$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0295f34e-6239-337c-a9da-589f84ab2c8c.roa File: 0295f34e-6239-337c-a9da-589f84ab2c8c.roa (raw, json) Hash identifier: 1ohgQE+/DYRcy+tU+Ga9ZkJng6Z0bs8Gu6c9Zi5SQ6U= Subject key identifier: 46:6F:4D:C9:72:9F:84:9C:63:FF:EB:66:10:A0:95:CB:8E:A5:16:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C7EE30A2480D196B5F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0295f34e-6239-337c-a9da-589f84ab2c8c.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.221.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c7:ee:30:a2:48:0d:19:6b:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=9bedc14d-a03f-4235-97a7-86dedb6c909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:2b:cf:e0:93:29:04:e8:50:51:81:d6:93: b6:4d:b6:ec:c3:7f:71:cb:c0:f2:c2:54:11:b2:51: 7f:2c:29:f6:79:46:9a:da:5b:1e:84:07:37:32:87: 04:9f:ec:d4:20:fe:49:95:db:ae:89:e5:df:77:c4: 1a:4d:9c:f5:8c:02:1a:95:fc:b9:1b:e9:6f:a8:e3: 0b:96:33:d6:0a:7a:91:c7:b5:9f:12:06:fd:38:a3: bd:d9:ef:74:87:e6:64:ae:66:1d:34:29:f8:cf:ee: ca:9e:09:7d:6b:67:c2:36:c9:ac:32:2a:3a:76:09: 1b:3e:fc:34:fa:92:1a:89:22:1c:d5:11:61:0e:d8: 21:e7:9b:06:4d:b8:f9:47:03:64:6d:20:2b:bd:30: e8:96:c8:3d:1d:35:3c:5c:7a:5f:5b:49:d8:96:8c: e7:69:a0:e4:f4:df:f1:f0:4c:2d:f1:f4:90:13:b7: 87:65:ca:b5:a6:4e:2b:45:dc:41:bb:4e:cd:f3:e8: 71:d3:d4:19:15:be:b6:4b:85:31:f0:a7:a3:f8:69: 28:0c:29:20:3a:bd:4b:5f:9f:75:d5:22:d0:26:49: 0d:4a:fc:47:f2:b2:c0:66:dc:ef:3f:e5:ca:14:7b: de:37:99:c2:e0:24:6c:73:8f:c0:cd:05:dd:b9:ab: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6F:4D:C9:72:9F:84:9C:63:FF:EB:66:10:A0:95:CB:8E:A5:16:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0295f34e-6239-337c-a9da-589f84ab2c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:21:59:14:9c:ac:5b:92:e9:ca:9c:91:e3:2d:f1:00:ff:57: a7:4a:94:20:12:18:3a:fa:4c:85:f8:b2:a7:c0:74:a6:ae:d3: be:07:67:a6:7c:70:52:ef:eb:8a:fc:62:d7:40:d1:a0:64:a2: 64:fc:9d:0d:74:78:6f:fa:86:1d:a0:2b:4b:96:ee:bd:f1:9c: 43:9e:85:47:a2:0c:13:82:15:fd:57:7f:54:52:81:90:e0:1b: 64:37:cd:6c:9c:04:4f:c2:f7:44:5c:0d:32:89:85:33:0e:d8: d8:2c:e0:9f:02:59:e6:56:fc:9a:9c:82:cd:f1:10:fb:2e:7d: 8f:09:3c:58:c1:b8:ab:42:1f:70:81:69:92:f4:90:f7:9e:f0: ed:ad:43:d7:0d:07:c6:83:a7:a4:f6:79:a4:8a:f5:fc:d1:fe: b2:cc:80:c7:5e:71:20:37:ed:50:28:1c:39:b5:95:a3:30:0b: 78:c7:9d:fc:7d:87:ec:8f:27:fd:38:76:78:5a:64:83:f1:1a: ab:e8:22:4f:f1:33:82:28:4a:27:0b:04:da:55:ab:d5:36:c0: cc:80:35:ac:c2:3a:d1:1f:3f:ea:7b:21:a1:64:d8:c1:09:df: 12:63:25:0c:43:c5:49:76:e7:6e:e8:ed:38:f9:96:ec:21:76: 03:9a:d5:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcfuMKJIDRlrXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OWJlZGMxNGQtYTAzZi00MjM1LTk3YTctODZkZWRiNmM5MDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEIrz+CTKQToUFGB1pO2Tbbsw39xy8DywlQR slF/LCn2eUaa2lsehAc3MocEn+zUIP5JlduuieXfd8QaTZz1jAIalfy5G+lvqOML ljPWCnqRx7WfEgb9OKO92e90h+ZkrmYdNCn4z+7Kngl9a2fCNsmsMio6dgkbPvw0 +pIaiSIc1RFhDtgh55sGTbj5RwNkbSArvTDolsg9HTU8XHpfW0nYloznaaDk9N/x 8Ewt8fSQE7eHZcq1pk4rRdxBu07N8+hx09QZFb62S4Ux8Kej+GkoDCkgOr1LX591 1SLQJkkNSvxH8rLAZtzvP+XKFHveN5nC4CRsc4/AzQXduav8PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZvTclyn4ScY//rZhCglcuOpRZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI5NWYzNGUtNjIzOS0z MzdjLWE5ZGEtNTg5Zjg0YWIyYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwhWRScrFuS6cqckeMt8QD/V6dKlCASGDr6TIX4sqfAdKau074HZ6Z8 cFLv64r8YtdA0aBkomT8nQ10eG/6hh2gK0uW7r3xnEOehUeiDBOCFf1Xf1RSgZDg G2Q3zWycBE/C90RcDTKJhTMO2Ngs4J8CWeZW/Jqcgs3xEPsufY8JPFjBuKtCH3CB aZL0kPee8O2tQ9cNB8aDp6T2eaSK9fzR/rLMgMdecSA37VAoHDm1laMwC3jHnfx9 h+yPJ/04dnhaZIPxGqvoIk/xM4IoSicLBNpVq9U2wMyANazCOtEfP+p7IaFk2MEJ 3xJjJQxDxUl2527o7Tj5luwhdgOa1ao= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:58 2025 by rpki-client