$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03c000c8-29e1-3e9d-a508-af2d258f1cc3.roa File: 03c000c8-29e1-3e9d-a508-af2d258f1cc3.roa (raw, json) Hash identifier: u7Z5pH1wHxxuodql7Kf29p6sLJVDQK+d2PdToclNhtE= Subject key identifier: 7C:57:40:B5:13:F3:8D:73:98:F1:E2:12:4D:22:88:54:97:63:E8:52 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2627AD25D20402556B8F8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03c000c8-29e1-3e9d-a508-af2d258f1cc3.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.209.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:62:7a:d2:5d:20:40:25:56:b8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=786c42f9-ef4e-40ac-843d-ea10456e6199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:62:e2:a8:fe:ab:b7:7c:a0:c0:f6:e7:e4:e1: 88:a9:9c:df:b7:2f:8c:16:2a:80:96:ce:73:f9:a1: 07:69:76:b8:96:9f:24:e9:2c:23:4f:10:ec:41:22: e1:da:fd:98:11:e5:7e:61:74:26:e2:45:a8:20:c7: 4d:eb:2f:1a:19:e6:6d:09:d9:ba:d2:e0:85:94:b6: a4:f7:9c:ec:46:b9:2a:b9:1f:41:f1:f8:29:77:50: 94:75:75:28:7d:a0:34:8f:04:c9:25:4a:1e:b0:02: d0:51:41:53:32:0c:71:b3:11:e6:b5:3b:2b:32:37: 34:6c:38:f7:a8:88:bd:e4:e2:1f:44:ef:a1:82:d2: 72:4b:41:79:0f:70:fe:63:21:5b:b4:18:7b:fc:47: 1e:ea:9a:1d:6d:91:5c:56:dd:00:83:65:86:85:8d: dc:5b:10:5f:7e:46:20:f5:f9:9e:d3:cf:78:f3:1a: 84:b8:c5:56:bd:33:de:d4:19:b7:41:1d:02:74:79: 05:9a:64:1d:c0:38:e5:e2:15:c9:e0:78:66:4a:7d: a2:e3:60:32:ca:c3:49:b6:30:50:54:26:aa:cc:72: 99:ec:d9:ab:78:f4:36:e0:c5:45:50:79:8c:6d:9a: 09:06:48:10:37:bd:7e:af:86:7f:e8:5c:06:1a:71: 64:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:57:40:B5:13:F3:8D:73:98:F1:E2:12:4D:22:88:54:97:63:E8:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03c000c8-29e1-3e9d-a508-af2d258f1cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:22:ed:e0:41:4f:9a:d0:1e:47:6c:81:d8:d6:20:ee:65:99: 29:8c:7b:3c:93:4d:d8:97:15:6f:ab:3b:ba:54:cb:0e:1c:4c: 41:31:66:11:bb:90:ad:47:f0:4a:c2:27:b8:38:2d:bb:49:13: 85:d8:09:9e:53:04:72:13:43:fc:db:ec:c6:72:d1:a7:18:92: f1:d0:11:0c:47:d5:d6:b8:64:63:c8:97:8e:c5:d1:47:a8:d9: 00:ae:90:43:eb:07:03:2e:a5:19:ad:f9:4c:be:99:06:7a:c5: 77:1f:89:1f:35:ed:bd:09:f8:1a:fa:6b:0e:96:46:42:81:62: c1:20:ef:64:44:3e:08:b2:4b:d4:0e:7a:90:62:76:e6:95:31: 25:4a:87:42:52:87:56:04:01:a0:47:38:af:e8:bc:fa:17:10: 4f:b7:f4:a5:3f:f0:42:94:30:80:e1:96:32:b9:e9:3a:eb:75: 38:79:d5:7b:de:1d:85:ed:e4:29:42:e1:5a:2c:90:fc:58:a1: dc:64:9e:b5:94:2c:ba:de:c4:dc:ea:73:0f:f5:3f:ed:73:07: 44:1a:41:21:73:07:a5:18:16:91:a3:1c:f4:45:1d:fe:88:58: 5f:06:45:2d:29:1e:49:9e:47:67:5a:23:fc:15:8e:6d:88:fb: 42:82:5f:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mJ60l0gQCVWuPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Nzg2YzQyZjktZWY0ZS00MGFjLTg0M2QtZWExMDQ1NmU2MTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2LiqP6rt3ygwPbn5OGIqZzfty+MFiqAls5z +aEHaXa4lp8k6SwjTxDsQSLh2v2YEeV+YXQm4kWoIMdN6y8aGeZtCdm60uCFlLak 95zsRrkquR9B8fgpd1CUdXUofaA0jwTJJUoesALQUUFTMgxxsxHmtTsrMjc0bDj3 qIi95OIfRO+hgtJyS0F5D3D+YyFbtBh7/Ece6podbZFcVt0Ag2WGhY3cWxBffkYg 9fme08948xqEuMVWvTPe1Bm3QR0CdHkFmmQdwDjl4hXJ4HhmSn2i42AyysNJtjBQ VCaqzHKZ7NmrePQ24MVFUHmMbZoJBkgQN71+r4Z/6FwGGnFkSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxXQLUT841zmPHiEk0iiFSXY+hSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDNjMDAwYzgtMjllMS0z ZTlkLWE1MDgtYWYyZDI1OGYxY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEi7eBBT5rQHkdsgdjWIO5lmSmMezyTTdiXFW+rO7pUyw4cTEExZhG7 kK1H8ErCJ7g4LbtJE4XYCZ5TBHITQ/zb7MZy0acYkvHQEQxH1da4ZGPIl47F0Ueo 2QCukEPrBwMupRmt+Uy+mQZ6xXcfiR817b0J+Br6aw6WRkKBYsEg72REPgiyS9QO epBiduaVMSVKh0JSh1YEAaBHOK/ovPoXEE+39KU/8EKUMIDhljK56TrrdTh51Xve HYXt5ClC4VoskPxYodxknrWULLrexNzqcw/1P+1zB0QaQSFzB6UYFpGjHPRFHf6I WF8GRS0pHkmeR2daI/wVjm2I+0KCXyI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:31 2025 by rpki-client