$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe17aa6c-fe8d-38c5-9277-036677fb36ab.roa File: fe17aa6c-fe8d-38c5-9277-036677fb36ab.roa (raw, json) Hash identifier: hCNu/fOAjM7XrlV08v3js1CGWyR1Da8yuOaxctIjrQo= Subject key identifier: DC:51:4D:55:6E:58:D7:5D:04:BA:62:80:68:B6:E7:00:CF:69:F1:52 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23C5BECC99450FF81F040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe17aa6c-fe8d-38c5-9277-036677fb36ab.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:3c:5b:ec:c9:94:50:ff:81:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=80efe122-5aae-4210-bf9c-e77068d322e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:c1:93:01:1b:42:62:32:ec:20:cf:9f:62: f3:82:03:5e:25:11:2a:95:f0:e7:d8:30:46:69:71: b8:23:64:5c:5e:9c:46:47:13:14:6d:c5:81:d4:45: 7f:c3:14:57:34:f8:3b:ad:f5:be:ec:c3:bb:52:0b: 15:31:5c:55:ef:7a:e3:19:ac:4a:1a:cd:d1:ba:02: ac:d8:80:5b:5e:32:78:48:17:89:55:48:1d:06:4c: e5:e7:af:21:71:52:bd:8f:ba:a6:a0:17:41:6f:43: 42:e6:a6:f7:7b:48:be:a5:e2:57:9d:a0:f4:78:a7: f7:08:a2:a0:82:6b:79:b0:a4:bf:66:a7:e3:8a:8b: cf:87:ae:47:ee:ac:c0:d3:d7:20:77:4b:84:77:15: 28:47:74:2e:53:74:ed:f7:3b:c0:d2:92:6e:36:67: 35:ae:21:7f:57:b7:55:2c:85:ce:31:d1:b6:a9:de: a8:cd:ff:6c:a4:a4:50:74:4e:94:4a:52:d6:04:ff: 90:bd:9f:41:17:59:5f:3c:8b:21:b0:40:b0:4a:9c: 56:99:a6:f8:ac:cd:f5:4f:3f:d2:06:77:fb:d8:6c: da:5d:9c:50:bc:ca:e2:76:f1:95:fd:5e:e0:71:a3: 0a:5c:f8:68:cf:21:eb:e1:9e:4f:79:2e:ea:9f:84: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:51:4D:55:6E:58:D7:5D:04:BA:62:80:68:B6:E7:00:CF:69:F1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe17aa6c-fe8d-38c5-9277-036677fb36ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:08:e8:7e:27:f4:25:24:ae:f6:c7:22:d6:15:a2:22:11:6a: 73:d9:45:92:ed:a5:e6:2f:de:ac:dd:42:25:03:2e:c4:db:9c: 43:08:bb:44:ba:63:2b:26:d2:52:4d:ef:83:3e:28:df:a5:da: d4:cc:ae:f1:60:d4:a9:d1:39:7b:a5:bd:f5:2d:34:f9:82:37: 41:96:ab:fd:82:83:56:be:b4:04:98:61:20:95:d8:22:66:89: a8:e3:c6:09:f0:9a:8f:3e:44:a8:fd:db:88:ae:1a:27:3e:45: 23:87:76:9f:19:f4:55:41:86:74:93:65:e2:18:2b:68:7d:48: a3:b4:65:1f:88:22:14:c7:2f:5a:35:71:d4:a6:ee:31:2d:43: 0f:b8:8a:0b:36:f7:37:26:ae:09:9b:0f:82:ed:26:bc:a2:26: 78:cc:15:e1:49:e8:aa:60:ac:46:9f:fe:65:e8:98:94:63:49: 20:d7:5a:fa:ff:17:6a:8b:93:ae:1c:c4:81:cc:47:1c:d6:12: a0:bb:20:d5:d8:0e:8c:f9:2d:d5:8a:56:ba:b9:c3:9a:1c:c9: 0a:56:d1:89:8d:22:c4:06:6f:64:0f:06:c5:9d:50:e1:91:67: e9:90:d2:fa:75:c7:08:89:10:2d:95:1a:ad:ac:2e:f1:fd:98: 55:70:55:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jxb7MmUUP+B8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODBlZmUxMjItNWFhZS00MjEwLWJmOWMtZTc3MDY4ZDMyMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqLBkwEbQmIy7CDPn2LzggNeJREqlfDn2DBG aXG4I2RcXpxGRxMUbcWB1EV/wxRXNPg7rfW+7MO7UgsVMVxV73rjGaxKGs3RugKs 2IBbXjJ4SBeJVUgdBkzl568hcVK9j7qmoBdBb0NC5qb3e0i+peJXnaD0eKf3CKKg gmt5sKS/ZqfjiovPh65H7qzA09cgd0uEdxUoR3QuU3Tt9zvA0pJuNmc1riF/V7dV LIXOMdG2qd6ozf9spKRQdE6USlLWBP+QvZ9BF1lfPIshsECwSpxWmab4rM31Tz/S Bnf72GzaXZxQvMridvGV/V7gcaMKXPhozyHr4Z5PeS7qn4SG2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxRTVVuWNddBLpigGi25wDPafFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmUxN2FhNmMtZmU4ZC0z OGM1LTkyNzctMDM2Njc3ZmIzNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEI6H4n9CUkrvbHItYVoiIRanPZRZLtpeYv3qzdQiUDLsTbnEMIu0S6 Yysm0lJN74M+KN+l2tTMrvFg1KnROXulvfUtNPmCN0GWq/2Cg1a+tASYYSCV2CJm iajjxgnwmo8+RKj924iuGic+RSOHdp8Z9FVBhnSTZeIYK2h9SKO0ZR+IIhTHL1o1 cdSm7jEtQw+4igs29zcmrgmbD4LtJryiJnjMFeFJ6KpgrEaf/mXomJRjSSDXWvr/ F2qLk64cxIHMRxzWEqC7INXYDoz5LdWKVrq5w5ocyQpW0YmNIsQGb2QPBsWdUOGR Z+mQ0vp1xwiJEC2VGq2sLvH9mFVwVdA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:20 2025 by rpki-client