$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c189b78a-6704-3132-97a1-8be3500c8124.roa File: c189b78a-6704-3132-97a1-8be3500c8124.roa (raw, json) Hash identifier: Np8M8c45eewH+j/1ZzXGf+ibX91JP5BOPx6LryiKLgM= Subject key identifier: A9:08:3D:B8:FF:D4:1B:DE:F6:5F:5B:31:0C:E2:FA:94:F5:D1:6B:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24A3F101B6478C311C000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c189b78a-6704-3132-97a1-8be3500c8124.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.209.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4a:3f:10:1b:64:78:c3:11:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=5c667ce2-cede-41bf-8abd-87fe66f0e8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2b:32:1f:43:e9:85:eb:01:63:e9:a1:98:b5: 64:19:f4:02:35:d0:b9:0e:a0:57:0f:01:07:d5:90: 57:d0:05:28:f3:5b:47:cc:33:0c:32:fb:db:40:d0: 58:fb:71:9f:3b:1a:29:8d:25:26:68:d0:a4:9b:fe: d7:55:8b:d6:ad:62:1b:c7:ff:4b:7f:00:ce:73:f7: b4:ef:60:05:da:66:f4:90:e1:7b:6e:9c:f6:64:8a: 0d:ae:02:9d:2a:74:87:96:94:c8:88:d3:85:a7:16: 52:a6:15:9e:04:d1:6c:58:ab:84:a9:1e:e6:d2:56: 66:fc:88:94:7e:30:94:d5:e4:09:49:63:df:c7:82: e9:76:0d:b6:b5:62:07:55:ae:ec:0f:21:e7:9e:f5: 50:31:4e:c8:41:67:4a:a5:3d:7c:2e:dc:fb:3c:6e: ab:dc:ed:d8:1a:48:d5:b6:dc:0d:46:a7:b9:9b:f1: fe:a2:6e:02:e1:1b:92:c7:bc:2e:68:d0:01:74:90: 2d:0d:e5:21:fe:72:f5:02:ad:ba:ec:bf:4f:01:33: dd:cb:6a:fb:2b:58:e1:9a:43:4a:80:61:da:82:5d: dd:a8:c5:8a:49:f2:28:32:07:54:c4:ee:08:14:19: 91:fb:66:dc:ba:04:ae:30:b8:2e:b5:a1:d9:f3:c0: 5c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:08:3D:B8:FF:D4:1B:DE:F6:5F:5B:31:0C:E2:FA:94:F5:D1:6B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c189b78a-6704-3132-97a1-8be3500c8124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6a:f8:31:f3:8d:a4:f0:c5:3e:7b:4e:65:b4:98:e5:a1:b6: a8:4a:3e:a1:6a:e9:b2:02:33:db:dd:f7:0f:56:a5:55:0a:01: cd:8d:fb:99:b4:45:f7:18:c3:34:2f:76:d8:b7:7f:49:99:3d: 74:84:42:72:4d:2e:fe:99:a6:f6:e0:ab:72:3b:0a:33:b0:60: cf:3b:81:d7:d2:69:89:f1:77:3f:b5:d3:43:3a:61:37:f0:45: 42:3b:af:a9:3c:d3:28:f6:1d:5a:3f:05:09:29:7c:f3:a9:37: 83:e8:08:be:d6:76:5f:4b:8e:9c:c7:db:1b:5e:22:47:16:b1: eb:f7:9f:61:8a:39:74:26:86:9f:55:3d:35:af:62:f2:92:93: db:0c:e4:e1:3b:ea:42:b7:38:6a:d1:55:a4:5c:c7:a1:a3:c9: 44:15:5e:ba:c1:db:cb:43:a5:ca:c0:02:a5:65:13:a7:2b:b8: ae:64:9b:d5:6b:4f:85:bd:2b:67:6e:a3:61:d4:dd:a3:04:1b: ff:47:5c:2a:a8:65:d4:c5:57:14:92:60:53:b7:b0:1e:21:09: e7:7c:2e:74:96:dd:3c:73:26:53:e0:59:b4:9a:3b:38:af:5f: e1:e6:5f:f9:fc:aa:fb:db:ba:ec:4f:b6:11:97:0b:01:73:da: 41:06:e8:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ko/EBtkeMMRwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NWM2NjdjZTItY2VkZS00MWJmLThhYmQtODdmZTY2ZjBlOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SsyH0PphesBY+mhmLVkGfQCNdC5DqBXDwEH 1ZBX0AUo81tHzDMMMvvbQNBY+3GfOxopjSUmaNCkm/7XVYvWrWIbx/9LfwDOc/e0 72AF2mb0kOF7bpz2ZIoNrgKdKnSHlpTIiNOFpxZSphWeBNFsWKuEqR7m0lZm/IiU fjCU1eQJSWPfx4Lpdg22tWIHVa7sDyHnnvVQMU7IQWdKpT18Ltz7PG6r3O3YGkjV ttwNRqe5m/H+om4C4RuSx7wuaNABdJAtDeUh/nL1Aq267L9PATPdy2r7K1jhmkNK gGHagl3dqMWKSfIoMgdUxO4IFBmR+2bcugSuMLgutaHZ88BcLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkIPbj/1Bve9l9bMQzi+pT10WuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzE4OWI3OGEtNjcwNC0z MTMyLTk3YTEtOGJlMzUwMGM4MTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRq+DHzjaTwxT57TmW0mOWhtqhKPqFq6bICM9vd9w9WpVUKAc2N+5m0 RfcYwzQvdti3f0mZPXSEQnJNLv6Zpvbgq3I7CjOwYM87gdfSaYnxdz+100M6YTfw RUI7r6k80yj2HVo/BQkpfPOpN4PoCL7Wdl9LjpzH2xteIkcWsev3n2GKOXQmhp9V PTWvYvKSk9sM5OE76kK3OGrRVaRcx6GjyUQVXrrB28tDpcrAAqVlE6cruK5km9Vr T4W9K2duo2HU3aMEG/9HXCqoZdTFVxSSYFO3sB4hCed8LnSW3TxzJlPgWbSaOziv X+HmX/n8qvvbuuxPthGXCwFz2kEG6Ks= -----END CERTIFICATE-----Generated at Thu Oct 16 01:47:03 2025 by rpki-client