$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3d8dc7e-94d4-3e02-addb-0b77b2c6f6b2.roa File: d3d8dc7e-94d4-3e02-addb-0b77b2c6f6b2.roa (raw, json) Hash identifier: 9kkZ2hllyNVq9yqYjbZxy/ghwabdztPnUqYc+TBgVxM= Subject key identifier: CE:0E:A9:84:4D:E4:56:D0:85:01:12:BE:2A:59:1F:30:2B:63:C5:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27C3E9A0B918FD96BD800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3d8dc7e-94d4-3e02-addb-0b77b2c6f6b2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7c:3e:9a:0b:91:8f:d9:6b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4ecf86ed-b9a1-4571-bc1e-863a1b96a55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:b7:3d:f2:82:08:04:5f:8b:c3:03:dd:07: c7:26:fe:0a:13:1c:3c:84:a9:db:ea:31:63:27:49: 1c:b9:68:ce:80:51:de:e1:77:c2:3b:79:3e:64:07: b0:b6:90:ba:33:29:63:df:56:13:1a:b4:b2:77:50: f8:a7:bb:91:07:54:10:dc:85:06:ed:24:ff:42:b7: 83:4c:e2:8c:2b:f7:81:38:d2:20:89:dd:5b:28:c6: a4:68:35:5f:28:ea:de:e1:8a:22:50:2f:15:d6:61: 1b:04:38:53:40:90:0c:63:d2:c3:94:ab:f5:7b:61: 19:c5:3b:53:86:9f:f6:e1:b2:0f:af:b2:97:8b:33: 00:4f:54:dd:15:94:c5:01:6d:0c:cf:28:4a:83:17: 03:67:c9:f7:d2:12:c1:b4:20:72:20:2d:d6:bc:45: ad:ee:e1:5b:2b:d7:81:21:ec:48:ac:9a:ce:0d:3d: 9c:ae:4b:1a:c5:52:96:60:64:c3:80:ea:23:0c:a9: 49:9c:0f:0c:a6:43:14:4f:cf:f2:45:83:9c:6b:f5: 6a:fa:ea:7b:cd:1a:f7:33:0d:31:7e:f3:8b:44:7d: 97:f7:5f:39:7f:31:23:d5:d2:05:c7:6c:02:bf:22: 13:ea:02:ad:91:7a:32:34:76:8b:eb:23:8f:d1:39: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0E:A9:84:4D:E4:56:D0:85:01:12:BE:2A:59:1F:30:2B:63:C5:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3d8dc7e-94d4-3e02-addb-0b77b2c6f6b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:10:cc:7c:bb:c7:0b:0f:e4:fb:5d:c0:a4:4d:da:ce:b4:d2: 66:3a:8b:1f:08:06:81:ec:d7:84:d1:14:ea:d6:22:f1:d8:fe: a1:cc:70:4a:e3:46:16:2f:4f:51:5e:3b:22:cf:0a:9c:5e:67: e0:57:d1:c7:a1:54:82:ed:33:6c:f0:f6:22:de:ff:aa:2b:d6: c0:0b:48:d9:db:c5:e3:42:72:b1:84:53:cf:59:c9:1a:42:78: f0:40:2d:d2:79:2e:d4:b5:a7:f1:91:a2:73:6c:6e:a0:84:26: 6f:62:73:e1:b2:a3:d6:bb:fa:11:76:19:f2:d3:ed:16:af:9d: da:68:d6:27:e8:4b:bf:65:6f:07:02:f1:9e:fd:24:91:e7:e0: cd:36:31:9b:da:58:f2:4c:15:98:20:9c:6d:a8:c1:6d:13:14: f2:b2:14:0a:31:00:b0:c4:1b:99:bd:4e:24:24:48:c3:29:43: b8:f0:bc:6d:d7:18:22:d8:12:93:dd:0c:00:58:56:4d:1d:5c: b6:70:5b:96:ee:60:e6:5c:c5:e9:5b:fb:c5:35:75:39:e2:e2: 6a:7e:71:0d:a5:02:20:66:9e:4d:8c:7a:af:9b:63:b3:b0:f4: 80:22:08:49:b7:d6:b3:d3:55:76:24:62:85:f7:1d:94:6d:38: 1b:da:36:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nw+mguRj9lr2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGVjZjg2ZWQtYjlhMS00NTcxLWJjMWUtODYzYTFiOTZhNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAa3PfKCCARfi8MD3QfHJv4KExw8hKnb6jFj J0kcuWjOgFHe4XfCO3k+ZAewtpC6Mylj31YTGrSyd1D4p7uRB1QQ3IUG7ST/QreD TOKMK/eBONIgid1bKMakaDVfKOre4YoiUC8V1mEbBDhTQJAMY9LDlKv1e2EZxTtT hp/24bIPr7KXizMAT1TdFZTFAW0MzyhKgxcDZ8n30hLBtCByIC3WvEWt7uFbK9eB IexIrJrODT2crksaxVKWYGTDgOojDKlJnA8MpkMUT8/yRYOca/Vq+up7zRr3Mw0x fvOLRH2X9185fzEj1dIFx2wCvyIT6gKtkXoyNHaL6yOP0TkUoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4OqYRN5FbQhQESvipZHzArY8WcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNkOGRjN2UtOTRkNC0z ZTAyLWFkZGItMGI3N2IyYzZmNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAQzHy7xwsP5PtdwKRN2s600mY6ix8IBoHs14TRFOrWIvHY/qHMcErj RhYvT1FeOyLPCpxeZ+BX0cehVILtM2zw9iLe/6or1sALSNnbxeNCcrGEU89ZyRpC ePBALdJ5LtS1p/GRonNsbqCEJm9ic+Gyo9a7+hF2GfLT7Ravndpo1ifoS79lbwcC 8Z79JJHn4M02MZvaWPJMFZggnG2owW0TFPKyFAoxALDEG5m9TiQkSMMpQ7jwvG3X GCLYEpPdDABYVk0dXLZwW5buYOZcxelb+8U1dTni4mp+cQ2lAiBmnk2Meq+bY7Ow 9IAiCEm31rPTVXYkYoX3HZRtOBvaNuY= -----END CERTIFICATE-----Generated at Thu Oct 16 01:28:32 2025 by rpki-client