$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa File: 4b45e218-fc0f-3dc0-8555-282a89f38be2.roa (raw, json) Hash identifier: 27cPsPZy142Sc/KHwv+fyQMey+njqo54a2cGAQ/80Hw= Subject key identifier: 07:55:E7:3A:B8:84:45:A0:D8:BB:38:60:97:FC:E1:90:09:45:88:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2A080FBE726A902C6CF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.209.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:a0:80:fb:e7:26:a9:02:c6:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=44be23c1-fe6e-4ddb-b346-a8d028d85f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:4a:64:c4:db:01:00:44:d0:0f:7e:42:33: a8:71:45:96:35:2a:d8:88:e1:1c:bc:97:37:0e:c1: 2f:25:8e:a3:a3:1f:32:b7:45:3f:cb:5d:45:bc:75: 86:a5:16:5c:af:6c:e7:e4:c4:04:6e:eb:13:f1:d6: 9c:05:f3:32:d2:4d:28:0a:84:bf:1d:8c:f9:4b:23: 4a:9f:25:19:c3:fe:dc:79:ae:cd:20:75:69:ee:e2: 1c:fa:59:a7:ce:ce:51:f6:12:10:66:9e:25:99:78: 7a:bd:8e:4f:ee:8d:a0:cc:8c:60:57:0d:77:76:0f: f3:76:80:31:ef:88:c5:90:b4:cf:a8:56:89:35:f0: 87:b9:9a:9c:21:8a:25:47:c5:05:28:18:95:8f:7f: 67:c1:3a:05:a8:0a:92:26:55:88:b6:0e:25:c4:5c: 93:46:31:fe:9c:29:14:ab:fc:34:91:cc:0e:b0:fb: ef:d3:ba:65:f6:af:75:ea:fd:45:9d:3a:59:f7:eb: 34:57:c6:f8:62:7e:6f:5a:2d:8d:1f:ba:a2:ae:18: 49:ae:69:e5:54:d1:bc:70:57:c9:31:40:51:2f:92: cf:73:07:50:e7:67:6f:f0:47:e7:9e:f1:d7:10:f5: 3c:dc:89:de:03:ef:2b:a8:0a:0a:47:4b:cf:3a:2e: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:55:E7:3A:B8:84:45:A0:D8:BB:38:60:97:FC:E1:90:09:45:88:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:7d:b2:4d:e5:41:4a:48:fc:41:1a:d4:e6:01:16:8a:d0:6e: 16:f5:55:15:bc:9c:b2:f8:c5:b3:8a:a8:a5:ee:38:f8:7b:7a: 3d:d7:47:bb:a0:a0:1b:6b:ee:b0:c2:75:42:8c:45:78:ad:0a: 50:7d:03:da:4a:73:d2:36:72:68:78:d5:35:fd:5b:50:00:e3: 65:f9:bb:45:b6:84:78:18:99:80:41:e7:0a:34:5b:f8:96:e0: 38:61:48:88:a2:09:c6:05:b2:98:6a:83:0f:0e:40:53:c4:09: 9e:b4:b3:79:ba:16:51:45:c9:41:4d:c9:0b:bb:8d:0d:ac:21: e3:4b:b2:3f:16:12:9c:01:ff:5b:bb:a8:3c:43:46:9b:60:a4: 71:a6:97:04:e9:72:5a:79:49:53:f8:36:1a:f2:54:5e:61:bb: 98:ca:57:b3:7e:f2:98:67:4d:74:35:c1:33:39:a3:a0:bf:30: 5b:d4:3f:4e:29:84:bc:fa:7a:12:f8:ff:c6:92:d2:64:b3:c4: 2f:84:33:40:4e:04:a1:96:ad:a7:36:9a:38:2f:c2:0a:bc:ea: b3:3d:7e:2f:a7:9d:f9:11:9b:9b:7a:c4:21:63:ff:99:05:f4: d1:dc:90:8f:4d:24:7d:fb:8d:a1:d9:25:53:62:7e:c0:34:b3: 93:dd:61:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28qCA++cmqQLGzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDRiZTIzYzEtZmU2ZS00ZGRiLWIzNDYtYThkMDI4ZDg1ZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoJKZMTbAQBE0A9+QjOocUWWNSrYiOEcvJc3 DsEvJY6jox8yt0U/y11FvHWGpRZcr2zn5MQEbusT8dacBfMy0k0oCoS/HYz5SyNK nyUZw/7cea7NIHVp7uIc+lmnzs5R9hIQZp4lmXh6vY5P7o2gzIxgVw13dg/zdoAx 74jFkLTPqFaJNfCHuZqcIYolR8UFKBiVj39nwToFqAqSJlWItg4lxFyTRjH+nCkU q/w0kcwOsPvv07pl9q916v1FnTpZ9+s0V8b4Yn5vWi2NH7qirhhJrmnlVNG8cFfJ MUBRL5LPcwdQ52dv8EfnnvHXEPU83IneA+8rqAoKR0vPOi5M6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdV5zq4hEWg2Ls4YJf84ZAJRYgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGI0NWUyMTgtZmMwZi0z ZGMwLTg1NTUtMjgyYTg5ZjM4YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ9sk3lQUpI/EEa1OYBForQbhb1VRW8nLL4xbOKqKXuOPh7ej3XR7ug oBtr7rDCdUKMRXitClB9A9pKc9I2cmh41TX9W1AA42X5u0W2hHgYmYBB5wo0W/iW 4DhhSIiiCcYFsphqgw8OQFPECZ60s3m6FlFFyUFNyQu7jQ2sIeNLsj8WEpwB/1u7 qDxDRptgpHGmlwTpclp5SVP4NhryVF5hu5jKV7N+8phnTXQ1wTM5o6C/MFvUP04p hLz6ehL4/8aS0mSzxC+EM0BOBKGWrac2mjgvwgq86rM9fi+nnfkRm5t6xCFj/5kF 9NHckI9NJH37jaHZJVNifsA0s5PdYf8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:36 2025 by rpki-client