$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9599ca43-2047-3e7d-b435-8dad11ccb61e.roa File: 9599ca43-2047-3e7d-b435-8dad11ccb61e.roa (raw, json) Hash identifier: ezUXxwDrny8eMUixyVn1PRRUd96Xn736DkSZNAFZSSY= Subject key identifier: CB:9C:81:47:39:E4:BC:53:CC:D5:C8:5B:3C:01:35:B2:66:A3:90:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2046319EBCA018EF973D8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9599ca43-2047-3e7d-b435-8dad11ccb61e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:04:63:19:eb:ca:01:8e:f9:73:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ab46bf83-2123-4090-a01e-4ec8cb3b4962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:cc:41:b1:ce:66:23:19:e9:df:c0:5b:65: c8:c0:64:e2:96:b3:8b:8c:e9:9a:ab:cd:99:97:00: 53:44:7e:f9:7e:6a:3d:93:7f:00:17:ae:6b:df:64: 1d:3f:81:e2:b7:78:86:88:4a:4e:82:f9:d8:8f:fc: c1:8a:9d:f7:33:72:9a:0b:ae:3f:91:5e:3c:e6:4d: 18:bd:15:bc:3b:61:8f:da:03:3d:72:cf:7f:a0:7c: f6:4e:69:60:dc:18:c7:e7:d6:df:8a:f9:ad:ce:17: 91:e4:bc:e8:29:3c:f2:2e:4d:ac:df:9e:f5:07:18: 97:d2:5e:53:47:32:57:57:f3:af:2b:9d:96:f8:3b: 49:e5:3c:c1:07:0e:38:83:1c:d5:f3:74:74:23:ea: d7:45:d2:ab:1c:be:6c:9f:d3:ef:7b:69:10:76:38: 26:78:53:22:79:f5:43:55:98:7d:b9:28:ec:6c:7e: e5:f6:a0:e8:f1:1b:66:99:e6:be:94:5f:0b:cf:51: 1d:13:02:82:ee:af:0b:f2:8d:2a:a9:ca:c0:81:41: 2f:bf:ca:74:a5:a8:90:f1:bd:cf:28:00:44:92:6e: 27:91:0c:e1:ae:76:e5:69:f9:19:53:cb:56:14:8d: 60:f4:d0:3e:0d:6b:41:43:01:08:a9:2f:ec:42:d6: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9C:81:47:39:E4:BC:53:CC:D5:C8:5B:3C:01:35:B2:66:A3:90:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9599ca43-2047-3e7d-b435-8dad11ccb61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:56:5d:ff:1c:f2:64:92:23:b6:e5:29:da:b9:f6:18:0e:53: 06:44:1a:4b:1f:89:e7:b3:d3:a8:bf:b2:69:34:cb:32:3c:5f: 55:d7:c2:ad:36:f8:9a:c8:10:91:75:0d:9e:ac:2f:90:a5:89: a7:56:f9:47:8f:3b:c5:dd:21:d3:e7:24:f0:30:bb:6c:81:04: e8:bc:f4:48:2f:01:32:4d:97:f5:38:62:fc:bc:d2:df:4b:a2: a9:c6:20:08:b1:ba:d8:c4:3b:58:41:4c:46:0a:60:f5:ad:e6: 12:79:1d:cf:9a:f4:b9:08:33:5c:37:47:de:b5:20:b1:cd:fe: 45:25:35:47:52:19:a4:3f:7a:f1:bb:5e:76:88:71:6f:16:c3: 5c:f0:d1:c2:d0:cb:e6:89:e8:5c:20:f4:fa:93:de:88:16:f3: cd:fb:ea:94:8d:09:09:ef:e3:a5:73:4e:e1:dc:70:75:ac:0f: b5:a5:37:0d:87:5a:06:19:58:0f:53:e0:28:9e:17:49:57:23: ad:6e:b4:63:cb:7d:2f:cc:48:22:c7:49:52:61:b8:26:d2:36: de:f8:db:d3:5b:b3:19:9b:bc:39:4e:32:a3:f8:0b:4a:a2:7c: e4:0e:cd:d2:8e:5a:07:f0:8d:1e:76:24:4d:39:0b:09:1d:7a: 7b:5d:9e:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gRjGevKAY75c9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YWI0NmJmODMtMjEyMy00MDkwLWEwMWUtNGVjOGNiM2I0OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCDMQbHOZiMZ6d/AW2XIwGTilrOLjOmaq82Z lwBTRH75fmo9k38AF65r32QdP4Hit3iGiEpOgvnYj/zBip33M3KaC64/kV485k0Y vRW8O2GP2gM9cs9/oHz2Tmlg3BjH59bfivmtzheR5LzoKTzyLk2s3571BxiX0l5T RzJXV/OvK52W+DtJ5TzBBw44gxzV83R0I+rXRdKrHL5sn9Pve2kQdjgmeFMiefVD VZh9uSjsbH7l9qDo8Rtmmea+lF8Lz1EdEwKC7q8L8o0qqcrAgUEvv8p0paiQ8b3P KABEkm4nkQzhrnblafkZU8tWFI1g9NA+DWtBQwEIqS/sQtY4uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMucgUc55LxTzNXIWzwBNbJmo5CEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTU5OWNhNDMtMjA0Ny0z ZTdkLWI0MzUtOGRhZDExY2NiNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlWXf8c8mSSI7blKdq59hgOUwZEGksfieez06i/smk0yzI8X1XXwq02 +JrIEJF1DZ6sL5CliadW+UePO8XdIdPnJPAwu2yBBOi89EgvATJNl/U4Yvy80t9L oqnGIAixutjEO1hBTEYKYPWt5hJ5Hc+a9LkIM1w3R961ILHN/kUlNUdSGaQ/evG7 XnaIcW8Ww1zw0cLQy+aJ6Fwg9PqT3ogW88376pSNCQnv46VzTuHccHWsD7WlNw2H WgYZWA9T4CieF0lXI61utGPLfS/MSCLHSVJhuCbSNt7429NbsxmbvDlOMqP4C0qi fOQOzdKOWgfwjR52JE05Cwkdentdnkk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:38:20 2025 by rpki-client