$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e13c3d5-9b89-3e9d-9d38-b13e7c6c49ab.roa File: 5e13c3d5-9b89-3e9d-9d38-b13e7c6c49ab.roa (raw, json) Hash identifier: 35c8YX4C7jBGZXr2bAf/tpoUlSOxx/GnxpJb1tpZJI0= Subject key identifier: 88:F2:81:31:E3:83:B2:A1:2B:73:96:26:B5:95:A2:97:A2:66:F8:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28BB1C43D2DDD17110900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e13c3d5-9b89-3e9d-9d38-b13e7c6c49ab.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.209.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8b:b1:c4:3d:2d:dd:17:11:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=052b7ef9-0b71-45c7-b1d8-a665ec2fdd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:4d:b6:a1:30:75:63:48:dc:82:3f:11:03: 01:36:6d:80:92:08:95:1a:95:a8:82:89:5a:ac:32: 54:08:9a:c1:d0:f2:ef:bb:58:8f:be:05:6c:95:cf: d8:f0:8e:13:e4:c9:df:c7:fe:a0:0b:bb:75:30:c7: e7:f8:86:17:f9:e6:e6:39:2b:3b:31:9e:30:87:03: f0:e9:43:ff:dd:40:0c:cd:0f:a1:5e:b5:7a:5c:61: 8d:92:6b:0f:15:e0:c2:a4:2a:21:2c:c2:39:b8:61: 62:97:80:97:f9:f5:b7:d6:31:31:b9:b6:47:d6:6f: 7f:69:d7:11:00:8d:db:6f:f7:be:e2:94:25:76:1e: 60:b2:ac:e0:f6:02:20:98:c4:d3:10:46:81:8d:4c: b4:67:83:11:27:71:e0:ed:ec:91:b6:ab:d6:cc:a0: ef:3d:f6:55:d5:b0:4c:1f:24:62:23:37:c0:48:05: 6c:cc:56:12:d4:e5:f7:d0:ee:53:b5:4b:d1:3a:17: 79:eb:b5:f5:b8:24:0c:85:ce:87:bc:1f:dd:43:75: 9e:27:76:68:de:8f:c3:e2:c9:90:11:2f:bf:68:79: cd:73:a4:3c:ac:3b:39:a1:6f:9d:3b:fc:fc:5e:81: 63:83:de:80:31:d0:09:ff:b2:bb:0e:bc:e8:cd:11: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F2:81:31:E3:83:B2:A1:2B:73:96:26:B5:95:A2:97:A2:66:F8:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e13c3d5-9b89-3e9d-9d38-b13e7c6c49ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:33:5d:c5:64:42:de:ef:95:e1:10:be:68:d5:3c:66:b5:2b: 0b:75:87:57:fe:cc:8d:6c:53:48:33:e9:8a:ee:bf:af:78:ad: a4:a5:06:0a:4e:d5:52:7c:4a:59:a4:42:b8:cf:bc:21:bc:02: 4d:41:de:c9:5b:5b:d7:63:fd:7e:76:0a:24:1d:7d:90:ce:f1: a2:34:38:f2:4e:2b:b5:4c:8c:53:6c:b3:a6:37:7a:d9:2d:01: 51:9b:2b:e9:be:bf:60:09:0f:37:3c:b2:ea:14:30:76:93:f0: 13:12:4a:05:8c:45:22:0a:8f:59:6c:3e:66:07:d2:ae:e0:ea: f2:0d:e7:2d:be:ad:1c:66:6a:a5:af:c9:5c:5d:6e:53:93:80: 0a:46:7e:09:0b:1b:e9:1f:bd:56:5b:b1:07:ef:f1:50:04:a9: 54:1e:05:cf:4c:f0:3e:3b:52:97:c3:a0:21:cc:ea:b1:49:49: bb:1e:cf:76:88:2c:cb:b2:35:c2:41:80:49:54:c5:ab:2b:db: 49:8a:e4:25:f5:24:70:0d:e5:9f:b4:b5:bd:f0:20:18:6b:76: f4:f7:36:c0:42:d0:5a:51:f8:69:12:7d:57:b6:8d:1e:4f:fb: ea:98:b2:33:70:75:b9:2e:92:03:90:2b:f7:c9:4f:a8:a0:bd: fe:ac:05:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ouxxD0t3RcRCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDUyYjdlZjktMGI3MS00NWM3LWIxZDgtYTY2NWVjMmZkZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/JNtqEwdWNI3II/EQMBNm2AkgiVGpWogola rDJUCJrB0PLvu1iPvgVslc/Y8I4T5Mnfx/6gC7t1MMfn+IYX+ebmOSs7MZ4whwPw 6UP/3UAMzQ+hXrV6XGGNkmsPFeDCpCohLMI5uGFil4CX+fW31jExubZH1m9/adcR AI3bb/e+4pQldh5gsqzg9gIgmMTTEEaBjUy0Z4MRJ3Hg7eyRtqvWzKDvPfZV1bBM HyRiIzfASAVszFYS1OX30O5TtUvROhd567X1uCQMhc6HvB/dQ3WeJ3Zo3o/D4smQ ES+/aHnNc6Q8rDs5oW+dO/z8XoFjg96AMdAJ/7K7DrzozREIgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjygTHjg7KhK3OWJrWVopeiZvgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWUxM2MzZDUtOWI4OS0z ZTlkLTlkMzgtYjEzZTdjNmM0OWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkzXcVkQt7vleEQvmjVPGa1Kwt1h1f+zI1sU0gz6Yruv694raSlBgpO 1VJ8SlmkQrjPvCG8Ak1B3slbW9dj/X52CiQdfZDO8aI0OPJOK7VMjFNss6Y3etkt AVGbK+m+v2AJDzc8suoUMHaT8BMSSgWMRSIKj1lsPmYH0q7g6vIN5y2+rRxmaqWv yVxdblOTgApGfgkLG+kfvVZbsQfv8VAEqVQeBc9M8D47UpfDoCHM6rFJSbsez3aI LMuyNcJBgElUxasr20mK5CX1JHAN5Z+0tb3wIBhrdvT3NsBC0FpR+GkSfVe2jR5P ++qYsjNwdbkukgOQK/fJT6igvf6sBVc= -----END CERTIFICATE-----Generated at Thu Oct 16 01:39:56 2025 by rpki-client