$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/933ea5b5-5ec1-3397-8d62-443a8babf2aa.roa File: 933ea5b5-5ec1-3397-8d62-443a8babf2aa.roa (raw, json) Hash identifier: Nz0Xohh/PIX0+Sn8bv32rp7yJGLaDFCD/5+9VxljToE= Subject key identifier: F4:97:A6:3C:7D:D9:63:7D:57:C9:A8:8D:7D:DE:8F:DC:18:A0:79:15 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2317BB949DC1D3F33E400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/933ea5b5-5ec1-3397-8d62-443a8babf2aa.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:31:7b:b9:49:dc:1d:3f:33:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=62d6933f-701c-4004-aa3d-0647fb70ca8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:80:90:26:50:74:8f:0b:2d:fa:a0:a9:7c:c4: 41:ff:0c:ad:dd:7d:0f:03:91:4d:15:4e:06:8e:f1: ee:0a:5b:25:f6:db:57:3f:09:1b:2d:cb:30:de:70: e9:0b:0d:31:ec:f6:f6:53:2f:0a:08:fd:c2:ed:ca: 05:87:19:8e:5a:45:7d:82:e9:5f:30:02:ad:3d:de: 1a:3b:f2:2f:3b:b4:b8:09:56:eb:3a:e7:41:46:62: 0e:29:8b:df:5a:51:02:3d:60:95:b9:4e:c5:d6:9b: 3b:fc:f9:db:90:b7:a8:20:64:d1:20:82:d9:46:af: 35:bc:da:2f:81:52:c1:9f:df:86:0f:87:ad:58:2a: b3:93:93:f4:04:91:8b:12:73:cc:ea:68:43:ea:a2: 26:da:7d:62:ff:e2:ee:a0:77:00:ba:5b:bc:86:ba: 5b:15:c5:99:90:1b:53:e1:d1:4b:5e:49:78:82:9f: 48:78:5d:ed:54:75:49:33:4e:69:c3:80:74:9c:32: 9a:3c:75:9b:57:df:e8:b0:9c:ef:98:80:5e:3f:20: 19:00:3e:de:1b:43:83:da:25:02:a4:ff:97:75:a3: ca:c4:35:50:de:1a:cb:db:0e:a0:72:ae:f8:ec:13: c7:82:44:ec:41:3f:73:bd:62:a6:eb:5a:b0:fb:39: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:A6:3C:7D:D9:63:7D:57:C9:A8:8D:7D:DE:8F:DC:18:A0:79:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/933ea5b5-5ec1-3397-8d62-443a8babf2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6a:68:22:73:ca:84:f7:cf:ad:f2:d2:93:d6:a1:ef:0d:7a: 2f:3f:be:56:22:7b:4a:c7:52:27:16:36:ce:5e:1e:77:5d:c5: f6:9f:27:43:7c:19:eb:9b:f0:2e:fc:fb:12:0f:7d:d8:eb:02: ff:8d:28:cd:79:30:81:27:95:bf:5a:24:f3:5d:ac:33:b3:d2: 48:ff:8d:b7:e1:e4:6d:93:db:ab:04:4b:bd:de:72:2d:ec:bd: 2e:92:e7:81:d4:75:9c:9b:e7:b9:d8:35:26:30:b0:4a:a0:e0: 72:04:19:25:b6:a6:24:e7:0e:67:ed:2a:3f:8c:18:34:e1:84: ca:bc:1f:44:da:0e:49:08:a7:63:3c:83:37:d6:9f:ba:41:87: d7:11:86:e1:8e:d5:bb:0c:f7:15:b5:4f:72:a9:58:3b:e8:d2: 6d:92:8f:81:0e:dc:83:25:cf:09:27:aa:b6:b9:52:41:c3:74: 66:ce:4d:fe:c1:42:d0:b5:b2:55:6d:82:76:4b:6d:f4:7b:62: e7:0e:1f:39:e6:71:d6:cc:5a:6b:71:21:91:7c:ef:d4:12:13: 1b:cb:bb:eb:31:a4:6d:d7:b3:db:8e:2b:fd:7b:eb:ab:fc:0c: 81:ca:6e:7d:56:68:05:62:a4:fe:f9:5e:b6:8a:2d:02:ac:d4: fe:57:79:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jF7uUncHT8z5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NjJkNjkzM2YtNzAxYy00MDA0LWFhM2QtMDY0N2ZiNzBjYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiICQJlB0jwst+qCpfMRB/wyt3X0PA5FNFU4G jvHuClsl9ttXPwkbLcsw3nDpCw0x7Pb2Uy8KCP3C7coFhxmOWkV9gulfMAKtPd4a O/IvO7S4CVbrOudBRmIOKYvfWlECPWCVuU7F1ps7/PnbkLeoIGTRIILZRq81vNov gVLBn9+GD4etWCqzk5P0BJGLEnPM6mhD6qIm2n1i/+LuoHcAulu8hrpbFcWZkBtT 4dFLXkl4gp9IeF3tVHVJM05pw4B0nDKaPHWbV9/osJzvmIBePyAZAD7eG0OD2iUC pP+XdaPKxDVQ3hrL2w6gcq747BPHgkTsQT9zvWKm61qw+zm8LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSXpjx92WN9V8mojX3ej9wYoHkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTMzZWE1YjUtNWVjMS0z Mzk3LThkNjItNDQzYThiYWJmMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZqaCJzyoT3z63y0pPWoe8Nei8/vlYie0rHUicWNs5eHnddxfafJ0N8 Geub8C78+xIPfdjrAv+NKM15MIEnlb9aJPNdrDOz0kj/jbfh5G2T26sES73eci3s vS6S54HUdZyb57nYNSYwsEqg4HIEGSW2piTnDmftKj+MGDThhMq8H0TaDkkIp2M8 gzfWn7pBh9cRhuGO1bsM9xW1T3KpWDvo0m2Sj4EO3IMlzwknqra5UkHDdGbOTf7B QtC1slVtgnZLbfR7YucOHznmcdbMWmtxIZF879QSExvLu+sxpG3Xs9uOK/1766v8 DIHKbn1WaAVipP75XraKLQKs1P5XeQg= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:58 2025 by rpki-client