$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/309e3af1-a30e-3a51-b5f2-a700f0ef79d2.roa File: 309e3af1-a30e-3a51-b5f2-a700f0ef79d2.roa (raw, json) Hash identifier: S6/4ptuq4ixsfy7ciFCxvbtWcGfWTgbKifdALFvx7M0= Subject key identifier: F9:07:B8:E4:02:1A:85:23:A8:FE:AB:FC:38:A8:D9:4E:01:69:2C:5E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28582D5180AC0EEC04D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/309e3af1-a30e-3a51-b5f2-a700f0ef79d2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:85:82:d5:18:0a:c0:ee:c0:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=83a27d9a-2ddd-4417-b79c-dcf4f19ef3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:1d:88:93:cc:e1:29:99:34:4d:ed:5d:31: 5f:1e:94:f9:72:2e:3f:1b:1e:31:33:b5:e3:25:8b: 06:58:96:d1:ae:39:00:9e:3d:e6:82:f8:53:ae:ca: ba:16:59:36:ae:28:40:c7:43:d4:db:53:5e:18:a2: b3:23:7a:de:ba:41:c0:39:f1:80:da:0c:be:ec:d4: 36:a2:23:98:f1:4d:b0:5e:2e:03:90:fe:76:02:8f: b1:0f:0d:16:cd:d7:13:95:ba:1a:35:be:1f:54:53: 11:49:d5:a6:7b:73:a6:a0:c9:6c:92:52:ec:d1:bf: 33:63:20:41:b1:53:54:f3:66:97:b7:75:f1:84:be: f7:7f:5e:97:81:31:90:72:05:58:8b:c2:2d:a5:8e: d4:3e:a6:ff:8e:fc:02:a8:b3:b3:c7:b3:e8:98:41: af:bb:ee:82:55:71:b9:c9:df:60:50:72:5e:5c:31: 05:cf:72:8f:c1:6c:a0:0a:47:85:33:93:92:de:76: 59:3f:04:ea:c8:9c:e0:1e:7d:76:3f:b0:cd:d3:9d: d9:0b:66:9d:a1:53:4b:13:0c:e4:07:c6:8e:40:a5: 21:f8:a0:f8:d1:bb:1b:51:74:90:08:1d:a0:7e:12: 3e:66:6f:46:bd:e6:e8:60:f1:f9:32:53:42:d6:85: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:07:B8:E4:02:1A:85:23:A8:FE:AB:FC:38:A8:D9:4E:01:69:2C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/309e3af1-a30e-3a51-b5f2-a700f0ef79d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b0:38:cd:9b:2f:7d:ce:4c:ea:1f:14:2b:1b:1b:fa:c5:4d: 3a:7f:08:36:b0:50:62:fb:30:14:46:72:b4:14:eb:98:48:ec: 22:77:29:6b:18:aa:e1:14:f0:11:79:1d:b9:c9:c2:10:27:75: 2e:48:cd:92:2d:3a:17:db:eb:a9:61:d5:b1:1a:14:bf:0e:af: 47:78:b0:f4:0f:1c:de:2e:88:fe:3b:8d:37:4e:d0:e9:35:63: 23:e6:e0:b8:22:ff:ed:73:09:3d:db:ae:fd:85:b7:62:7a:3a: 26:e6:fb:96:bb:8b:8d:1c:fa:72:0f:cb:c7:1d:74:88:99:ba: 62:8b:c0:7b:97:8d:cb:0e:74:e1:8b:3c:10:c5:58:5b:4b:24: 56:30:7f:d2:a0:d8:10:c6:ce:de:d5:21:57:3a:84:b5:79:27: c7:9e:58:a2:01:ed:72:00:bb:ad:b6:61:56:25:36:98:84:11: 07:26:5c:e6:82:bc:fe:3a:b6:06:39:a5:2b:d2:32:33:70:bf: 4f:5b:5e:a2:35:7c:cc:82:3a:ba:71:64:6d:3b:85:b1:36:97: 83:19:ec:9b:f7:6e:8b:4f:2d:24:2b:03:2a:69:bb:7a:1d:3b: 44:01:9c:0a:6f:55:fa:60:d8:a5:76:3e:67:92:de:a5:4b:f6: c6:6b:a9:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oWC1RgKwO7ATYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODNhMjdkOWEtMmRkZC00NDE3LWI3OWMtZGNmNGYxOWVmM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD0diJPM4SmZNE3tXTFfHpT5ci4/Gx4xM7Xj JYsGWJbRrjkAnj3mgvhTrsq6Flk2rihAx0PU21NeGKKzI3reukHAOfGA2gy+7NQ2 oiOY8U2wXi4DkP52Ao+xDw0WzdcTlboaNb4fVFMRSdWme3OmoMlsklLs0b8zYyBB sVNU82aXt3XxhL73f16XgTGQcgVYi8ItpY7UPqb/jvwCqLOzx7PomEGvu+6CVXG5 yd9gUHJeXDEFz3KPwWygCkeFM5OS3nZZPwTqyJzgHn12P7DN053ZC2adoVNLEwzk B8aOQKUh+KD40bsbUXSQCB2gfhI+Zm9GveboYPH5MlNC1oWEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkHuOQCGoUjqP6r/Dio2U4BaSxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzA5ZTNhZjEtYTMwZS0z YTUxLWI1ZjItYTcwMGYwZWY3OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOwOM2bL33OTOofFCsbG/rFTTp/CDawUGL7MBRGcrQU65hI7CJ3KWsY quEU8BF5HbnJwhAndS5IzZItOhfb66lh1bEaFL8Or0d4sPQPHN4uiP47jTdO0Ok1 YyPm4Lgi/+1zCT3brv2Ft2J6Oibm+5a7i40c+nIPy8cddIiZumKLwHuXjcsOdOGL PBDFWFtLJFYwf9Kg2BDGzt7VIVc6hLV5J8eeWKIB7XIAu622YVYlNpiEEQcmXOaC vP46tgY5pSvSMjNwv09bXqI1fMyCOrpxZG07hbE2l4MZ7Jv3botPLSQrAyppu3od O0QBnApvVfpg2KV2PmeS3qVL9sZrqWA= -----END CERTIFICATE-----Generated at Thu Oct 16 01:57:36 2025 by rpki-client