$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f5031d65-4541-3321-ac41-3502a5aef86e.roa File: f5031d65-4541-3321-ac41-3502a5aef86e.roa (raw, json) Hash identifier: xShRCpQ/VS4nyG04IghgC/P7G3Jdq9Vfuh0p8gWJgiY= Subject key identifier: 4F:59:68:94:09:9A:28:12:DA:F3:89:DD:ED:35:D9:5B:37:21:11:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F291BCE3E0687E75DC2440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f5031d65-4541-3321-ac41-3502a5aef86e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:91:bc:e3:e0:68:7e:75:dc:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3f2c8461-f1d5-4eac-a600-4522bc071dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9d:cf:38:7a:df:9c:01:14:69:62:2c:3a:a0: 34:d7:91:45:a4:8e:24:61:b2:32:5e:1d:07:27:d0: c6:6a:45:72:1a:9b:0a:3e:f9:6f:48:a1:1c:04:b1: af:4a:64:d6:e3:10:ea:94:23:e2:48:b4:b2:f9:26: 34:e7:e3:74:42:cc:55:b5:6b:30:e2:a6:ac:63:00: 74:c0:62:af:0a:fa:ae:58:c9:35:7f:6f:cb:39:af: 27:eb:25:44:cd:d6:7f:bf:08:c5:f4:b7:8f:89:e4: 84:42:03:51:bc:de:82:fb:02:6e:0d:c9:bc:6e:f2: 40:8b:1f:af:5a:07:a6:86:e7:65:3f:25:ee:a1:13: 27:29:29:7f:ca:9f:4e:23:da:b1:1c:9a:9d:db:4d: d1:57:43:64:9a:8e:87:df:24:7d:7e:88:92:e6:50: e5:67:f0:7d:f2:5a:df:52:42:3a:54:bc:d4:e2:32: 65:27:b9:75:0f:e3:76:9d:96:df:15:7a:ab:b8:b5: 66:f8:90:0c:91:21:a3:4b:7e:56:8f:72:2b:d2:93: b6:a7:4d:db:f8:cd:66:10:23:4e:9c:32:14:0b:ec: 1d:63:1d:1e:47:56:ad:48:58:34:5e:29:d4:89:1e: b3:cd:c7:85:88:f8:10:8f:09:e5:c2:4c:fb:01:fe: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:59:68:94:09:9A:28:12:DA:F3:89:DD:ED:35:D9:5B:37:21:11:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f5031d65-4541-3321-ac41-3502a5aef86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:fb:ad:f7:54:75:4d:97:6f:d4:35:2b:9b:ee:13:23:a0:30: 4b:b5:a8:69:db:7a:25:89:89:cf:3e:fe:db:ce:c6:79:26:ca: b6:ff:00:d6:34:1d:59:74:89:25:5e:14:56:3d:40:8b:cb:dd: c2:9f:80:d1:6d:eb:0d:e8:3f:9a:0b:2a:7e:39:a7:da:ad:2d: c8:60:6a:91:5d:86:c2:f0:a4:be:0f:1a:65:56:8e:c9:21:63: 42:1c:aa:0e:f7:8d:69:2d:5f:d4:70:9e:2f:68:f7:2a:08:d3: e6:96:6d:43:f0:d4:0f:32:58:53:5d:98:33:ce:70:b1:6e:8e: 70:99:fd:71:b8:9a:24:b0:9d:88:be:1e:b3:93:ae:5e:c0:a6: ef:e7:13:06:99:8d:53:ee:73:96:86:d0:3d:33:ff:9d:10:74: 97:da:69:22:f4:1d:54:c5:af:e7:bb:0d:01:00:4b:29:6c:d4: c9:35:95:97:6c:b9:de:29:af:4f:03:b8:1f:75:1d:fa:da:b4: 12:85:81:99:2e:af:35:40:c9:b4:1d:6b:60:0f:2d:f6:31:b3: 42:f6:46:4f:cf:85:8c:cb:8b:f3:b0:c7:02:2e:12:be:50:ee: 82:46:8a:56:f0:cc:4d:2d:b8:2b:c5:78:db:34:14:be:1c:8d: d0:c7:da:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pG84+BofnXcJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2YyYzg0NjEtZjFkNS00ZWFjLWE2MDAtNDUyMmJjMDcxZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi53POHrfnAEUaWIsOqA015FFpI4kYbIyXh0H J9DGakVyGpsKPvlvSKEcBLGvSmTW4xDqlCPiSLSy+SY05+N0QsxVtWsw4qasYwB0 wGKvCvquWMk1f2/LOa8n6yVEzdZ/vwjF9LePieSEQgNRvN6C+wJuDcm8bvJAix+v WgemhudlPyXuoRMnKSl/yp9OI9qxHJqd203RV0Nkmo6H3yR9foiS5lDlZ/B98lrf UkI6VLzU4jJlJ7l1D+N2nZbfFXqruLVm+JAMkSGjS35Wj3Ir0pO2p03b+M1mECNO nDIUC+wdYx0eR1atSFg0XinUiR6zzceFiPgQjwnlwkz7Af7S5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9ZaJQJmigS2vOJ3e012Vs3IRHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjUwMzFkNjUtNDU0MS0z MzIxLWFjNDEtMzUwMmE1YWVmODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD7rfdUdU2Xb9Q1K5vuEyOgMEu1qGnbeiWJic8+/tvOxnkmyrb/ANY0 HVl0iSVeFFY9QIvL3cKfgNFt6w3oP5oLKn45p9qtLchgapFdhsLwpL4PGmVWjskh Y0Icqg73jWktX9Rwni9o9yoI0+aWbUPw1A8yWFNdmDPOcLFujnCZ/XG4miSwnYi+ HrOTrl7Apu/nEwaZjVPuc5aG0D0z/50QdJfaaSL0HVTFr+e7DQEASyls1Mk1lZds ud4pr08DuB91HfratBKFgZkurzVAybQda2APLfYxs0L2Rk/PhYzLi/OwxwIuEr5Q 7oJGilbwzE0tuCvFeNs0FL4cjdDH2og= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:13 2025 by rpki-client