$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cffbeafb-bbad-3901-b991-f1cf3dddeb50.roa File: cffbeafb-bbad-3901-b991-f1cf3dddeb50.roa (raw, json) Hash identifier: reTv5fOy1lwjOYTZSkwPysxPgd2n7xC5GoF8TFVQ1TA= Subject key identifier: DC:17:D2:3E:E9:39:1F:4F:4A:E8:5F:53:D7:95:25:BB:52:DD:EC:95 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F248DF3306A719E28724C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cffbeafb-bbad-3901-b991-f1cf3dddeb50.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.197.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:48:df:33:06:a7:19:e2:87:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e626ac34-d3f0-4627-a734-b51333e6c70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:19:bb:98:a2:bb:ea:cc:72:9d:8e:2c:b7:78: 3d:39:06:a0:be:40:d9:db:ed:2e:dd:ca:9c:8c:aa: 91:7a:6c:5e:a4:ce:23:d5:8c:79:3c:f4:3b:5f:72: ee:bb:2b:06:c7:c7:16:16:68:1d:c5:f7:65:78:ee: 1c:a2:75:13:ee:33:57:00:f7:71:3a:b6:1e:ab:c0: f2:dd:f7:ea:5d:29:57:7d:0e:45:64:db:2e:ba:a4: 0e:dc:52:9b:ae:14:a8:7f:f5:d5:c0:1f:ec:fc:76: b0:c3:33:22:d4:35:93:30:7b:75:08:c0:f1:57:cb: 73:eb:ab:a2:70:e4:94:a2:35:58:78:00:ff:7d:db: 7c:45:92:95:c8:fa:b8:66:07:de:c1:e7:c6:fd:83: 17:dc:ba:e3:87:b1:02:c5:8e:36:bb:65:28:6d:f2: e5:95:b1:34:cc:05:2f:bb:21:8b:94:34:37:24:b5: b7:4a:d0:5a:15:9d:fd:e2:5d:c3:8c:fd:5c:9b:fc: 0a:32:7b:3e:51:28:00:f7:90:62:3a:d7:56:66:c6: b1:6d:36:d5:b3:16:6a:01:a0:a3:7c:db:5b:2f:28: 56:81:b5:c8:15:2a:06:ec:45:d5:03:f8:10:49:94: 5a:df:20:07:dd:41:b7:a9:70:b9:fe:ac:6d:cf:8f: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:17:D2:3E:E9:39:1F:4F:4A:E8:5F:53:D7:95:25:BB:52:DD:EC:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cffbeafb-bbad-3901-b991-f1cf3dddeb50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:39:9f:16:f7:af:fb:99:6f:6e:72:c7:ed:24:43:8d:c7:1f: 42:4c:fe:33:31:cd:3e:d3:21:2e:ae:8b:82:ae:97:7c:66:33: fd:01:71:6d:0c:8b:0b:6f:e6:8c:36:9c:0b:8e:2f:2c:29:2a: 26:05:c5:9c:f5:ae:0b:07:2e:60:8b:36:4b:1f:ce:f2:c7:ed: 49:39:39:6d:58:4f:c2:64:c1:d2:b4:b4:cb:ad:fa:4e:7a:58: 31:76:c1:7e:79:f2:40:a0:88:70:61:e7:9c:16:0a:08:aa:99: 99:1f:76:b5:bd:64:66:96:8b:74:09:1e:03:de:98:35:20:f6: f4:76:a4:12:3a:dc:7b:13:8f:60:d7:3f:17:1e:e3:ee:d5:c4: f6:f0:ca:01:19:ff:95:0e:de:ed:f9:fd:9e:da:9c:a9:b4:48: 36:85:1f:c3:fd:7b:e2:dc:48:6f:85:61:27:d2:37:78:b4:14: 73:45:ca:30:e8:3f:82:90:97:8c:82:45:ef:de:10:03:07:00: 21:91:b8:99:af:2e:31:ed:f7:85:9a:1e:b4:c0:d5:9c:a8:5f: b1:76:ba:dc:ba:1a:2e:3d:76:69:66:63:83:68:d9:27:4f:c3: 4a:ee:06:49:ee:1c:82:d2:40:bf:f9:b1:27:f5:1e:ce:be:34: c2:27:ec:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kjfMwanGeKHJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTYyNmFjMzQtZDNmMC00NjI3LWE3MzQtYjUxMzMzZTZjNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghm7mKK76sxynY4st3g9OQagvkDZ2+0u3cqc jKqRemxepM4j1Yx5PPQ7X3LuuysGx8cWFmgdxfdleO4conUT7jNXAPdxOrYeq8Dy 3ffqXSlXfQ5FZNsuuqQO3FKbrhSof/XVwB/s/HawwzMi1DWTMHt1CMDxV8tz66ui cOSUojVYeAD/fdt8RZKVyPq4ZgfewefG/YMX3Lrjh7ECxY42u2UobfLllbE0zAUv uyGLlDQ3JLW3StBaFZ394l3DjP1cm/wKMns+USgA95BiOtdWZsaxbTbVsxZqAaCj fNtbLyhWgbXIFSoG7EXVA/gQSZRa3yAH3UG3qXC5/qxtz48+jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwX0j7pOR9PSuhfU9eVJbtS3eyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ZmYmVhZmItYmJhZC0z OTAxLWI5OTEtZjFjZjNkZGRlYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE5nxb3r/uZb25yx+0kQ43HH0JM/jMxzT7TIS6ui4Kul3xmM/0BcW0M iwtv5ow2nAuOLywpKiYFxZz1rgsHLmCLNksfzvLH7Uk5OW1YT8JkwdK0tMut+k56 WDF2wX558kCgiHBh55wWCgiqmZkfdrW9ZGaWi3QJHgPemDUg9vR2pBI63HsTj2DX Pxce4+7VxPbwygEZ/5UO3u35/Z7anKm0SDaFH8P9e+LcSG+FYSfSN3i0FHNFyjDo P4KQl4yCRe/eEAMHACGRuJmvLjHt94WaHrTA1ZyoX7F2uty6Gi49dmlmY4No2SdP w0ruBknuHILSQL/5sSf1Hs6+NMIn7Ho= -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:59 2025 by rpki-client