$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3473bc8-ea32-3678-9437-fbe8272447a8.roa File: d3473bc8-ea32-3678-9437-fbe8272447a8.roa (raw, json) Hash identifier: rPfOSZEYIhnzBBgz/5ARGaf1G/jySSn+o+Yfb2vEJKw= Subject key identifier: 94:FF:61:E2:D0:68:EB:C4:7A:D2:DD:70:1D:C2:D2:DD:FC:96:7A:77 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F281061DF451CC4E70BD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3473bc8-ea32-3678-9437-fbe8272447a8.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.66.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:81:06:1d:f4:51:cc:4e:70:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=dfa6c05b-8bd3-4b06-93dd-acc6e9d4de6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:4e:3b:fa:9b:f5:75:54:8e:0b:09:2e:59: d0:f3:00:1c:12:90:ef:d0:75:33:0c:41:73:a4:cd: 5b:05:6e:d8:7e:54:56:07:4f:9f:d1:bb:b2:2f:02: 98:03:e8:05:1f:58:37:6c:e0:27:d8:1f:b7:b4:fc: 32:0a:64:5c:26:c8:e2:47:d2:89:43:cc:8f:31:33: 4f:66:a0:11:d3:f1:04:e6:98:b6:3c:0b:6c:52:22: 90:8a:da:f6:26:b5:1a:ab:28:e8:68:90:4d:c4:57: d1:d2:9e:59:14:44:cd:bc:75:c2:99:d4:de:2c:4d: ce:81:b6:70:dd:1d:05:52:73:8b:14:15:41:f9:9e: f2:57:1c:e3:f8:f4:76:9a:a9:0e:7a:b7:a4:71:7d: 85:a5:ba:c1:49:9d:6d:b8:e9:b8:c4:90:12:9b:b6: 8f:4e:f6:e2:fe:a9:b0:57:72:93:78:cf:82:22:ac: 40:43:ef:7e:af:3f:63:1f:7a:00:d4:ee:6d:ac:84: 10:8b:f7:ba:5b:dd:7a:5e:c2:99:ae:27:31:70:7d: c1:c2:9d:b7:1b:20:f5:ff:32:b2:ee:5f:d2:44:94: 06:37:f1:27:72:e9:59:e1:e3:7d:28:c5:5c:da:56: 82:5f:e5:9f:26:df:25:79:86:00:f2:28:d9:26:85: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FF:61:E2:D0:68:EB:C4:7A:D2:DD:70:1D:C2:D2:DD:FC:96:7A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3473bc8-ea32-3678-9437-fbe8272447a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d1:c8:e4:bc:1a:b1:37:9e:b0:7c:71:b4:fa:a7:cc:c6:23: 79:ad:ae:f8:96:34:be:17:ed:2c:e1:fe:24:b4:a6:b8:6a:cd: 06:6d:8d:10:c6:f7:47:46:94:f6:07:31:e5:be:ba:61:f3:f0: fb:3c:53:7b:63:10:95:a7:02:ae:aa:92:ef:85:be:cc:8d:22: b6:c9:3e:9a:01:d7:0a:fb:50:61:c7:51:f1:f6:1e:0c:2d:23: f5:d7:eb:0c:20:52:b5:cf:8c:b8:e0:39:25:bc:bf:a1:2c:8c: 3c:db:f2:a3:84:d1:07:5f:b7:99:3f:f9:db:6e:58:a8:3e:f5: cf:22:98:9b:13:30:05:e6:36:1b:8d:f2:d2:30:4d:bf:89:8b: eb:32:c7:99:9e:3c:9b:d0:9b:03:f1:1e:4a:94:04:48:70:57: ce:82:81:a9:28:d6:a3:2f:4a:89:dd:bc:39:1c:3a:6e:a4:ca: c1:b1:e7:73:28:59:ab:63:3b:e6:a3:27:1f:1d:05:e7:5a:27: 6e:78:e7:21:e1:9d:9c:03:c3:af:09:8d:18:a3:db:ff:33:33: cc:de:23:31:93:81:b8:5a:0b:ff:c0:7d:ee:10:de:61:76:1b: 3b:b6:67:00:33:f2:d5:1c:13:3c:38:9d:28:c9:86:e9:4d:5e: e6:2f:8b:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oEGHfRRzE5wvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZGZhNmMwNWItOGJkMy00YjA2LTkzZGQtYWNjNmU5ZDRkZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv9OO/qb9XVUjgsJLlnQ8wAcEpDv0HUzDEFz pM1bBW7YflRWB0+f0buyLwKYA+gFH1g3bOAn2B+3tPwyCmRcJsjiR9KJQ8yPMTNP ZqAR0/EE5pi2PAtsUiKQitr2JrUaqyjoaJBNxFfR0p5ZFETNvHXCmdTeLE3OgbZw 3R0FUnOLFBVB+Z7yVxzj+PR2mqkOerekcX2FpbrBSZ1tuOm4xJASm7aPTvbi/qmw V3KTeM+CIqxAQ+9+rz9jH3oA1O5trIQQi/e6W916XsKZricxcH3Bwp23GyD1/zKy 7l/SRJQGN/EnculZ4eN9KMVc2laCX+WfJt8leYYA8ijZJoWtbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT/YeLQaOvEetLdcB3C0t38lnp3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDM0NzNiYzgtZWEzMi0z Njc4LTk0MzctZmJlODI3MjQ0N2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHRyOS8GrE3nrB8cbT6p8zGI3mtrviWNL4X7Szh/iS0prhqzQZtjRDG 90dGlPYHMeW+umHz8Ps8U3tjEJWnAq6qku+FvsyNIrbJPpoB1wr7UGHHUfH2Hgwt I/XX6wwgUrXPjLjgOSW8v6EsjDzb8qOE0Qdft5k/+dtuWKg+9c8imJsTMAXmNhuN 8tIwTb+Ji+syx5mePJvQmwPxHkqUBEhwV86Cgako1qMvSondvDkcOm6kysGx53Mo WatjO+ajJx8dBedaJ2545yHhnZwDw68JjRij2/8zM8zeIzGTgbhaC//Afe4Q3mF2 Gzu2ZwAz8tUcEzw4nSjJhulNXuYvi4M= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:05 2025 by rpki-client