$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0dc65c86-ec7d-322a-9eae-ae73f5af440a.roa File: 0dc65c86-ec7d-322a-9eae-ae73f5af440a.roa (raw, json) Hash identifier: vZwfF2Ohnex2oOVanx4la93/1dd3lS1i6C7N3Pbg+1o= Subject key identifier: 25:98:8F:A0:73:A9:31:B1:41:18:B4:BB:C7:A6:7B:3E:2B:64:3C:95 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21BC954D63DE003A096E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0dc65c86-ec7d-322a-9eae-ae73f5af440a.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.209.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1b:c9:54:d6:3d:e0:03:a0:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a21bed59-d34b-49ef-a4c6-e00d5cdb0e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:60:58:15:a7:cb:b7:b1:fb:32:a7:bb:9a:ee: fe:6f:01:e7:bf:a1:83:55:14:80:36:17:9d:ca:9f: 19:12:a8:7b:22:32:76:91:7a:d6:5a:11:50:d0:81: 7b:55:66:cc:f8:21:60:8c:18:34:c7:a3:9b:fd:51: ed:48:56:36:6b:46:15:ec:3f:d4:fa:f1:10:82:89: e3:67:0a:ac:7b:44:7a:33:55:7e:c6:e0:03:af:09: ad:eb:57:c6:82:5b:8b:d2:07:58:dc:52:cc:b3:8d: f5:88:e0:6f:91:29:fe:55:ce:e2:a7:18:c1:9a:c4: 49:b8:56:57:c5:2b:38:91:fd:33:66:1a:98:41:40: 41:bf:2f:fe:d5:7b:b2:17:43:39:01:fa:5a:c6:9a: a8:52:00:15:a5:2f:20:c7:9c:ef:78:c2:bf:1d:8d: 4b:06:50:5f:02:d9:96:6e:52:91:c3:5c:02:5e:2b: de:1c:31:08:68:fd:27:a2:2a:08:d6:4d:a6:05:d0: 71:b5:1a:9a:94:57:06:8f:08:53:15:22:d3:0c:60: f9:b9:91:92:83:d2:81:fd:d5:25:ae:85:2f:db:1e: 18:45:6b:4b:70:40:1d:bf:84:5a:53:00:28:32:1d: 17:d5:fd:f4:3b:e2:f2:36:4c:44:cd:7c:1a:7d:7f: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:8F:A0:73:A9:31:B1:41:18:B4:BB:C7:A6:7B:3E:2B:64:3C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0dc65c86-ec7d-322a-9eae-ae73f5af440a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:12:e6:09:65:88:00:b7:db:b2:fa:a4:ec:25:9b:75:53:c7: 0e:64:ce:24:e0:f0:a6:5e:eb:9c:e3:2c:99:35:b6:30:26:53: 5c:6e:3b:f3:e8:ec:26:e7:60:01:5e:48:cd:4a:13:49:c1:fa: c9:2a:d3:a7:46:3a:32:81:8a:b0:d5:5c:ff:39:a9:b9:16:d3: 16:eb:f8:f0:70:cf:61:a7:4c:be:b0:5e:a4:ce:2b:e4:2b:35: ff:0b:da:44:0e:45:bf:2e:dc:ca:3b:4d:14:88:6d:11:31:19: 9e:bf:88:79:da:75:d0:83:a0:4a:a1:1c:6d:65:36:0e:ff:24: fc:d6:78:9b:24:4d:11:97:33:eb:f0:27:af:f6:0f:7d:7b:34: 50:f6:80:1a:b6:c2:b5:1b:c9:fc:fc:d6:87:77:07:40:ff:a7: 2c:5f:f4:3d:3c:7c:dd:24:5b:76:48:a1:04:02:ac:60:eb:59: 70:28:44:de:82:0f:43:43:52:a5:04:21:ee:87:14:61:96:43: 40:03:8f:57:22:a9:83:f9:19:7e:f7:31:86:fd:9f:85:9d:99: c8:e6:0a:6c:45:1b:4c:56:f6:40:6e:1e:17:9e:4b:63:8e:8b: 96:bd:ea:73:22:46:25:8b:be:c7:a9:eb:35:8a:5f:52:49:b1: c2:f9:31:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hvJVNY94AOgluAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTIxYmVkNTktZDM0Yi00OWVmLWE0YzYtZTAwZDVjZGIwZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WBYFafLt7H7Mqe7mu7+bwHnv6GDVRSANhed yp8ZEqh7IjJ2kXrWWhFQ0IF7VWbM+CFgjBg0x6Ob/VHtSFY2a0YV7D/U+vEQgonj Zwqse0R6M1V+xuADrwmt61fGgluL0gdY3FLMs431iOBvkSn+Vc7ipxjBmsRJuFZX xSs4kf0zZhqYQUBBvy/+1XuyF0M5AfpaxpqoUgAVpS8gx5zveMK/HY1LBlBfAtmW blKRw1wCXiveHDEIaP0noioI1k2mBdBxtRqalFcGjwhTFSLTDGD5uZGSg9KB/dUl roUv2x4YRWtLcEAdv4RaUwAoMh0X1f30O+LyNkxEzXwafX8aSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWYj6BzqTGxQRi0u8emez4rZDyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGRjNjVjODYtZWM3ZC0z MjJhLTllYWUtYWU3M2Y1YWY0NDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsS5glliAC327L6pOwlm3VTxw5kziTg8KZe65zjLJk1tjAmU1xuO/Po 7CbnYAFeSM1KE0nB+skq06dGOjKBirDVXP85qbkW0xbr+PBwz2GnTL6wXqTOK+Qr Nf8L2kQORb8u3Mo7TRSIbRExGZ6/iHnaddCDoEqhHG1lNg7/JPzWeJskTRGXM+vw J6/2D317NFD2gBq2wrUbyfz81od3B0D/pyxf9D08fN0kW3ZIoQQCrGDrWXAoRN6C D0NDUqUEIe6HFGGWQ0ADj1ciqYP5GX73MYb9n4WdmcjmCmxFG0xW9kBuHheeS2OO i5a96nMiRiWLvsep6zWKX1JJscL5Mdw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:46 2025 by rpki-client