:f0:4b:4b:83:4b: 90:4a:7b:80:23:2f:d6:58:26:50:85:07:75:e6:90: 6c:a0:40:e5:5b:65:f0:be:85:bc:5e:15:8c:43:61: 91:ec:cc:5d:3d:60:ac:2e:4a:d1:ec:e4:f4:22:de: bf:86:95:96:ca:1e:19:ed:57:67:71:f2:de:2c:dc: 3e:c4:d6:f7:9f:42:e6:c8:77:de:b6:f0:20:a6:0c: b7:35:49:6a:79:ea:f1:79:62:65:4a:a6:43:52:6a: 99:ff:0f:4d:87:b0:13:44:3a:cf:57:ee:0f:93:0b: 79:f8:dd:41:c1:ec:f2:85:6f:6d:96:5d:ac:e3:ab: 84:81:3e:3a:ea:03:7c:99:b3:39:14:d7:53:c9:19: 0f:59:a1:f7:fc:36:1b:90:d8:06:a8:4e:51:de:03: 52:3a:3d:4a:b5:c7:51:3f:40:1c:bb:a6:fc:7a:12: 65:fa:d7:28:1c:46:41:4e:8c:bc:1e:03:b0:53:83: 54:44:dd:d0:10:7a:af:ef:41:c0:44:6a:51:1f:9b: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4B:5E:EB:A8:4A:09:64:52:F4:F5:A1:5E:AB:79:FA:F2:CC:C7:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2c8724d-aecc-32f8-ac48-ab86b4772846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0e:48:a3:44:2b:35:56:41:c9:27:8c:c1:af:ec:17:f8:76: f9:d5:9f:e8:b7:ed:6f:7e:fb:b2:d4:f2:0e:34:e9:33:40:ca: 29:90:85:30:57:a6:7a:a3:a8:c4:8d:c8:8d:aa:01:87:5d:10: a6:a2:48:9d:15:5a:87:4b:5f:3b:0e:5a:66:cc:96:93:71:38: c7:f2:cf:70:52:21:1a:c2:f4:95:a5:9a:57:85:5a:85:51:69: df:3a:f8:c1:9f:79:a0:eb:05:3f:4c:54:67:30:96:d3:16:19: 1c:4b:11:eb:d9:05:19:8a:d2:b4:36:69:a5:a8:6e:59:0c:05: 58:d5:b2:9e:92:54:34:69:86:ca:47:fa:d2:14:6a:4f:5a:ee: c8:eb:fc:9f:b3:28:58:41:43:4d:2c:e8:38:9a:ce:cd:e2:c7: 72:71:71:e5:36:30:95:92:fb:a6:33:8e:cd:0c:22:a8:d9:76: 24:95:62:65:cd:89:13:8c:0e:1c:77:f5:bc:bc:ac:2a:ab:48: f5:c6:9d:85:58:92:10:19:16:34:66:d5:4f:b7:96:f9:e8:0a: a2:a6:17:50:a0:85:29:42:d0:a1:4e:23:d6:05:aa:f8:7e:93: 79:bb:f2:a5:2d:10:37:d1:90:c6:55:45:1d:1c:50:9b:59:9f: 11:ac:3c:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kR4MKcnQtrYpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTU5YjQ1ZmQtZTFhNS00Y2VlLTllZDQtNjU1ZjFmM2VjNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+PSw7AoS67N//GY+vr9fYewoXaDvmW9oOzw xCY9rIJIGnR0crF1mcK76PD/MaLOvsT2rMyu8EtLg0uQSnuAIy/WWCZQhQd15pBs oEDlW2XwvoW8XhWMQ2GR7MxdPWCsLkrR7OT0It6/hpWWyh4Z7VdncfLeLNw+xNb3 n0LmyHfetvAgpgy3NUlqeerxeWJlSqZDUmqZ/w9Nh7ATRDrPV+4Pkwt5+N1Bwezy hW9tll2s46uEgT466gN8mbM5FNdTyRkPWaH3/DYbkNgGqE5R3gNSOj1KtcdRP0Ac u6b8ehJl+tcoHEZBToy8HgOwU4NURN3QEHqv70HARGpRH5u6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhLXuuoSglkUvT1oV6refryzMfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzJjODcyNGQtYWVjYy0z MmY4LWFjNDgtYWI4NmI0NzcyODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQOSKNEKzVWQcknjMGv7Bf4dvnVn+i37W9++7LU8g406TNAyimQhTBX pnqjqMSNyI2qAYddEKaiSJ0VWodLXzsOWmbMlpNxOMfyz3BSIRrC9JWlmleFWoVR ad86+MGfeaDrBT9MVGcwltMWGRxLEevZBRmK0rQ2aaWoblkMBVjVsp6SVDRphspH +tIUak9a7sjr/J+zKFhBQ00s6Diazs3ix3JxceU2MJWS+6Yzjs0MIqjZdiSVYmXN iROMDhx39by8rCqrSPXGnYVYkhAZFjRm1U+3lvnoCqKmF1CghSlC0KFOI9YFqvh+ k3m78qUtEDfRkMZVRR0cUJtZnxGsPEU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:19 2025 by rpki-client