$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98be4590-8d96-3334-af65-7c7e63c33151.roa File: 98be4590-8d96-3334-af65-7c7e63c33151.roa (raw, json) Hash identifier: lvFmXugdIwlGdnkq3tc5ZTZK4HbUlxjlYZcc+SnHMw4= Subject key identifier: 8C:7C:2A:46:1D:50:4E:F2:CA:9F:6B:23:B8:63:20:F7:B6:37:40:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F282349EF54A2A2A875A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98be4590-8d96-3334-af65-7c7e63c33151.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.209.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:82:34:9e:f5:4a:2a:2a:87:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=d15f8d7d-a3c2-44b3-9d13-58ee4f6ce80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:92:e6:01:85:24:89:b7:9e:ea:05:ea:d4:a8: f2:ea:b0:c1:af:7e:d3:37:a2:56:2e:63:07:40:5c: ac:9c:e9:cd:44:59:4a:94:c7:4a:24:e5:2e:13:96: 6d:2c:44:9f:38:1b:f5:e5:71:f6:b7:31:a0:58:0e: 82:8f:7b:14:76:68:77:79:75:e7:12:da:c7:0c:83: 18:8a:bf:98:0c:9d:bd:65:c2:99:57:c2:23:f8:a2: ef:d6:3a:d0:33:51:3f:6f:84:fb:2d:b3:fc:c5:c9: 08:d1:c4:5c:fb:bf:8e:f2:b5:95:3b:f6:b8:d9:42: 10:3e:da:3c:6d:f9:1f:cf:c8:52:c8:9c:e3:f6:29: c4:74:6f:53:c2:a7:be:f9:f8:3d:6a:98:11:04:75: 50:78:4f:74:31:f4:45:30:d2:ab:59:c4:61:95:23: a9:15:fd:bf:b4:19:81:b9:f9:a9:ae:b1:e8:b2:d1: 2c:51:b2:77:55:57:1d:d9:40:bf:37:a1:c1:a1:5e: 82:88:50:c5:45:c2:49:7d:4f:6c:78:c4:ae:7b:1a: cd:92:b2:84:c3:35:cc:ac:50:62:f6:f7:4e:34:7e: ab:3f:7b:dd:d9:6e:0e:31:ef:1f:8a:92:76:23:7a: 58:94:e3:45:a5:5d:1c:dc:47:62:e7:7b:ee:88:d3: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7C:2A:46:1D:50:4E:F2:CA:9F:6B:23:B8:63:20:F7:B6:37:40:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98be4590-8d96-3334-af65-7c7e63c33151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fc:89:e2:5b:2b:79:fe:fb:a8:40:dc:de:0f:e1:a8:f6:47: 53:05:71:5a:b6:6e:5f:73:01:55:1f:69:ec:6a:00:1c:73:27: b9:28:a8:c7:9d:f1:a9:34:1b:35:fa:26:81:68:b0:1e:55:a6: ae:47:5c:09:89:77:ed:e0:d1:92:c2:e7:9c:46:4d:29:fa:28: d2:2c:86:fe:e4:d9:5d:8c:8c:21:60:cd:45:85:7b:f1:5f:52: 28:85:a9:ae:a7:49:9d:54:60:42:40:a6:fb:12:46:ac:d6:cc: ae:c5:c4:77:aa:d2:d0:f3:01:b7:4b:b9:0d:b6:74:44:9e:77: c5:5c:aa:67:5a:e3:ad:20:a7:1e:ab:d7:9e:d8:70:18:15:b1: 9d:8f:69:64:0c:cd:57:a0:f4:94:24:f8:3a:35:5d:52:a9:4a: 33:fe:c1:fb:09:fd:1b:0c:ae:28:07:14:57:28:d4:d8:fc:21: d5:d6:06:f8:b2:cf:51:41:3f:a9:cb:2e:e8:9c:45:c4:ac:12: 71:1e:99:54:ab:17:6d:50:47:cc:e6:88:e9:22:ba:f0:12:a4: f7:32:f5:70:6b:43:30:9f:c6:dc:32:5f:dc:aa:5b:52:5e:b0: 61:9a:8a:69:ec:5a:e0:6c:60:31:da:80:23:d0:4d:3c:b1:95: 36:56:d6:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oI0nvVKKiqHWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDE1ZjhkN2QtYTNjMi00NGIzLTlkMTMtNThlZTRmNmNlODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75LmAYUkibee6gXq1Kjy6rDBr37TN6JWLmMH QFysnOnNRFlKlMdKJOUuE5ZtLESfOBv15XH2tzGgWA6Cj3sUdmh3eXXnEtrHDIMY ir+YDJ29ZcKZV8Ij+KLv1jrQM1E/b4T7LbP8xckI0cRc+7+O8rWVO/a42UIQPto8 bfkfz8hSyJzj9inEdG9Twqe++fg9apgRBHVQeE90MfRFMNKrWcRhlSOpFf2/tBmB ufmprrHostEsUbJ3VVcd2UC/N6HBoV6CiFDFRcJJfU9seMSuexrNkrKEwzXMrFBi 9vdONH6rP3vd2W4OMe8fipJ2I3pYlONFpV0c3Edi53vuiNNDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx8KkYdUE7yyp9rI7hjIPe2N0BHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOThiZTQ1OTAtOGQ5Ni0z MzM0LWFmNjUtN2M3ZTYzYzMzMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL8ieJbK3n++6hA3N4P4aj2R1MFcVq2bl9zAVUfaexqABxzJ7koqMed 8ak0GzX6JoFosB5Vpq5HXAmJd+3g0ZLC55xGTSn6KNIshv7k2V2MjCFgzUWFe/Ff UiiFqa6nSZ1UYEJApvsSRqzWzK7FxHeq0tDzAbdLuQ22dESed8Vcqmda460gpx6r 157YcBgVsZ2PaWQMzVeg9JQk+Do1XVKpSjP+wfsJ/RsMrigHFFco1Nj8IdXWBviy z1FBP6nLLuicRcSsEnEemVSrF21QR8zmiOkiuvASpPcy9XBrQzCfxtwyX9yqW1Je sGGaimnsWuBsYDHagCPQTTyxlTZW1so= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:55 2025 by rpki-client