$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff39ed9d-502e-39ba-b503-9e320418042d.roa File: ff39ed9d-502e-39ba-b503-9e320418042d.roa (raw, json) Hash identifier: NtMAM4dT4JHJFqO00BWWRX1bTpSpIYHikBD1owj9Qyw= Subject key identifier: 32:AB:B3:C7:48:3B:21:2C:E0:55:43:16:30:08:23:60:01:27:48:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F272FB6A2D990E851D79A8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff39ed9d-502e-39ba-b503-9e320418042d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.197.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:72:fb:6a:2d:99:0e:85:1d:79:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7d327f29-dd73-4756-b140-a446497689e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:48:98:86:fc:cf:04:5e:b5:be:1c:c9:a4:e9: d7:49:39:ef:9e:6f:85:ef:7a:97:74:3f:4b:2d:f1: 81:75:ed:18:6a:4e:9b:91:27:d4:9f:b9:4c:08:80: af:56:c8:2f:70:46:a2:d2:0d:4b:38:78:b6:a5:6a: af:9d:93:06:76:a7:a7:0c:84:fc:41:d2:21:12:9c: 66:29:58:85:36:d7:ac:0d:14:0e:16:a7:c2:45:c8: 6f:75:d3:03:af:94:e5:dd:31:b0:b2:e4:84:c6:aa: f9:4f:22:6d:79:18:73:33:30:c1:1e:c6:ca:14:cd: 8a:a2:c6:43:78:e1:aa:66:15:55:d7:9d:f4:0d:96: 55:4e:ac:eb:96:96:5d:1c:8f:6f:da:81:63:2a:ee: ae:b7:ef:52:1c:78:ba:21:88:0a:1d:86:6d:f5:2a: c1:d5:8f:da:c9:04:2b:35:85:c4:18:3d:d9:d0:ee: 64:f8:f3:2a:4e:8b:d0:59:f7:8d:06:85:48:87:e2: c8:bf:19:03:48:a3:e6:c5:60:76:3b:54:6c:8d:3b: ed:b8:1b:17:39:71:e4:33:4e:02:4d:31:60:58:54: 31:86:03:da:b3:b5:df:75:fa:1f:df:2e:51:31:9e: 91:cb:5c:75:cd:b0:23:34:2e:42:22:92:ef:e9:fc: 5e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AB:B3:C7:48:3B:21:2C:E0:55:43:16:30:08:23:60:01:27:48:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff39ed9d-502e-39ba-b503-9e320418042d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:32:53:1d:a5:e8:dd:87:a0:cc:d4:c5:39:e7:e9:d4:65:24: e1:fd:49:d6:8e:8f:f8:f2:92:3b:a5:67:09:f1:5c:cc:f9:97: 6f:c0:29:ef:9d:23:9c:37:14:1d:f5:d9:48:d7:e9:f6:32:5f: c9:e4:9a:99:45:ed:f1:9a:cd:cc:35:5b:87:22:b3:bd:7c:e3: 63:3a:49:e7:be:02:e3:db:61:82:2f:d9:82:f6:5d:ab:97:b0: 3f:38:50:23:a3:a1:d7:be:01:c3:2b:12:79:4c:62:81:b0:4f: 01:30:1f:0b:00:94:1a:1b:0e:32:1a:e9:27:2a:04:88:0e:68: b4:7c:03:82:40:81:c7:de:37:90:f7:67:3b:4d:79:61:72:12: cf:37:5e:53:4e:42:9a:36:83:68:be:f5:07:4d:ce:dd:a2:04: a9:b0:63:d0:4c:31:54:d5:a5:84:29:21:e8:6a:5d:6a:1e:2c: a2:f7:4d:d4:e0:1f:f4:cb:57:3a:b5:cd:32:38:48:64:8d:61: 28:be:e3:21:03:bc:a5:4b:83:07:ff:39:b4:07:53:33:45:7f: f9:1f:bc:96:df:2a:c1:5d:da:f6:51:92:9b:1e:0c:99:63:87: 56:8a:bf:02:37:12:47:30:c8:67:2f:51:f0:19:1f:09:bb:1c: 7b:cf:1a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nL7ai2ZDoUdeagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2QzMjdmMjktZGQ3My00NzU2LWIxNDAtYTQ0NjQ5NzY4OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUiYhvzPBF61vhzJpOnXSTnvnm+F73qXdD9L LfGBde0Yak6bkSfUn7lMCICvVsgvcEai0g1LOHi2pWqvnZMGdqenDIT8QdIhEpxm KViFNtesDRQOFqfCRchvddMDr5Tl3TGwsuSExqr5TyJteRhzMzDBHsbKFM2KosZD eOGqZhVV1530DZZVTqzrlpZdHI9v2oFjKu6ut+9SHHi6IYgKHYZt9SrB1Y/ayQQr NYXEGD3Z0O5k+PMqTovQWfeNBoVIh+LIvxkDSKPmxWB2O1RsjTvtuBsXOXHkM04C TTFgWFQxhgPas7Xfdfof3y5RMZ6Ry1x1zbAjNC5CIpLv6fxevQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKrs8dIOyEs4FVDFjAII2ABJ0j6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmYzOWVkOWQtNTAyZS0z OWJhLWI1MDMtOWUzMjA0MTgwNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4yUx2l6N2HoMzUxTnn6dRlJOH9SdaOj/jykjulZwnxXMz5l2/AKe+d I5w3FB312UjX6fYyX8nkmplF7fGazcw1W4cis71842M6See+AuPbYYIv2YL2XauX sD84UCOjode+AcMrEnlMYoGwTwEwHwsAlBobDjIa6ScqBIgOaLR8A4JAgcfeN5D3 ZztNeWFyEs83XlNOQpo2g2i+9QdNzt2iBKmwY9BMMVTVpYQpIehqXWoeLKL3TdTg H/TLVzq1zTI4SGSNYSi+4yEDvKVLgwf/ObQHUzNFf/kfvJbfKsFd2vZRkpseDJlj h1aKvwI3EkcwyGcvUfAZHwm7HHvPGtQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:10 2025 by rpki-client