$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da432048-2a89-3464-8b47-56704e5eebd3.roa File: da432048-2a89-3464-8b47-56704e5eebd3.roa (raw, json) Hash identifier: 6lvr/WhIwuU+cC4elRJg3Hiv0GKlrZAkGHBtQg4Nz/U= Subject key identifier: 61:D2:65:2B:94:C0:04:16:13:8F:E9:B8:4B:B7:AD:9C:42:4A:E1:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21B94C828F259C2D06F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da432048-2a89-3464-8b47-56704e5eebd3.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.221.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1b:94:c8:28:f2:59:c2:d0:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c981e421-9a15-4ecf-9fea-fa28c8add418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a7:f3:0a:50:95:5d:fc:e9:e7:d8:e7:20:96: fc:8a:9b:f7:8c:07:4f:c2:26:7a:65:9e:27:f0:dc: f1:d9:4f:39:74:a3:7e:c7:40:36:8c:ea:06:ba:f4: 62:98:89:74:f7:a3:c7:a8:79:e3:2a:d3:30:62:37: fc:cd:c3:d2:d4:06:26:fb:00:18:ff:19:37:1d:98: 7a:9f:31:0d:af:f9:26:ba:ac:04:a6:23:1a:b2:f3: 7a:1a:1c:1a:68:6a:71:6f:89:5c:38:2e:7e:88:97: 49:eb:6e:57:73:f4:38:7e:01:93:c4:71:8e:cc:4b: f2:6e:a4:57:23:a5:99:f3:3f:99:28:be:68:2e:07: bd:56:49:69:ef:52:98:6e:61:2f:15:56:93:38:36: 65:77:19:06:a4:48:42:40:3d:c2:7c:32:31:f3:05: e4:06:9a:9d:a1:9a:c8:3f:33:e4:38:a6:b4:65:90: 6c:62:54:23:d2:ad:90:3e:f2:8b:40:e4:67:a0:e0: 5b:df:7e:91:b6:29:dd:9a:51:21:b5:43:72:d9:dc: 6c:34:d0:54:a7:d9:90:e8:66:55:ab:5b:f7:a9:80: dc:1c:8d:1a:d6:95:d6:02:bb:71:9d:4c:46:68:c9: af:76:e4:71:28:9a:ee:7c:7d:b1:b0:e1:86:e5:d2: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D2:65:2B:94:C0:04:16:13:8F:E9:B8:4B:B7:AD:9C:42:4A:E1:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da432048-2a89-3464-8b47-56704e5eebd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3c:4d:ed:39:86:57:47:eb:86:e4:54:59:09:07:2a:19:e7: ef:3f:fe:ab:fe:0f:fb:a8:aa:ea:52:cf:50:bd:2f:18:ff:65: 4c:31:36:74:72:01:6c:13:76:45:88:cd:13:1e:8d:81:52:e7: e5:00:44:41:93:0c:11:70:c4:7e:97:6c:98:94:64:e0:ef:be: 67:e2:92:55:87:31:36:15:a2:c4:10:cb:71:98:62:f4:4d:88: 3c:89:92:e6:3f:03:b1:bc:c3:a7:64:12:22:52:c4:0e:e6:ad: 88:86:64:a3:06:9c:ef:29:47:a2:02:c2:39:70:67:da:75:15: 49:d6:67:fe:cc:9c:64:3e:ef:6e:0c:a8:f1:39:12:ca:1f:a5: 4f:1d:2b:02:1c:d6:23:5e:b3:0c:3e:89:9e:03:42:3d:e9:7d: 23:47:37:66:c2:b8:de:fc:f5:5a:24:a9:c8:4c:6e:1b:0e:ed: f7:7f:b3:97:63:be:84:1a:1a:22:e7:89:bc:6d:8a:eb:1f:38: 87:fe:d7:25:ff:7f:c5:74:68:52:c1:71:d4:63:8e:c7:d0:b2: 5e:51:76:09:57:c2:96:e3:a4:c0:f8:ab:21:64:4a:7e:f0:f4: 5f:3b:3c:e3:1f:27:92:f0:da:2f:72:df:e8:e1:ae:2e:0c:5c: 6c:9b:17:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28huUyCjyWcLQb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Yzk4MWU0MjEtOWExNS00ZWNmLTlmZWEtZmEyOGM4YWRkNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqfzClCVXfzp59jnIJb8ipv3jAdPwiZ6ZZ4n 8Nzx2U85dKN+x0A2jOoGuvRimIl096PHqHnjKtMwYjf8zcPS1AYm+wAY/xk3HZh6 nzENr/kmuqwEpiMasvN6GhwaaGpxb4lcOC5+iJdJ625Xc/Q4fgGTxHGOzEvybqRX I6WZ8z+ZKL5oLge9Vklp71KYbmEvFVaTODZldxkGpEhCQD3CfDIx8wXkBpqdoZrI PzPkOKa0ZZBsYlQj0q2QPvKLQORnoOBb336RtindmlEhtUNy2dxsNNBUp9mQ6GZV q1v3qYDcHI0a1pXWArtxnUxGaMmvduRxKJrufH2xsOGG5dK0RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHSZSuUwAQWE4/puEu3rZxCSuGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGE0MzIwNDgtMmE4OS0z NDY0LThiNDctNTY3MDRlNWVlYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw8Te05hldH64bkVFkJByoZ5+8//qv+D/uoqupSz1C9Lxj/ZUwxNnRy AWwTdkWIzRMejYFS5+UAREGTDBFwxH6XbJiUZODvvmfiklWHMTYVosQQy3GYYvRN iDyJkuY/A7G8w6dkEiJSxA7mrYiGZKMGnO8pR6ICwjlwZ9p1FUnWZ/7MnGQ+724M qPE5EsofpU8dKwIc1iNesww+iZ4DQj3pfSNHN2bCuN789VokqchMbhsO7fd/s5dj voQaGiLnibxtiusfOIf+1yX/f8V0aFLBcdRjjsfQsl5RdglXwpbjpMD4qyFkSn7w 9F87POMfJ5Lw2i9y3+jhri4MXGybF78= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:09 2025 by rpki-client