$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a016abb1-da11-3bc9-b168-9deacfac6e1d.roa File: a016abb1-da11-3bc9-b168-9deacfac6e1d.roa (raw, json) Hash identifier: FuqeuBjNVNaS6rveNyWxGcpxqL7JwxER2tKrs0p4QdM= Subject key identifier: C1:0E:AA:40:B5:1C:09:8E:BC:1E:D6:C4:DD:8D:BE:9A:E1:EC:8F:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F204E4A9AC3E1B60A31DD4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a016abb1-da11-3bc9-b168-9deacfac6e1d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.209.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:04:e4:a9:ac:3e:1b:60:a3:1d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=9936a392-9aff-45e8-8489-c66ad77292db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3c:6a:c0:ca:82:f9:e3:0f:30:83:b4:bb:0c: 70:a7:9a:2e:22:ad:1e:bb:e1:ac:6c:94:03:40:a0: 5b:cf:3e:57:8a:d6:01:45:dc:de:cb:30:5c:ee:a9: fc:17:98:11:ed:50:fe:ad:f0:67:e4:22:39:f9:8a: 5a:20:63:be:fc:44:21:1a:cc:36:8b:4d:77:f4:fe: bc:c0:60:f5:9c:34:d2:e1:16:6a:96:e5:df:fb:a9: 35:67:5f:7d:92:0b:82:cf:73:88:6e:38:db:af:9e: a1:c9:ce:73:87:3b:e3:d9:63:62:de:21:07:69:c4: 6c:18:26:19:77:d4:a2:95:13:64:82:8b:f0:90:20: 54:26:4a:66:49:55:5e:a2:b0:9e:9e:42:8f:24:de: f0:4c:ba:71:ad:bf:24:b8:62:f7:2e:5e:73:69:7f: 31:63:6b:eb:a0:09:cd:81:f3:0d:88:ae:13:ce:34: 58:6a:0a:7f:f4:f3:ce:6e:ab:2c:bd:2d:76:fe:e6: b4:83:70:a4:0f:06:2e:92:34:7c:1e:0f:5e:ac:75: 09:d9:58:5e:04:5b:cd:0c:6e:e4:ac:e3:9d:d7:cf: 43:74:fc:b8:2a:1d:15:de:d7:ab:9a:0b:9e:1a:fd: ea:87:a8:46:71:d4:7a:09:d3:48:14:ee:47:e1:67: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0E:AA:40:B5:1C:09:8E:BC:1E:D6:C4:DD:8D:BE:9A:E1:EC:8F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a016abb1-da11-3bc9-b168-9deacfac6e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3f:fd:93:e0:4b:85:1a:90:ad:2a:7e:06:0a:0e:8a:33:a7: 64:33:f8:4e:c7:d6:22:27:6d:fc:62:0d:8e:92:2c:c4:db:04: e8:5a:f3:24:ba:88:f5:b3:66:57:d0:00:4f:15:30:75:85:47: 41:0f:68:44:85:60:9e:92:e6:7f:c8:94:fc:98:49:c9:87:63: 06:de:3f:38:fc:44:e1:2e:32:40:fd:0a:ce:84:8c:a6:ed:bf: 30:76:ff:59:56:cd:84:64:27:56:16:43:32:a9:92:ae:51:4c: 49:af:5c:8b:a2:bf:a1:d7:7b:ac:bb:57:f6:f3:5c:11:8c:f4: 2f:fb:9f:3a:0a:eb:9b:9e:44:3f:78:9e:99:cb:c0:94:f6:c0: f2:44:e1:98:d0:87:d8:0d:dd:0c:c3:5e:67:62:f8:72:89:21: f5:f5:b4:75:5a:19:2a:65:23:a3:d4:2b:2c:e1:b9:e8:ca:ad: a8:1b:79:64:9b:c7:83:d3:e5:5a:fd:22:21:69:18:4a:bf:ff: 29:f3:3a:e1:f4:2c:e0:ca:28:f0:55:2f:75:6f:e9:91:c9:6f: 8c:83:01:7e:eb:cb:75:62:07:48:0e:34:76:d9:a3:6f:95:36: 82:01:59:c1:92:5a:8f:10:ff:b7:20:a2:4c:3f:5e:3e:6a:65: 2d:b6:50:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gTkqaw+G2CjHdQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OTkzNmEzOTItOWFmZi00NWU4LTg0ODktYzY2YWQ3NzI5MmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjxqwMqC+eMPMIO0uwxwp5ouIq0eu+GsbJQD QKBbzz5XitYBRdzeyzBc7qn8F5gR7VD+rfBn5CI5+YpaIGO+/EQhGsw2i0139P68 wGD1nDTS4RZqluXf+6k1Z199kguCz3OIbjjbr56hyc5zhzvj2WNi3iEHacRsGCYZ d9SilRNkgovwkCBUJkpmSVVeorCenkKPJN7wTLpxrb8kuGL3Ll5zaX8xY2vroAnN gfMNiK4TzjRYagp/9PPObqssvS12/ua0g3CkDwYukjR8Hg9erHUJ2VheBFvNDG7k rOOd189DdPy4Kh0V3termgueGv3qh6hGcdR6CdNIFO5H4WdIFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEOqkC1HAmOvB7WxN2Nvprh7I+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTAxNmFiYjEtZGExMS0z YmM5LWIxNjgtOWRlYWNmYWM2ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs//ZPgS4UakK0qfgYKDoozp2Qz+E7H1iInbfxiDY6SLMTbBOha8yS6 iPWzZlfQAE8VMHWFR0EPaESFYJ6S5n/IlPyYScmHYwbePzj8ROEuMkD9Cs6EjKbt vzB2/1lWzYRkJ1YWQzKpkq5RTEmvXIuiv6HXe6y7V/bzXBGM9C/7nzoK65ueRD94 npnLwJT2wPJE4ZjQh9gN3QzDXmdi+HKJIfX1tHVaGSplI6PUKyzhuejKragbeWSb x4PT5Vr9IiFpGEq//ynzOuH0LODKKPBVL3Vv6ZHJb4yDAX7ry3ViB0gONHbZo2+V NoIBWcGSWo8Q/7cgokw/Xj5qZS22UKo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:38:22 2025 by rpki-client