$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb3a522e-c6d9-3cd0-bea9-433e85157dc6.roa File: fb3a522e-c6d9-3cd0-bea9-433e85157dc6.roa (raw, json) Hash identifier: ocfcWwglt+mSGh4WdE7zV2sS45fzQADbYByBO8VWkO8= Subject key identifier: D1:2E:B0:CA:5B:CD:68:66:D6:D7:49:9F:52:AF:C9:0F:B4:A3:2E:83 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F210CE8B71BFF82D32C540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb3a522e-c6d9-3cd0-bea9-433e85157dc6.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.200.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:10:ce:8b:71:bf:f8:2d:32:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=d74e959e-b0f2-4124-ae35-55faf202c7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:83:4d:af:04:24:0d:93:97:e8:36:ee:e5: 62:a8:70:67:b0:87:c1:6d:1c:e0:aa:f9:a1:b9:24: d4:e0:0f:fe:42:45:3c:b3:85:3b:5f:dd:bf:51:05: d9:a1:fc:a4:cc:3e:df:23:76:75:87:c4:19:74:b6: cf:36:a8:f7:db:52:f2:73:0d:5f:f6:bc:55:9f:d8: 2b:24:b1:23:d9:e9:9b:d0:50:d1:05:7d:f0:c1:90: 0d:10:ca:42:e3:91:53:16:fa:16:87:e3:96:a7:40: 82:86:58:5e:33:3a:18:c4:3a:bc:c6:22:87:a4:a4: 55:11:56:6a:9a:76:60:8f:86:92:82:cf:2c:5c:e1: 81:c1:78:77:82:26:f4:7c:a2:99:06:d5:a1:91:21: e6:7a:62:b3:e7:d2:31:8a:6d:97:dc:ca:19:20:22: 27:27:fc:29:90:f8:b8:0f:5c:70:d4:fb:a6:93:f7: 88:53:46:75:3a:1c:28:e5:eb:05:c0:73:34:43:e4: 39:cf:04:76:1d:76:a8:1d:ec:28:3a:a8:48:90:6f: 81:e3:43:5f:6d:4c:d3:e2:20:a9:5e:48:73:7b:72: 0e:9e:ec:71:6a:56:c7:59:b3:7a:a0:bc:0c:02:78: a8:49:cd:b3:ca:8c:78:ad:61:0d:b2:e8:c0:35:25: 17:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2E:B0:CA:5B:CD:68:66:D6:D7:49:9F:52:AF:C9:0F:B4:A3:2E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb3a522e-c6d9-3cd0-bea9-433e85157dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:17:ad:e8:80:e7:19:62:51:7f:1a:d4:98:de:28:d4:e1:99: 59:af:26:0b:dd:ac:6d:b3:57:e8:93:3d:b6:ba:88:c7:42:01: 74:b5:31:5c:d5:45:5d:81:72:6d:74:02:e0:f3:f7:76:aa:eb: 7d:74:00:bf:b0:fd:a1:74:c7:fa:50:b8:5a:60:0b:23:98:02: 0c:19:87:87:ec:a9:a0:3a:66:bd:de:c9:f3:c4:c3:51:8c:cc: e7:f2:24:37:a7:99:ab:b3:e7:e1:c3:dd:21:1c:d5:7f:4e:8c: 44:cb:a9:2a:28:28:88:d6:e4:ba:b5:e0:31:de:89:46:f9:d6: c7:66:ae:50:b9:89:2c:4f:fd:00:d6:9a:9d:09:c0:e1:de:89: fa:88:cd:45:12:23:26:22:d3:c8:80:23:02:c4:7e:ae:d6:6f: bc:3c:65:b4:f9:58:40:66:d3:82:e4:26:22:5a:6e:85:37:05: fe:3a:28:cb:46:c7:f2:af:d6:ba:c3:92:1c:ef:db:4d:47:b3: 96:bf:e0:3b:cc:f9:fb:3e:9f:5c:22:e7:f2:a7:60:2f:bf:80: 2a:26:91:39:2d:b3:f4:71:f6:c9:bf:e6:53:81:a5:56:52:93: 2a:4e:50:a5:02:92:81:7b:8f:9e:8c:63:13:c3:9a:71:16:ec: e8:8a:67:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hDOi3G/+C0yxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDc0ZTk1OWUtYjBmMi00MTI0LWFlMzUtNTVmYWYyMDJjN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub6DTa8EJA2Tl+g27uViqHBnsIfBbRzgqvmh uSTU4A/+QkU8s4U7X92/UQXZofykzD7fI3Z1h8QZdLbPNqj321Lycw1f9rxVn9gr JLEj2emb0FDRBX3wwZANEMpC45FTFvoWh+OWp0CChlheMzoYxDq8xiKHpKRVEVZq mnZgj4aSgs8sXOGBwXh3gib0fKKZBtWhkSHmemKz59Ixim2X3MoZICInJ/wpkPi4 D1xw1Pumk/eIU0Z1Ohwo5esFwHM0Q+Q5zwR2HXaoHewoOqhIkG+B40NfbUzT4iCp Xkhze3IOnuxxalbHWbN6oLwMAnioSc2zyox4rWENsujANSUXmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEusMpbzWhm1tdJn1KvyQ+0oy6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmIzYTUyMmUtYzZkOS0z Y2QwLWJlYTktNDMzZTg1MTU3ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8XreiA5xliUX8a1JjeKNThmVmvJgvdrG2zV+iTPba6iMdCAXS1MVzV RV2Bcm10AuDz93aq6310AL+w/aF0x/pQuFpgCyOYAgwZh4fsqaA6Zr3eyfPEw1GM zOfyJDenmauz5+HD3SEc1X9OjETLqSooKIjW5Lq14DHeiUb51sdmrlC5iSxP/QDW mp0JwOHeifqIzUUSIyYi08iAIwLEfq7Wb7w8ZbT5WEBm04LkJiJaboU3Bf46KMtG x/Kv1rrDkhzv201Hs5a/4DvM+fs+n1wi5/KnYC+/gComkTkts/Rx9sm/5lOBpVZS kypOUKUCkoF7j56MYxPDmnEW7OiKZ+U= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:55 2025 by rpki-client