$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1904ed7-727e-3055-9c62-41cb84b0decf.roa File: e1904ed7-727e-3055-9c62-41cb84b0decf.roa (raw, json) Hash identifier: fWmwEmP2WP6iLH1hkuYq7K9vqKPD1iLUYTGDuB/180k= Subject key identifier: 28:18:79:B2:E4:B3:E9:AD:1F:CB:FF:C6:C3:27:B5:BD:FF:A2:C4:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26E336292811EA9F68280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1904ed7-727e-3055-9c62-41cb84b0decf.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6e:33:62:92:81:1e:a9:f6:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=53a22c35-9472-4bd7-a1c8-94dac9ba3e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5b:b2:a5:e3:2b:8d:6b:e1:7a:cd:dd:0a:83: 24:3d:0d:d2:f7:61:e2:3c:63:f2:dd:e4:59:57:e2: 3d:a6:e0:19:b0:89:40:9e:9c:f6:f8:a6:fd:a6:52: ce:da:8b:27:93:3e:b5:f7:8a:92:6e:2c:b9:6b:1b: 9e:9b:8f:93:aa:67:ad:7c:75:c8:04:82:05:66:31: f7:f1:09:16:92:87:75:c2:9a:db:62:98:96:3a:49: 55:67:93:52:dc:c5:c0:ea:36:54:82:3b:44:d2:61: e0:91:f8:a2:78:aa:ef:74:fb:e9:d1:94:a1:c9:a4: 1c:ab:f9:ed:5a:2a:fe:b0:60:6f:db:97:60:e1:e8: 68:d9:fc:c8:fc:3e:be:e3:0f:4d:3c:ca:80:76:ac: 5d:1f:93:73:e6:01:22:da:b9:2d:b6:b5:79:87:19: 22:42:16:a1:3a:6a:d4:9b:95:86:bb:ab:2e:d8:86: 0c:4e:11:fc:26:6f:3d:d8:1e:d5:01:2b:3c:91:57: 1d:a9:3b:9a:19:ba:8d:26:39:25:4a:8b:5b:b1:e1: ee:2f:c4:b6:29:10:c5:eb:12:6d:2b:60:7c:9d:41: d1:c1:30:18:f6:14:44:b1:74:ec:23:d1:7d:93:ab: 51:2f:2b:e6:33:ac:cd:84:8b:75:08:11:00:38:0c: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:18:79:B2:E4:B3:E9:AD:1F:CB:FF:C6:C3:27:B5:BD:FF:A2:C4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1904ed7-727e-3055-9c62-41cb84b0decf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ea:b8:78:5e:c8:b6:1f:ff:3d:ef:62:57:8f:c2:4b:a2:b3: d1:6d:f3:c4:df:1c:48:3c:9c:0f:65:80:28:97:e7:0b:79:1d: 7a:7a:4c:5b:01:09:33:92:30:d9:a6:4a:85:7a:ec:a8:1f:c5: 72:af:87:9e:d7:7d:49:69:ad:a1:5c:40:7f:07:9f:f9:de:b9: 16:fa:92:71:7e:1f:eb:e4:de:f3:c7:44:f9:f9:0f:93:6e:c2: 69:31:9b:8a:8a:c8:66:28:94:0b:00:ff:7a:3b:63:14:09:54: 83:fe:06:3c:be:e4:db:0d:22:9b:4b:83:25:cd:7f:18:a3:5f: 59:ab:b5:ec:22:79:df:42:b0:bf:48:15:77:c8:40:45:07:68: 69:a7:33:10:c0:ea:34:54:62:6a:29:31:e8:01:4e:91:45:eb: d3:6b:39:cc:43:c2:0a:25:a8:2e:a9:ca:82:11:06:f0:ea:bb: b7:6a:2f:89:93:94:8f:4f:71:be:8b:fc:55:88:b7:48:84:84: 9d:79:8d:f7:c9:f2:98:a2:78:e6:22:de:65:14:1b:73:18:1c: 8b:d1:0f:47:37:e4:7e:76:50:b7:09:dd:83:b2:23:fc:a2:8c: c7:58:ec:b8:15:4f:5b:fc:fb:ff:43:31:d5:d3:a4:04:2d:29: 91:fe:98:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28m4zYpKBHqn2goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTNhMjJjMzUtOTQ3Mi00YmQ3LWExYzgtOTRkYWM5YmEzZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VuypeMrjWvhes3dCoMkPQ3S92HiPGPy3eRZ V+I9puAZsIlAnpz2+Kb9plLO2osnkz6194qSbiy5axuem4+TqmetfHXIBIIFZjH3 8QkWkod1wprbYpiWOklVZ5NS3MXA6jZUgjtE0mHgkfiieKrvdPvp0ZShyaQcq/nt Wir+sGBv25dg4eho2fzI/D6+4w9NPMqAdqxdH5Nz5gEi2rkttrV5hxkiQhahOmrU m5WGu6su2IYMThH8Jm892B7VASs8kVcdqTuaGbqNJjklSotbseHuL8S2KRDF6xJt K2B8nUHRwTAY9hREsXTsI9F9k6tRLyvmM6zNhIt1CBEAOAxsFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgYebLks+mtH8v/xsMntb3/osTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTE5MDRlZDctNzI3ZS0z MDU1LTljNjItNDFjYjg0YjBkZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzquHheyLYf/z3vYlePwkuis9Ft88TfHEg8nA9lgCiX5wt5HXp6TFsB CTOSMNmmSoV67KgfxXKvh57XfUlpraFcQH8Hn/neuRb6knF+H+vk3vPHRPn5D5Nu wmkxm4qKyGYolAsA/3o7YxQJVIP+Bjy+5NsNIptLgyXNfxijX1mrtewied9CsL9I FXfIQEUHaGmnMxDA6jRUYmopMegBTpFF69NrOcxDwgolqC6pyoIRBvDqu7dqL4mT lI9Pcb6L/FWIt0iEhJ15jffJ8piieOYi3mUUG3MYHIvRD0c35H52ULcJ3YOyI/yi jMdY7LgVT1v8+/9DMdXTpAQtKZH+mGE= -----END CERTIFICATE-----Generated at Thu Oct 16 02:01:00 2025 by rpki-client