$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4fd6156-2480-3504-b8fa-b00a6744810f.roa File: d4fd6156-2480-3504-b8fa-b00a6744810f.roa (raw, json) Hash identifier: jdpXzdRgaN4SyMSpnm9kB9ZiSKlsPcHSjFje2bmyvKw= Subject key identifier: B9:2B:52:70:7B:A9:98:90:79:ED:63:41:C7:74:8C:3F:98:13:4F:33 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F249DD7B0D4169F1126A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4fd6156-2480-3504-b8fa-b00a6744810f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.197.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:49:dd:7b:0d:41:69:f1:12:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=8e170f7e-8fd4-4b27-bb71-78fa14c7e78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f2:9e:01:e7:26:04:5f:22:6f:1c:cf:17:46: 22:c5:73:97:fe:50:dc:b7:33:a5:01:d7:59:5e:51: 0c:45:a0:8b:cf:ac:6d:2b:be:33:c5:72:90:7e:78: b1:66:85:d7:da:4d:19:eb:6a:c3:5a:9d:f4:ac:cf: cf:d7:8b:3c:f4:3e:8c:3a:21:14:b6:d0:f0:94:eb: 0f:a6:09:84:0f:37:5a:1c:b5:b3:26:36:1e:df:d2: 93:59:1b:e2:b0:9d:d6:d6:53:8c:b8:0f:72:a4:53: 83:6b:7d:ac:d4:47:31:9e:76:73:09:a9:76:1b:3d: 8c:87:a8:96:da:00:9e:c9:cc:b1:73:a9:5a:91:94: 91:53:b1:f2:c3:00:e2:ce:02:de:45:c9:21:f5:13: e6:b6:d1:0e:67:94:9b:5b:51:be:28:07:78:87:f7: 75:0c:c5:55:6d:3d:ef:3b:19:c8:b3:82:e2:49:ce: d5:f7:59:3c:e7:e0:5b:04:6f:95:cf:0a:ef:4a:24: 20:9c:c0:91:6c:72:53:cc:82:e7:fa:f8:e0:b1:e1: 41:ac:81:6b:98:f9:d2:47:b4:60:6f:9d:35:d6:83: 1f:0f:0e:82:25:83:85:ff:52:24:ea:1c:b1:1b:e3: b5:fc:e5:3d:41:6a:f3:12:6d:8c:28:4f:22:60:9c: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2B:52:70:7B:A9:98:90:79:ED:63:41:C7:74:8C:3F:98:13:4F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4fd6156-2480-3504-b8fa-b00a6744810f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f0:db:ad:b0:3f:2c:cf:47:0c:c6:1f:3b:35:dd:27:d9:b7: 96:88:4e:5c:12:60:35:aa:fc:ef:1d:46:23:28:12:40:90:f0: 91:dd:ab:84:30:b3:57:15:3c:9e:d0:f3:42:81:8d:97:be:f6: 2b:2c:e4:be:66:45:4c:3b:36:03:61:cf:f8:d2:45:b8:2e:87: b2:1b:9c:30:a5:0e:93:2c:48:6c:6a:e5:2f:de:89:7e:45:a6: fa:ef:18:43:c4:21:e1:b0:e4:01:84:69:10:ed:60:09:6f:6b: c7:ab:ed:16:78:3f:8c:23:52:41:bd:d2:d8:67:95:cb:ad:8b: cc:e9:d5:5e:d7:54:e0:fd:c0:f5:59:a6:77:59:d9:29:59:9b: da:cc:be:3d:a3:25:db:83:fd:71:4a:23:38:37:5b:eb:d8:66: 29:e3:e4:20:20:07:c3:a1:b2:7c:03:5d:0d:bd:6a:52:ea:d5: 27:4b:7a:8c:64:c7:86:4b:8c:47:59:e3:01:61:a5:00:b7:24: 58:00:e4:6e:2f:fa:3e:36:99:16:2f:97:7b:cc:10:db:73:3d: 30:71:37:29:18:be:93:75:4b:e3:62:5e:08:62:a0:b7:65:05: f0:6e:74:c3:4b:7b:f5:03:e4:48:f0:58:69:75:18:4b:63:3b: fd:13:09:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kndew1BafESagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OGUxNzBmN2UtOGZkNC00YjI3LWJiNzEtNzhmYTE0YzdlNzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PKeAecmBF8ibxzPF0YixXOX/lDctzOlAddZ XlEMRaCLz6xtK74zxXKQfnixZoXX2k0Z62rDWp30rM/P14s89D6MOiEUttDwlOsP pgmEDzdaHLWzJjYe39KTWRvisJ3W1lOMuA9ypFODa32s1EcxnnZzCal2Gz2Mh6iW 2gCeycyxc6lakZSRU7HywwDizgLeRckh9RPmttEOZ5SbW1G+KAd4h/d1DMVVbT3v OxnIs4LiSc7V91k85+BbBG+VzwrvSiQgnMCRbHJTzILn+vjgseFBrIFrmPnSR7Rg b5011oMfDw6CJYOF/1Ik6hyxG+O1/OU9QWrzEm2MKE8iYJyPuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkrUnB7qZiQee1jQcd0jD+YE08zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDRmZDYxNTYtMjQ4MC0z NTA0LWI4ZmEtYjAwYTY3NDQ4MTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfw262wPyzPRwzGHzs13SfZt5aITlwSYDWq/O8dRiMoEkCQ8JHdq4Qw s1cVPJ7Q80KBjZe+9iss5L5mRUw7NgNhz/jSRbguh7IbnDClDpMsSGxq5S/eiX5F pvrvGEPEIeGw5AGEaRDtYAlva8er7RZ4P4wjUkG90thnlcuti8zp1V7XVOD9wPVZ pndZ2SlZm9rMvj2jJduD/XFKIzg3W+vYZinj5CAgB8OhsnwDXQ29alLq1SdLeoxk x4ZLjEdZ4wFhpQC3JFgA5G4v+j42mRYvl3vMENtzPTBxNykYvpN1S+NiXghioLdl BfBudMNLe/UD5EjwWGl1GEtjO/0TCZw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:00 2025 by rpki-client