$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9823cfe6-424c-331f-ae58-9c15b096596d.roa File: 9823cfe6-424c-331f-ae58-9c15b096596d.roa (raw, json) Hash identifier: 1/loIjpwNB9ymI5z6IjIiSRwSaq+q47bA0x+gX5P6nQ= Subject key identifier: 06:7A:46:B7:DF:54:87:90:E5:A3:C3:1E:6B:32:E3:9A:6D:E2:59:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2108BE4FC05B9DBB6DE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9823cfe6-424c-331f-ae58-9c15b096596d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:10:8b:e4:fc:05:b9:db:b6:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=0a9d5c1e-5a3f-41a1-af21-13f88aeeea80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:81:d9:81:fa:7a:a3:83:fd:7c:ce:f2:39: 9f:b7:31:90:a5:59:64:bf:fc:5c:3d:a2:22:c1:55: ef:1c:d9:f2:8c:8f:e1:a6:df:b6:40:bd:8f:0d:38: 35:11:e2:cd:ab:2e:82:98:4d:f8:e6:54:8f:5f:23: 1b:f7:fa:d7:85:22:d6:10:90:30:f4:89:06:ab:e3: fb:26:ce:94:62:44:0c:a4:02:58:0c:ad:2e:cd:be: 4e:9c:e0:f4:68:e4:2e:c7:5f:2c:62:e1:58:58:6a: dc:df:7b:7d:7c:6d:82:13:cf:27:85:c1:9e:1f:57: 1f:3b:52:76:72:77:61:9c:28:e6:f1:9e:30:1b:2e: a3:71:74:c6:8f:87:f1:17:78:68:a9:60:b4:5e:ea: c1:5a:a0:25:9d:62:b9:31:f3:1b:30:22:d1:0f:07: 59:9e:26:88:bd:7b:d1:ea:ab:47:aa:d6:4c:22:e7: 27:34:7f:38:85:02:4c:67:49:fd:03:a7:8f:66:ee: db:e6:e1:9d:55:2b:07:55:83:89:93:e4:26:19:ad: 80:f1:0e:58:e1:20:e0:5e:da:1a:80:8d:ec:c4:a2: 83:23:08:84:d2:b3:ad:83:c1:9b:0a:23:d6:d7:b4: 28:78:6c:a5:6e:3f:28:04:6f:99:11:b4:5f:8a:19: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7A:46:B7:DF:54:87:90:E5:A3:C3:1E:6B:32:E3:9A:6D:E2:59:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9823cfe6-424c-331f-ae58-9c15b096596d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d9:29:83:b3:ec:6c:67:83:3c:9a:ab:33:46:90:d2:3e:66: e9:a4:a1:c1:43:a2:79:7a:0e:f6:d8:cd:a5:23:cf:6a:12:cc: 87:b5:5c:11:6a:45:b2:a9:18:81:7b:9e:c0:b1:50:9f:ca:1c: e6:19:5b:62:fb:a1:5b:9a:c9:4b:65:c5:e2:b5:83:23:6f:5c: c0:7d:ca:ab:79:d3:2f:4c:00:f3:a1:8e:a9:d3:a4:11:99:4d: 71:4c:d7:c3:2e:5b:bb:73:eb:25:c1:23:0b:b9:62:1b:b4:58: 1f:b7:d8:7f:f3:9b:0e:bb:90:bf:18:c9:4a:93:a0:28:b3:86: bd:8d:cf:5c:f7:31:2f:29:b1:4d:b3:30:1e:91:a3:f4:fc:30: e6:4f:4c:06:a6:0a:a2:27:d2:d2:8a:6c:cf:7d:a8:30:f7:5e: b1:c5:80:7d:62:d0:51:d4:e2:83:a0:21:43:d5:42:52:0e:cf: de:91:97:0c:34:1a:08:89:ba:aa:8a:f4:bc:19:28:93:86:fe: c5:49:b5:e2:69:30:4e:4b:d0:64:4e:79:bb:1d:1d:d6:85:c0: fc:96:ee:73:04:c8:e7:05:4c:58:23:4d:1c:38:68:0c:e5:45: f1:2d:89:4b:85:ed:a8:6c:bd:91:07:c2:7c:bf:15:5a:15:2f: 6e:f4:5b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hCL5PwFudu23oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MGE5ZDVjMWUtNWEzZi00MWExLWFmMjEtMTNmODhhZWVlYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno6B2YH6eqOD/XzO8jmftzGQpVlkv/xcPaIi wVXvHNnyjI/hpt+2QL2PDTg1EeLNqy6CmE345lSPXyMb9/rXhSLWEJAw9IkGq+P7 Js6UYkQMpAJYDK0uzb5OnOD0aOQux18sYuFYWGrc33t9fG2CE88nhcGeH1cfO1J2 cndhnCjm8Z4wGy6jcXTGj4fxF3hoqWC0XurBWqAlnWK5MfMbMCLRDwdZniaIvXvR 6qtHqtZMIucnNH84hQJMZ0n9A6ePZu7b5uGdVSsHVYOJk+QmGa2A8Q5Y4SDgXtoa gI3sxKKDIwiE0rOtg8GbCiPW17QoeGylbj8oBG+ZEbRfihnKiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZ6RrffVIeQ5aPDHmsy45pt4lmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTgyM2NmZTYtNDI0Yy0z MzFmLWFlNTgtOWMxNWIwOTY1OTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNz2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTZKYOz7GxngzyaqzNGkNI+ZumkocFDonl6DvbYzaUjz2oSzIe1XBFq RbKpGIF7nsCxUJ/KHOYZW2L7oVuayUtlxeK1gyNvXMB9yqt50y9MAPOhjqnTpBGZ TXFM18MuW7tz6yXBIwu5Yhu0WB+32H/zmw67kL8YyUqToCizhr2Nz1z3MS8psU2z MB6Ro/T8MOZPTAamCqIn0tKKbM99qDD3XrHFgH1i0FHU4oOgIUPVQlIOz96Rlww0 GgiJuqqK9LwZKJOG/sVJteJpME5L0GROebsdHdaFwPyW7nMEyOcFTFgjTRw4aAzl RfEtiUuF7ahsvZEHwny/FVoVL270WzA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:03 2025 by rpki-client