$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25820c3a-f5e5-3985-a127-acc836c819f9.roa File: 25820c3a-f5e5-3985-a127-acc836c819f9.roa (raw, json) Hash identifier: IUqyrs+vrf7zBA8qvXnA9xq04dMAi2O10C3rp38Fxdc= Subject key identifier: 0F:95:27:FD:AC:1B:06:4F:C7:79:AD:4A:43:80:C3:69:A8:88:1C:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24B1A08B65FECB53B27C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25820c3a-f5e5-3985-a127-acc836c819f9.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4b:1a:08:b6:5f:ec:b5:3b:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ad8c954f-7a7b-44c8-86d2-9240dbcca903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:80:de:04:38:e5:06:44:0a:ac:53:be:07:a1: 6a:f4:18:e4:52:8d:33:b7:ea:37:fe:c6:db:74:4d: 2f:c0:1c:c3:ea:e9:5e:4b:0e:22:d1:56:15:19:2a: a1:dd:9d:99:0b:8b:8d:27:1b:19:6a:9d:5f:09:37: ba:5e:ae:eb:44:01:d2:5b:f7:63:d5:1a:83:e3:29: ef:5c:05:1d:86:27:f7:da:f9:4e:da:1d:7c:af:3e: c6:b2:52:40:36:a1:a3:0d:2a:98:80:c2:5d:6c:4d: 7c:92:66:e2:f7:59:10:94:0f:1c:da:90:ea:ed:41: 53:3b:8d:9f:d1:41:19:95:97:c4:00:71:db:d2:4a: e2:48:91:32:0c:98:f4:38:59:5b:8a:1a:1f:a8:10: 71:70:28:35:a8:b6:98:89:26:98:e2:66:5a:ec:6f: 9d:f4:8c:ff:73:44:45:e0:83:38:78:cb:9d:45:c5: 6f:31:77:18:82:e4:05:68:8d:cd:55:83:cd:1b:59: 42:47:67:11:21:d0:2f:15:04:91:ee:2c:03:6a:50: fb:fc:53:99:3b:fb:53:80:20:6c:de:78:23:6d:94: 22:6a:67:15:1f:c3:83:c0:e9:6e:b8:8e:b6:fe:20: a8:a4:c3:49:ce:5d:e6:50:aa:f9:ed:b9:f2:b7:8a: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:95:27:FD:AC:1B:06:4F:C7:79:AD:4A:43:80:C3:69:A8:88:1C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25820c3a-f5e5-3985-a127-acc836c819f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:61:37:39:97:0e:af:6e:dc:4f:09:c4:89:a0:52:b0:f8:5b: 51:a8:2c:95:1a:5b:81:8f:81:de:10:59:d6:03:f1:2b:a3:07: ca:d0:04:f2:1e:2f:ac:eb:2b:2d:12:e5:57:fc:52:aa:e4:cc: 4c:82:4b:e3:77:d0:71:13:c2:b3:1c:9e:10:8c:51:e9:ba:fc: f1:e5:71:18:c3:af:cb:db:32:63:f3:27:8d:39:fa:0b:5c:3b: 64:14:0f:c0:62:9e:b2:ec:36:22:ae:93:45:93:2c:9d:0f:7a: 05:25:ab:d8:53:d6:5a:40:ae:e2:2e:e1:89:e0:c1:a1:ca:57: b7:00:ec:ff:e5:72:bf:68:ba:47:60:2a:f6:09:73:b0:23:a8: ea:7f:c9:c6:d9:9d:ea:88:44:28:09:81:27:a9:28:df:c7:cd: 44:89:44:f5:f0:0a:f8:55:d8:e5:35:fb:54:2a:55:1e:54:0e: eb:35:61:6c:80:a9:ee:c9:19:21:43:f8:18:1e:83:62:fa:54: 9e:e3:0a:df:f7:47:09:ce:56:49:b1:1f:d1:99:a5:46:71:76: 93:68:8c:d3:2a:23:70:a8:37:58:98:50:9b:5e:64:05:e3:a5: 85:00:a2:be:1d:4a:6b:d6:b7:4f:5c:1f:8a:01:39:a8:7f:df: 0e:1b:f0:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ksaCLZf7LU7J8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YWQ4Yzk1NGYtN2E3Yi00NGM4LTg2ZDItOTI0MGRiY2NhOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIDeBDjlBkQKrFO+B6Fq9BjkUo0zt+o3/sbb dE0vwBzD6uleSw4i0VYVGSqh3Z2ZC4uNJxsZap1fCTe6Xq7rRAHSW/dj1RqD4ynv XAUdhif32vlO2h18rz7GslJANqGjDSqYgMJdbE18kmbi91kQlA8c2pDq7UFTO42f 0UEZlZfEAHHb0kriSJEyDJj0OFlbihofqBBxcCg1qLaYiSaY4mZa7G+d9Iz/c0RF 4IM4eMudRcVvMXcYguQFaI3NVYPNG1lCR2cRIdAvFQSR7iwDalD7/FOZO/tTgCBs 3ngjbZQiamcVH8ODwOluuI62/iCopMNJzl3mUKr57bnyt4r8cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+VJ/2sGwZPx3mtSkOAw2moiBywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjU4MjBjM2EtZjVlNS0z OTg1LWExMjctYWNjODM2YzgxOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRhNzmXDq9u3E8JxImgUrD4W1GoLJUaW4GPgd4QWdYD8SujB8rQBPIe L6zrKy0S5Vf8UqrkzEyCS+N30HETwrMcnhCMUem6/PHlcRjDr8vbMmPzJ405+gtc O2QUD8BinrLsNiKuk0WTLJ0PegUlq9hT1lpAruIu4YngwaHKV7cA7P/lcr9oukdg KvYJc7AjqOp/ycbZneqIRCgJgSepKN/HzUSJRPXwCvhV2OU1+1QqVR5UDus1YWyA qe7JGSFD+Bgeg2L6VJ7jCt/3RwnOVkmxH9GZpUZxdpNojNMqI3CoN1iYUJteZAXj pYUAor4dSmvWt09cH4oBOah/3w4b8B8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:27 2025 by rpki-client