$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05a98a55-3191-3984-b8d1-76cbcffebbab.roa File: 05a98a55-3191-3984-b8d1-76cbcffebbab.roa (raw, json) Hash identifier: ARTGN0bCMlboffDevDS953x9Ip8FGsLulfllpXLFJLk= Subject key identifier: B8:BD:1C:6F:73:F3:C6:D6:47:11:62:66:AF:A2:07:24:C7:51:D0:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B10BB1E3BC5B5867BA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05a98a55-3191-3984-b8d1-76cbcffebbab.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b1:0b:b1:e3:bc:5b:58:67:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=16965aa9-d9d9-4fe0-a6cb-b8a680de87aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:61:dd:3c:b6:25:a0:3a:44:bb:fa:36:86: 2f:e8:b6:a8:a0:9e:93:9d:c3:ed:35:f8:10:36:d2: dc:ff:c6:7c:2f:93:85:88:9e:f6:29:da:90:24:f5: f6:7b:32:b4:94:14:2f:f1:88:7f:cf:1e:a5:06:ad: b0:30:b2:d6:5f:33:81:0e:ca:c3:68:21:f2:4f:3d: c7:da:cb:38:dd:08:60:26:03:99:06:79:72:49:92: 72:7c:a6:cf:ce:f1:76:af:d0:dc:bc:7a:fa:63:5c: e2:8f:c7:d5:1c:0c:7c:f5:37:d6:2e:e7:12:76:ea: 69:fb:37:66:96:c4:03:e6:e3:a3:02:8a:cc:6b:37: ee:9d:69:6f:55:b1:09:97:1b:03:03:19:93:9b:c5: 81:75:ba:28:90:61:13:a6:e3:e8:28:7b:c0:58:14: da:31:91:51:f6:74:11:f9:6e:81:c6:55:67:7c:91: ff:de:2d:57:83:d8:5a:1a:c6:2f:2d:aa:6f:e3:c2: bd:64:2d:51:e6:18:cf:b1:91:4f:f2:f4:b2:86:62: 0b:6d:dd:cd:f2:61:eb:43:4a:ce:69:f2:c7:9d:f3: 17:e0:b8:81:72:23:9e:a0:9c:81:21:bc:47:88:47: 29:c2:69:7d:f5:ad:0c:8b:c7:71:d5:61:a4:44:27: 37:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BD:1C:6F:73:F3:C6:D6:47:11:62:66:AF:A2:07:24:C7:51:D0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05a98a55-3191-3984-b8d1-76cbcffebbab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d5:14:d9:f6:19:d8:28:4b:51:ba:d3:fb:e9:0c:d0:fb:37: 91:f0:c7:1d:fb:4d:18:36:69:21:85:ff:1d:aa:60:bf:01:23: c3:c9:3a:7f:42:c4:9a:dc:86:80:46:a7:9a:0c:c3:82:9d:94: 17:72:44:71:b3:ea:f5:e5:76:8b:d1:15:7f:e0:0a:c7:85:de: 7d:84:eb:a1:18:24:04:be:f0:32:ab:f0:0b:fe:d1:3b:60:e8: e5:a1:77:9b:a3:57:5a:c5:e3:d9:41:16:9f:4d:15:e7:93:5c: b5:c6:56:31:38:31:d1:13:81:ec:8a:78:82:eb:dd:76:02:45: 15:e6:53:ec:d1:be:03:52:87:0d:17:e0:6b:03:66:b5:a6:23: 3a:e4:2e:fd:99:84:49:8a:b5:96:b1:7c:89:ab:32:d5:6d:27: eb:4f:66:f6:87:67:8b:66:f0:89:31:02:19:4b:a4:af:57:db: 99:a1:34:18:20:3b:54:fe:2b:f8:c3:f5:44:b3:4c:03:51:49: 05:ce:e2:6f:df:17:9e:42:93:5c:85:b5:28:e6:3b:7a:1a:a1: 0f:1f:4e:0b:c5:71:a6:43:6b:41:66:fe:dc:90:3c:68:81:9b: ad:a9:70:c6:89:b3:64:38:a3:64:7b:b0:2c:fe:0c:39:16:c6: 22:17:be:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbELseO8W1hnukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTY5NjVhYTktZDlkOS00ZmUwLWE2Y2ItYjhhNjgwZGU4N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOVh3Ty2JaA6RLv6NoYv6LaooJ6TncPtNfgQ NtLc/8Z8L5OFiJ72KdqQJPX2ezK0lBQv8Yh/zx6lBq2wMLLWXzOBDsrDaCHyTz3H 2ss43QhgJgOZBnlySZJyfKbPzvF2r9DcvHr6Y1zij8fVHAx89TfWLucSdupp+zdm lsQD5uOjAorMazfunWlvVbEJlxsDAxmTm8WBdbookGETpuPoKHvAWBTaMZFR9nQR +W6BxlVnfJH/3i1Xg9haGsYvLapv48K9ZC1R5hjPsZFP8vSyhmILbd3N8mHrQ0rO afLHnfMX4LiBciOeoJyBIbxHiEcpwml99a0Mi8dx1WGkRCc3nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi9HG9z88bWRxFiZq+iByTHUdAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDVhOThhNTUtMzE5MS0z OTg0LWI4ZDEtNzZjYmNmZmViYmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXVFNn2GdgoS1G60/vpDND7N5Hwxx37TRg2aSGF/x2qYL8BI8PJOn9C xJrchoBGp5oMw4KdlBdyRHGz6vXldovRFX/gCseF3n2E66EYJAS+8DKr8Av+0Ttg 6OWhd5ujV1rF49lBFp9NFeeTXLXGVjE4MdETgeyKeILr3XYCRRXmU+zRvgNShw0X 4GsDZrWmIzrkLv2ZhEmKtZaxfImrMtVtJ+tPZvaHZ4tm8IkxAhlLpK9X25mhNBgg O1T+K/jD9USzTANRSQXO4m/fF55Ck1yFtSjmO3oaoQ8fTgvFcaZDa0Fm/tyQPGiB m62pcMaJs2Q4o2R7sCz+DDkWxiIXvnc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:06 2025 by rpki-client