$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db87597d-4341-3d49-8637-5aabb8fb954c.roa File: db87597d-4341-3d49-8637-5aabb8fb954c.roa (raw, json) Hash identifier: tkQBx4oUYGTAHk6e3gFjC0GwHPmAiowTdWTrZDZwIA8= Subject key identifier: A6:97:3E:CE:B7:91:C1:5C:44:1F:9A:96:B5:1F:65:CB:A1:08:71:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F217D7F58B60ACF2B31C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db87597d-4341-3d49-8637-5aabb8fb954c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.209.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:17:d7:f5:8b:60:ac:f2:b3:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=0f027bf0-bfa6-4a21-b08c-19a1f0f3e85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:56:a6:6f:8b:bb:e0:03:a4:d3:e4:3c:c1: f2:1e:b6:79:69:c6:f7:02:d5:77:89:ef:7a:02:39: 9f:9a:50:68:8d:3b:5c:25:63:0b:99:75:70:79:9a: df:99:9b:6f:0c:be:76:63:b2:eb:68:55:1e:cb:4f: 98:cf:61:8a:0d:fc:c5:16:a2:f8:5e:7d:3b:cd:70: a3:a1:2d:03:59:71:60:84:bb:7e:83:0f:a1:99:e1: 14:ca:59:0b:98:aa:26:ee:45:b3:f8:75:83:df:83: 8f:d1:9a:3c:67:0a:03:fa:03:67:18:3e:88:b1:a5: fd:dc:72:ef:ab:43:16:97:fe:3e:63:4e:b3:6c:9c: 35:17:d9:43:be:86:86:57:dc:1d:a4:68:b2:b5:1d: f5:e8:76:be:6c:10:0b:7a:e6:53:2a:35:1a:61:9c: ac:e6:e9:5b:24:0f:ec:e0:b8:bb:6e:85:78:6d:54: 9f:55:7a:56:13:bc:a1:b6:07:f4:0d:c4:bc:a7:3a: 66:a8:cd:91:fc:82:40:bb:69:ed:c8:2c:c5:3d:48: bb:b2:40:8b:2d:63:87:da:4d:18:e5:c0:7e:6f:eb: 89:b6:ee:7e:0e:f3:67:0a:c4:84:1a:f9:6a:5d:92: 80:99:d2:8e:62:42:bc:93:be:68:a6:6e:61:5e:d0: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:97:3E:CE:B7:91:C1:5C:44:1F:9A:96:B5:1F:65:CB:A1:08:71:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db87597d-4341-3d49-8637-5aabb8fb954c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:32:7d:62:24:f5:5b:07:e9:96:bb:c9:aa:80:59:bd:8f:de: 7b:f6:a9:66:66:91:40:19:94:2f:05:e0:23:06:cf:75:6c:0f: 6c:fa:21:3d:2a:94:bc:4f:08:77:db:dd:11:a0:58:89:af:1f: ff:a2:71:e3:46:67:92:18:93:86:e0:dd:44:1b:23:9d:3c:46: 98:6c:72:3d:b3:48:7a:50:80:3c:aa:c2:7b:8a:e8:32:24:fe: 31:53:ef:79:e1:94:69:33:c4:ce:ec:ca:b9:57:f9:4c:23:26: 86:5f:78:1b:2a:4e:81:18:15:0c:ad:51:5d:8a:62:de:84:60: c7:02:a8:00:9c:a2:9c:ae:66:8e:7a:b2:78:d9:8e:d9:aa:9f: 18:4d:33:ac:b7:d0:8b:54:84:32:f3:d7:b9:4b:6f:34:64:18: 08:af:94:78:72:29:80:a0:37:66:d0:e3:6e:5e:48:34:c0:de: a6:90:f9:27:aa:0b:17:f0:66:0d:fb:a6:dc:eb:11:39:1a:fb: 96:4f:e1:af:01:1e:71:be:18:44:76:f9:83:9c:2a:8b:0c:f1: 6b:6f:5f:41:cf:38:b2:cf:51:ac:31:a7:24:33:0d:cc:76:97: 71:5d:8d:d3:29:ad:9f:a9:91:db:f9:4c:0a:42:7e:cf:e0:c4: c4:17:e5:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hfX9YtgrPKzHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MGYwMjdiZjAtYmZhNi00YTIxLWIwOGMtMTlhMWYwZjNlODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszdWpm+Lu+ADpNPkPMHyHrZ5acb3AtV3ie96 AjmfmlBojTtcJWMLmXVweZrfmZtvDL52Y7LraFUey0+Yz2GKDfzFFqL4Xn07zXCj oS0DWXFghLt+gw+hmeEUylkLmKom7kWz+HWD34OP0Zo8ZwoD+gNnGD6IsaX93HLv q0MWl/4+Y06zbJw1F9lDvoaGV9wdpGiytR316Ha+bBALeuZTKjUaYZys5ulbJA/s 4Li7boV4bVSfVXpWE7yhtgf0DcS8pzpmqM2R/IJAu2ntyCzFPUi7skCLLWOH2k0Y 5cB+b+uJtu5+DvNnCsSEGvlqXZKAmdKOYkK8k75opm5hXtCrdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaXPs63kcFcRB+alrUfZcuhCHHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGI4NzU5N2QtNDM0MS0z ZDQ5LTg2MzctNWFhYmI4ZmI5NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEyfWIk9VsH6Za7yaqAWb2P3nv2qWZmkUAZlC8F4CMGz3VsD2z6IT0q lLxPCHfb3RGgWImvH/+iceNGZ5IYk4bg3UQbI508Rphscj2zSHpQgDyqwnuK6DIk /jFT73nhlGkzxM7syrlX+UwjJoZfeBsqToEYFQytUV2KYt6EYMcCqACcopyuZo56 snjZjtmqnxhNM6y30ItUhDLz17lLbzRkGAivlHhyKYCgN2bQ425eSDTA3qaQ+Seq CxfwZg37ptzrETka+5ZP4a8BHnG+GER2+YOcKosM8WtvX0HPOLLPUawxpyQzDcx2 l3FdjdMprZ+pkdv5TApCfs/gxMQX5eQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:21:55 2025 by rpki-client