$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85f9d3d8-03ee-386b-8693-65dd94833163.roa File: 85f9d3d8-03ee-386b-8693-65dd94833163.roa (raw, json) Hash identifier: l8m4/bw4yb+Magz+0UQybZFdRZbGL28/y+eCA1sNvds= Subject key identifier: 10:16:C2:D9:F3:0A:52:0A:83:57:70:73:85:97:E0:95:87:43:C1:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29C080C7A243645EF1380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85f9d3d8-03ee-386b-8693-65dd94833163.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9c:08:0c:7a:24:36:45:ef:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=0dcf1c53-b804-4cf3-8fda-b51e77004b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:02:d2:db:68:65:1e:45:e6:1c:74:33:ec: aa:03:8b:b5:e5:a9:6d:54:ee:67:00:83:1c:83:d4: e8:4a:98:6f:40:0b:3e:6b:33:34:c3:f6:9c:1f:a3: 69:11:bc:87:aa:9b:9c:25:f4:69:6d:95:c7:9b:92: c9:29:22:39:8a:58:7d:e0:10:12:6c:87:44:10:7e: bf:82:f6:d1:70:1c:bb:9d:9b:5f:7d:84:32:79:4b: a5:b0:f9:76:47:79:d1:b7:a1:c1:ec:2e:3e:6c:23: 25:6d:23:b7:39:5f:79:5d:f5:2e:60:52:23:53:95: 9a:0f:9d:2c:cb:b4:80:65:e6:0e:0f:5a:61:ca:30: 77:3f:26:6a:28:d8:ab:14:d7:79:58:bf:95:db:34: 89:9d:b2:4f:86:fc:33:31:51:e9:96:9b:e1:2e:dd: 3f:db:15:3c:88:e4:5f:76:88:17:f3:46:31:34:46: e4:2e:97:2f:e8:0c:71:27:7c:26:77:d4:51:99:2f: 4d:2e:d8:76:0f:6d:c0:7b:1e:ae:ec:44:58:22:a2: 90:9c:b4:e9:39:2f:06:11:05:2f:79:4c:bf:12:8d: 98:25:24:95:b6:87:3f:c4:c6:c0:d0:bd:3e:d0:79: dc:b3:86:b5:a6:d9:19:49:f5:cd:6a:e7:58:c3:46: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:16:C2:D9:F3:0A:52:0A:83:57:70:73:85:97:E0:95:87:43:C1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85f9d3d8-03ee-386b-8693-65dd94833163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:33:b5:75:b0:41:39:17:09:cc:09:6e:16:82:c2:d5:72:a2: 4a:95:22:85:11:c8:0e:d7:f2:d2:3a:c9:6c:a5:1c:3a:33:f8: ef:e3:80:e9:1f:bd:01:22:df:c5:45:ba:41:fa:f9:1d:5a:28: 86:cd:73:e0:e3:d6:50:5f:88:fd:6c:d9:bf:89:c1:56:3f:6f: f3:31:4e:38:4a:d1:8b:a6:ea:50:3d:11:3b:e4:0f:5a:00:2d: 9d:aa:96:21:c4:75:49:48:cf:26:93:dc:6f:23:97:5e:4f:ba: 14:c8:05:a2:25:b2:2c:49:8f:72:a7:c6:22:38:3f:46:1c:5c: bb:cf:02:ed:18:8d:57:2c:8e:80:a9:5c:a2:d2:45:37:a3:91: 40:e2:6f:7f:c9:08:df:f0:3e:bd:6d:7f:82:73:b3:5f:f7:b4: 2c:f8:e4:29:63:f5:0b:1e:62:26:be:0c:b3:1d:a8:97:30:43: ea:39:40:21:6e:4f:dc:e7:69:c9:29:29:bf:c2:9d:43:75:28: 4d:46:0d:3e:e2:d9:53:30:59:b3:a0:fc:16:48:e3:ff:71:cb: cb:cd:5e:1c:89:e4:04:83:ed:e9:b2:23:02:c8:58:5e:cb:60: df:ff:3b:f9:69:bc:07:18:fe:09:e9:fd:c9:98:80:6c:66:2a: b4:19:0f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pwIDHokNkXvE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MGRjZjFjNTMtYjgwNC00Y2YzLThmZGEtYjUxZTc3MDA0YjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGoC0ttoZR5F5hx0M+yqA4u15altVO5nAIMc g9ToSphvQAs+azM0w/acH6NpEbyHqpucJfRpbZXHm5LJKSI5ilh94BASbIdEEH6/ gvbRcBy7nZtffYQyeUulsPl2R3nRt6HB7C4+bCMlbSO3OV95XfUuYFIjU5WaD50s y7SAZeYOD1phyjB3PyZqKNirFNd5WL+V2zSJnbJPhvwzMVHplpvhLt0/2xU8iORf dogX80YxNEbkLpcv6AxxJ3wmd9RRmS9NLth2D23Aex6u7ERYIqKQnLTpOS8GEQUv eUy/Eo2YJSSVtoc/xMbA0L0+0Hncs4a1ptkZSfXNaudYw0Zw+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAWwtnzClIKg1dwc4WX4JWHQ8FuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODVmOWQzZDgtMDNlZS0z ODZiLTg2OTMtNjVkZDk0ODMzMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoztXWwQTkXCcwJbhaCwtVyokqVIoURyA7X8tI6yWylHDoz+O/jgOkf vQEi38VFukH6+R1aKIbNc+Dj1lBfiP1s2b+JwVY/b/MxTjhK0Yum6lA9ETvkD1oA LZ2qliHEdUlIzyaT3G8jl15PuhTIBaIlsixJj3KnxiI4P0YcXLvPAu0YjVcsjoCp XKLSRTejkUDib3/JCN/wPr1tf4Jzs1/3tCz45Clj9QseYia+DLMdqJcwQ+o5QCFu T9znackpKb/CnUN1KE1GDT7i2VMwWbOg/BZI4/9xy8vNXhyJ5ASD7emyIwLIWF7L YN//O/lpvAcY/gnp/cmYgGxmKrQZD/s= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:37 2025 by rpki-client