$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c94b4c2-2d07-3949-99d9-4c38ca4ef3a2.roa File: 9c94b4c2-2d07-3949-99d9-4c38ca4ef3a2.roa (raw, json) Hash identifier: OtJkznSli9mb+ZPZx4a1tDmFeldAKgisQnta3I5Jc3g= Subject key identifier: 14:F4:B7:9F:52:A9:7B:F0:D3:66:5E:15:67:A7:F9:2E:B1:91:EB:E4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F200195F1F2BE1DB116F40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c94b4c2-2d07-3949-99d9-4c38ca4ef3a2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.199.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:00:19:5f:1f:2b:e1:db:11:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=da0429b6-568c-46b7-9043-753fe5969d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:f8:b3:c1:84:c5:89:a8:47:0c:db:cd:8c: 2d:3f:23:e5:ae:3d:58:36:70:13:d6:c4:29:1d:94: cd:2a:8d:eb:ae:7a:0c:e2:3a:72:dc:60:19:94:33: 73:e8:e1:43:cc:ca:1a:6c:54:96:b0:5e:7d:a2:f2: f7:50:e3:7a:98:a7:54:67:01:42:5b:cb:88:a5:6f: 45:5b:e8:c8:39:d7:30:00:40:66:d6:ed:56:b2:fc: 92:17:3e:60:2e:eb:45:bd:a7:da:48:b9:6a:40:8b: f8:e7:07:f1:e5:80:be:47:e2:6f:27:4e:95:08:5e: 0a:56:92:30:6e:5d:9b:8b:31:b5:31:ce:d9:11:fc: 7c:a5:94:f6:8d:c2:8d:59:b1:6e:cd:c0:e5:da:f1: 95:1d:30:7a:91:b5:ea:9e:76:5e:bc:39:0b:ef:e9: 1b:be:a6:ae:73:98:f9:42:1e:83:1e:5e:5f:37:de: 46:43:ba:73:c2:10:97:48:d3:eb:71:6b:6a:d9:00: eb:78:4f:fe:e9:16:dd:59:ec:b5:6a:db:4d:32:05: 19:88:0e:3b:44:99:4b:86:58:d6:46:47:0a:a0:4d: 42:ea:6e:9a:6d:02:3e:ca:74:a5:ac:c2:ac:38:c8: ec:71:1d:a8:98:9b:9d:86:b6:8f:41:7f:13:ab:46: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F4:B7:9F:52:A9:7B:F0:D3:66:5E:15:67:A7:F9:2E:B1:91:EB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c94b4c2-2d07-3949-99d9-4c38ca4ef3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:95:af:5f:04:72:c0:e4:18:e6:7e:6b:e6:39:fb:b6:83:0e: c4:29:59:b8:91:48:40:b9:5f:9a:c1:29:7c:94:0d:fc:12:b6: 5c:b4:74:47:04:94:16:21:98:46:0d:55:ae:8b:18:01:c8:f0: ac:14:2f:eb:0a:a9:86:d3:d0:f7:dd:a9:ef:9b:57:28:1c:f3: af:ba:1b:5d:13:a3:bf:7c:bd:b6:d0:1b:9e:68:f6:90:ee:17: d3:e5:00:eb:6e:05:6c:94:9e:95:f7:67:46:9a:8f:9d:c8:e2: a9:f3:94:2d:a6:7b:81:d1:7a:55:cb:83:a5:4c:45:9f:c3:c3: c2:1e:6a:2c:ed:d0:61:49:74:36:dc:b0:aa:c4:4c:ed:62:a9: f3:ad:97:06:95:7f:73:e3:8b:ca:fb:af:22:a0:09:94:be:af: 36:9c:47:59:96:9e:24:a3:ab:5f:42:dd:4c:f1:5e:01:04:06: d2:13:06:8c:53:b0:eb:8d:1e:06:27:f0:1e:06:e2:63:67:a2: 64:5f:f1:c1:ce:cd:b4:ff:d6:2c:91:1d:39:50:cd:93:22:e5: 41:0a:27:13:ae:a7:d7:aa:88:5e:a3:c2:c8:64:4a:ba:eb:f7: 71:a7:99:2a:d9:90:e8:74:d1:22:7c:9e:dc:d9:86:03:0c:85: 61:21:17:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gAZXx8r4dsRb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZGEwNDI5YjYtNTY4Yy00NmI3LTkwNDMtNzUzZmU1OTY5ZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbD4s8GExYmoRwzbzYwtPyPlrj1YNnAT1sQp HZTNKo3rrnoM4jpy3GAZlDNz6OFDzMoabFSWsF59ovL3UON6mKdUZwFCW8uIpW9F W+jIOdcwAEBm1u1WsvySFz5gLutFvafaSLlqQIv45wfx5YC+R+JvJ06VCF4KVpIw bl2bizG1Mc7ZEfx8pZT2jcKNWbFuzcDl2vGVHTB6kbXqnnZevDkL7+kbvqauc5j5 Qh6DHl5fN95GQ7pzwhCXSNPrcWtq2QDreE/+6RbdWey1attNMgUZiA47RJlLhljW RkcKoE1C6m6abQI+ynSlrMKsOMjscR2omJudhraPQX8Tq0YKjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT0t59SqXvw02ZeFWen+S6xkevkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWM5NGI0YzItMmQwNy0z OTQ5LTk5ZDktNGMzOGNhNGVmM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyVr18EcsDkGOZ+a+Y5+7aDDsQpWbiRSEC5X5rBKXyUDfwStly0dEcE lBYhmEYNVa6LGAHI8KwUL+sKqYbT0Pfdqe+bVygc86+6G10To798vbbQG55o9pDu F9PlAOtuBWyUnpX3Z0aaj53I4qnzlC2me4HRelXLg6VMRZ/Dw8Ieaizt0GFJdDbc sKrETO1iqfOtlwaVf3Pji8r7ryKgCZS+rzacR1mWniSjq19C3UzxXgEEBtITBoxT sOuNHgYn8B4G4mNnomRf8cHOzbT/1iyRHTlQzZMi5UEKJxOup9eqiF6jwshkSrrr 93GnmSrZkOh00SJ8ntzZhgMMhWEhF34= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:53 2025 by rpki-client