$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0219ca72-2253-3445-8182-bfe31f00866a.roa File: 0219ca72-2253-3445-8182-bfe31f00866a.roa (raw, json) Hash identifier: Cce+NrebF6gV0a3EfaPe/OA7OMpGwBEdoo8EUyWy18A= Subject key identifier: 90:0F:5B:EB:9A:59:41:3F:FC:5A:54:8A:54:D4:F6:25:93:FB:EF:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01AAE008A911AEB6B4D3C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0219ca72-2253-3445-8182-bfe31f00866a.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:aa:e0:08:a9:11:ae:b6:b4:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=2b0fa7e5-1877-4c4b-87ae-bfdb959939e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:31:3e:81:f4:37:75:15:4c:7f:a6:58:43:3d: db:7f:c4:23:dd:87:87:91:fa:56:77:2a:7f:aa:5c: b3:cc:70:19:23:ab:16:2e:95:26:4d:bb:8c:14:8d: 30:45:49:e2:ea:22:5b:ea:b9:cd:81:61:cc:b7:22: ee:b6:f9:ed:94:fe:89:ce:e6:9a:e9:8f:da:21:6a: 2b:2e:82:50:5e:96:78:0e:0f:c3:37:8e:7b:68:a4: 6d:53:86:1a:e4:d2:b1:93:bd:5b:63:17:1d:9d:65: b5:89:00:52:f1:98:4d:aa:bc:c7:4f:cc:21:f0:99: 1e:1c:4d:4e:7d:40:83:29:5a:34:65:f7:13:ac:02: 77:f8:af:e9:e0:0d:6a:45:f4:6b:44:fc:bd:4d:21: 2a:d2:a2:61:9d:16:44:c2:bf:b0:20:89:ea:05:39: 66:3a:aa:f7:a8:03:d9:99:f5:c5:6b:06:8e:9e:40: bd:24:60:45:00:36:e7:34:4a:e5:3f:f5:3e:94:fe: 95:50:4b:59:38:7f:70:e5:bb:8b:42:76:aa:38:21: 32:90:84:1c:a7:e7:2f:91:d8:17:df:1f:6c:43:c6: 57:01:d7:6b:99:f4:76:b0:33:09:01:13:1d:b1:f5: 1e:ee:66:c9:4d:45:5d:7a:4a:ee:64:5a:f6:99:e1: 16:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0F:5B:EB:9A:59:41:3F:FC:5A:54:8A:54:D4:F6:25:93:FB:EF:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0219ca72-2253-3445-8182-bfe31f00866a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7b:de:29:d2:10:28:4d:04:44:1b:fd:6f:bb:f7:ef:82:e0: 6e:44:1b:87:fd:97:49:4c:56:c4:f5:a1:48:e3:d5:fc:c6:62: 0c:b5:68:46:13:c0:fc:cf:6d:8b:b4:24:5d:aa:51:49:f8:bd: f5:7c:1f:0b:37:18:1b:e9:5d:12:96:91:f9:49:8a:c5:2d:04: ab:de:07:cd:1d:03:ab:13:74:a6:24:38:68:60:03:ec:3f:6c: 70:83:ac:a4:ee:96:94:98:10:b7:63:62:63:8d:fd:4e:1d:4c: 0f:9e:97:e2:f9:c7:b0:5c:44:99:be:6d:d4:4b:78:6e:da:1b: c5:09:9d:d8:be:5e:af:4b:7e:9a:70:48:92:8f:52:a1:86:d2: 41:bc:01:51:c1:ba:25:9c:17:bf:e3:60:0c:9a:c4:3b:bf:40: 68:2e:cf:ab:15:a5:74:37:11:dc:01:ed:b9:e3:4b:21:cd:1f: 22:b2:f7:34:e5:f4:34:57:6e:3c:dc:4f:6a:b6:7f:ce:52:30: 73:aa:23:79:7e:6c:bc:b7:6a:7e:75:d5:dc:04:0a:3b:e4:2d: c3:a6:83:8c:4b:91:af:51:4a:88:48:0e:84:a8:ff:a8:f4:e6: 6a:19:40:4d:96:6f:39:b6:be:45:0a:89:42:89:4e:2f:9e:8a: 31:e1:43:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAargCKkRrra008AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MmIwZmE3ZTUtMTg3Ny00YzRiLTg3YWUtYmZkYjk1OTkzOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjE+gfQ3dRVMf6ZYQz3bf8Qj3YeHkfpWdyp/ qlyzzHAZI6sWLpUmTbuMFI0wRUni6iJb6rnNgWHMtyLutvntlP6Jzuaa6Y/aIWor LoJQXpZ4Dg/DN457aKRtU4Ya5NKxk71bYxcdnWW1iQBS8ZhNqrzHT8wh8JkeHE1O fUCDKVo0ZfcTrAJ3+K/p4A1qRfRrRPy9TSEq0qJhnRZEwr+wIInqBTlmOqr3qAPZ mfXFawaOnkC9JGBFADbnNErlP/U+lP6VUEtZOH9w5buLQnaqOCEykIQcp+cvkdgX 3x9sQ8ZXAddrmfR2sDMJARMdsfUe7mbJTUVdekruZFr2meEWQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAPW+uaWUE//FpUilTU9iWT++88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDIxOWNhNzItMjI1My0z NDQ1LTgxODItYmZlMzFmMDA4NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG973inSEChNBEQb/W+79++C4G5EG4f9l0lMVsT1oUjj1fzGYgy1aEYT wPzPbYu0JF2qUUn4vfV8Hws3GBvpXRKWkflJisUtBKveB80dA6sTdKYkOGhgA+w/ bHCDrKTulpSYELdjYmON/U4dTA+el+L5x7BcRJm+bdRLeG7aG8UJndi+Xq9Lfppw SJKPUqGG0kG8AVHBuiWcF7/jYAyaxDu/QGguz6sVpXQ3EdwB7bnjSyHNHyKy9zTl 9DRXbjzcT2q2f85SMHOqI3l+bLy3an511dwECjvkLcOmg4xLka9RSohIDoSo/6j0 5moZQE2Wbzm2vkUKiUKJTi+eijHhQx8= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:54 2025 by rpki-client