$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3443a08e-728a-3863-8202-442a1c2eb2dc.roa File: 3443a08e-728a-3863-8202-442a1c2eb2dc.roa (raw, json) Hash identifier: Ib1AdQsdGqlyAlzWmix0mhNP+B+nZzMkDtwlrfuaia4= Subject key identifier: 45:09:2A:CB:0C:41:92:56:91:D9:F2:9B:AB:D1:56:60:71:9F:A4:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F270A2CE454069F3C92680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3443a08e-728a-3863-8202-442a1c2eb2dc.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.197.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:70:a2:ce:45:40:69:f3:c9:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6c6fe4e7-58bc-4e4a-ab69-6da50235f6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ae:b9:20:8f:60:ca:a9:86:40:05:83:6b:5e: d4:42:1e:4d:2d:3d:0d:78:37:b2:25:ea:50:bb:e7: 3e:4d:b6:d3:58:b3:48:0e:a3:a2:69:91:75:52:25: 10:79:01:d6:95:0d:2e:2c:14:c2:05:13:79:c6:d8: ca:a4:d4:18:01:45:cf:33:ec:64:7d:cd:72:b3:16: bc:82:91:e0:d2:97:d3:1a:d7:71:30:f4:d8:ca:8a: 48:ed:00:c3:b1:13:22:f2:07:1c:2c:75:08:93:bd: e0:ac:fc:0f:09:44:6c:36:0b:e5:ba:b9:9a:b2:f5: e4:7f:a8:1f:5c:de:be:3e:be:89:dd:d0:63:63:84: 56:fe:82:a3:6d:a4:af:8e:40:1e:40:09:e9:5c:ad: 3c:fe:f0:a2:e7:33:f6:d6:8d:ea:c6:f5:c5:42:e4: 43:6f:c0:0f:7b:85:78:a8:52:35:c4:a1:c2:23:08: da:ee:8d:9a:1b:75:09:21:d9:3e:a2:e3:3f:c5:87: cf:bd:c3:57:05:7b:ad:e8:8a:6b:16:e3:1d:ea:7e: 4b:51:71:1d:ca:17:b4:6f:a7:0c:79:c3:90:30:ba: da:03:6e:78:2e:3b:dc:0b:04:c6:af:ed:ff:22:e8: ac:c5:5c:ae:05:b8:02:d6:5a:f0:83:3f:35:86:de: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:09:2A:CB:0C:41:92:56:91:D9:F2:9B:AB:D1:56:60:71:9F:A4:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3443a08e-728a-3863-8202-442a1c2eb2dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:48:53:4c:c4:9c:ca:4b:b2:17:93:74:c8:7b:a9:df:e4:6f: 22:ad:91:14:dd:14:e4:6c:34:f9:f9:66:80:ff:19:eb:32:d1: 2b:23:2f:e2:4d:17:11:30:f5:7c:3a:54:b4:ec:fb:59:5c:e4: ce:fa:ae:67:c7:28:06:1a:13:74:5d:97:6d:1f:7c:4b:eb:60: 82:9c:f7:11:cf:fb:33:94:d1:f3:e5:d7:28:c2:db:86:bf:a5: c1:6a:a1:d2:2e:7e:f2:fe:5e:e3:99:82:55:59:ce:29:21:0f: 66:4d:08:0a:61:21:94:6d:f2:8f:e6:13:4a:31:4e:31:a5:f4: f5:71:e2:ba:06:e4:41:49:43:9d:bd:6c:eb:0d:76:ca:e5:81: b2:e8:94:64:ff:87:65:2f:dd:3c:0c:42:e9:ab:0a:94:37:b6: 45:eb:41:2a:8b:e9:e5:c3:1c:0c:ff:a6:a2:d1:9d:d2:6a:37: 1f:31:b7:b3:7f:f3:b8:d8:37:3b:a6:72:5f:38:26:7f:49:8e: f0:70:ef:9f:e4:03:63:7c:03:12:93:17:81:da:e0:30:c1:39: 79:bd:ba:b4:19:d2:9a:cc:9c:66:fc:57:d0:b2:eb:a4:78:c8: e8:57:4b:0a:20:c3:2c:f5:05:e5:47:e0:33:06:8e:27:3a:9f: b7:2d:2b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nCizkVAafPJJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NmM2ZmU0ZTctNThiYy00ZTRhLWFiNjktNmRhNTAyMzVmNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK65II9gyqmGQAWDa17UQh5NLT0NeDeyJepQ u+c+TbbTWLNIDqOiaZF1UiUQeQHWlQ0uLBTCBRN5xtjKpNQYAUXPM+xkfc1ysxa8 gpHg0pfTGtdxMPTYyopI7QDDsRMi8gccLHUIk73grPwPCURsNgvlurmasvXkf6gf XN6+Pr6J3dBjY4RW/oKjbaSvjkAeQAnpXK08/vCi5zP21o3qxvXFQuRDb8APe4V4 qFI1xKHCIwja7o2aG3UJIdk+ouM/xYfPvcNXBXut6IprFuMd6n5LUXEdyhe0b6cM ecOQMLraA254LjvcCwTGr+3/IuisxVyuBbgC1lrwgz81ht4maQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUJKssMQZJWkdnym6vRVmBxn6ScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQ0M2EwOGUtNzI4YS0z ODYzLTgyMDItNDQyYTFjMmViMmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZIU0zEnMpLsheTdMh7qd/kbyKtkRTdFORsNPn5ZoD/Gesy0SsjL+JN FxEw9Xw6VLTs+1lc5M76rmfHKAYaE3Rdl20ffEvrYIKc9xHP+zOU0fPl1yjC24a/ pcFqodIufvL+XuOZglVZzikhD2ZNCAphIZRt8o/mE0oxTjGl9PVx4roG5EFJQ529 bOsNdsrlgbLolGT/h2Uv3TwMQumrCpQ3tkXrQSqL6eXDHAz/pqLRndJqNx8xt7N/ 87jYNzumcl84Jn9JjvBw75/kA2N8AxKTF4Ha4DDBOXm9urQZ0prMnGb8V9Cy66R4 yOhXSwogwyz1BeVH4DMGjic6n7ctKws= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:04 2025 by rpki-client