$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25820c3a-f5e5-3985-a127-acc836c819f9.roa File: 25820c3a-f5e5-3985-a127-acc836c819f9.roa (raw, json) Hash identifier: 75oD2LQbYkqC29SwJbe325LMhPJxy2U9aQkMAZHz9Ls= Subject key identifier: 83:BB:4A:AA:21:30:B3:DB:59:4B:66:98:EE:B3:9E:CD:F2:A2:E9:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32F6B40C0CB4CFD2971600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25820c3a-f5e5-3985-a127-acc836c819f9.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.220.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:f6:b4:0c:0c:b4:cf:d2:97:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=39ac1e3f-3f73-418c-bbf8-cf24886c3ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:4c:67:a9:d4:ae:21:6a:3e:28:76:a0:25: 90:df:84:0b:76:cf:bb:1b:1b:da:c8:4f:d6:65:ed: f8:76:b7:c7:b3:d6:04:fe:c3:e1:4c:7c:1a:95:c8: bb:29:e7:44:9a:c0:23:ce:92:02:d1:3a:df:1d:f0: 61:30:91:28:0e:bb:be:57:88:1b:a5:25:51:15:42: 47:86:d3:9a:f9:dc:fc:60:95:97:2f:e0:f7:57:74: c7:0a:aa:3f:eb:5c:3c:db:cf:46:54:3a:66:e7:2b: a3:f4:5a:a1:88:0a:10:31:e9:c0:a0:02:d8:49:4b: dd:93:6e:ba:f8:8d:13:3f:fb:0b:f7:14:06:dc:6a: 63:24:cf:65:e6:b6:8b:14:95:5f:ff:eb:32:9e:f8: d5:d5:c1:c5:f6:a6:00:ca:1b:53:1b:05:bc:28:f8: 8f:a8:be:9b:05:03:b6:21:63:22:e5:7d:d8:0a:7d: 55:ae:80:28:22:eb:b8:b7:3f:57:d0:b4:9e:27:c8: f5:0a:13:e8:81:e1:9a:ae:12:98:01:a0:12:93:a2: bc:f3:fc:ee:88:6d:d7:9e:2f:65:54:b6:b6:a0:77: 4a:1a:f7:f0:42:91:ed:c9:4f:40:d7:33:a9:9b:1e: 9f:03:13:4e:9e:e0:54:93:db:f8:e5:14:3a:be:14: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BB:4A:AA:21:30:B3:DB:59:4B:66:98:EE:B3:9E:CD:F2:A2:E9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25820c3a-f5e5-3985-a127-acc836c819f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:bf:95:1e:a1:49:7a:38:9c:ee:3a:9e:98:03:1b:80:02:46: 58:5a:e2:9f:b6:8e:31:0c:a0:c5:be:09:bb:e6:5c:bb:c9:d5: 20:14:c0:94:42:93:93:fa:a5:fc:bb:97:58:4e:39:46:e8:05: 4c:0a:01:69:2e:1c:87:6a:93:c1:af:18:bb:2b:da:69:29:b2: 4b:bb:47:37:fe:83:7a:3a:4f:9b:4d:21:1c:b9:a7:e5:30:cd: 19:c6:dc:a2:69:71:47:00:68:e4:0f:af:47:77:78:8e:38:7c: 96:97:3f:18:85:9d:c9:18:6e:5f:dc:14:b4:94:14:be:45:54: 25:f8:d3:4b:ac:5c:31:eb:e6:6e:a7:fe:7f:05:6a:03:d1:62: a5:68:50:de:e0:ea:a5:7d:40:4f:81:db:f1:c0:bf:74:9c:d4: c2:c7:06:b2:a0:32:72:7e:2b:cf:76:55:87:46:49:0b:5f:ed: b1:95:a1:a3:88:8d:26:23:17:96:e9:39:0f:6c:94:55:51:56: c7:57:8e:2b:d7:ec:03:04:30:27:ae:61:66:c1:b7:d6:44:f4: ad:d2:9c:ee:ad:59:a2:73:7f:fc:06:46:17:d9:3c:12:a8:50: f7:82:cd:3e:3b:f9:6e:61:91:3b:2f:d4:18:ef:b6:fc:49:f0: ba:6e:76:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMva0DAy0z9KXFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MzlhYzFlM2YtM2Y3My00MThjLWJiZjgtY2YyNDg4NmMzYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvBMZ6nUriFqPih2oCWQ34QLds+7GxvayE/W Ze34drfHs9YE/sPhTHwalci7KedEmsAjzpIC0TrfHfBhMJEoDru+V4gbpSVRFUJH htOa+dz8YJWXL+D3V3THCqo/61w8289GVDpm5yuj9FqhiAoQMenAoALYSUvdk266 +I0TP/sL9xQG3GpjJM9l5raLFJVf/+synvjV1cHF9qYAyhtTGwW8KPiPqL6bBQO2 IWMi5X3YCn1VroAoIuu4tz9X0LSeJ8j1ChPogeGarhKYAaASk6K88/zuiG3Xni9l VLa2oHdKGvfwQpHtyU9A1zOpmx6fAxNOnuBUk9v45RQ6vhTgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO7SqohMLPbWUtmmO6zns3youmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjU4MjBjM2EtZjVlNS0z OTg1LWExMjctYWNjODM2YzgxOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK/lR6hSXo4nO46npgDG4ACRlha4p+2jjEMoMW+CbvmXLvJ1SAUwJRC k5P6pfy7l1hOOUboBUwKAWkuHIdqk8GvGLsr2mkpsku7Rzf+g3o6T5tNIRy5p+Uw zRnG3KJpcUcAaOQPr0d3eI44fJaXPxiFnckYbl/cFLSUFL5FVCX400usXDHr5m6n /n8FagPRYqVoUN7g6qV9QE+B2/HAv3Sc1MLHBrKgMnJ+K892VYdGSQtf7bGVoaOI jSYjF5bpOQ9slFVRVsdXjivX7AMEMCeuYWbBt9ZE9K3SnO6tWaJzf/wGRhfZPBKo UPeCzT47+W5hkTsv1BjvtvxJ8LpudkM= -----END CERTIFICATE-----Generated at Tue Oct 6 13:58:18 2026 by rpki-client