$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11a0e1bf-b64e-3c4a-86d3-b9976153a685.roa File: 11a0e1bf-b64e-3c4a-86d3-b9976153a685.roa (raw, json) Hash identifier: /rDJZvnec8Q34Su68fsulW698IQaGDrpRBDj8IGDSMk= Subject key identifier: 68:E0:0D:4E:3C:87:19:E9:47:D4:88:05:27:73:17:C8:7C:7D:60:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01AFF84F997409CCD86900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11a0e1bf-b64e-3c4a-86d3-b9976153a685.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:af:f8:4f:99:74:09:cc:d8:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=20de77f2-3b3f-4e16-871d-92c8dd9d1376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:9d:77:43:d7:17:72:d3:c6:6c:49:39:73: b4:18:2a:48:42:fc:dc:4f:e2:2d:ca:62:64:d8:69: d1:27:e5:72:62:ee:66:fa:1d:78:d6:50:ee:84:43: 38:4d:a0:05:55:36:6f:33:95:42:be:d0:e3:1c:a8: 48:09:fa:38:0a:63:bf:96:c8:03:51:0a:ca:66:65: 10:cb:dc:d7:dd:ae:5d:41:81:3b:9f:95:ed:ca:7a: 28:59:d6:90:2e:7c:00:18:18:a5:6d:f1:e0:56:04: b1:4b:2b:ac:5d:0f:0a:a3:1b:0a:15:22:09:19:c4: af:27:73:27:d6:01:55:20:6b:4f:6e:c9:c7:df:11: cd:81:7a:25:b1:29:60:7e:68:fb:93:a8:cd:1b:b0: cf:c4:9f:56:18:25:29:22:7e:d0:ee:b6:35:59:80: c9:59:fa:9b:88:59:7e:0d:1d:30:14:ee:e3:c1:b9: 96:88:b9:6b:ee:cf:9f:9d:de:e4:3a:a6:59:5a:34: e0:ef:d6:ee:b9:4f:b1:54:90:ee:3f:66:78:c8:7f: c4:83:3f:b9:45:38:a5:0f:80:8e:8c:22:23:0a:b8: 6d:cb:a9:72:94:ca:7b:b5:be:62:7f:21:52:07:b4: 28:cb:9b:bc:b0:2b:cf:80:0d:b0:cd:61:f3:ac:7d: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E0:0D:4E:3C:87:19:E9:47:D4:88:05:27:73:17:C8:7C:7D:60:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11a0e1bf-b64e-3c4a-86d3-b9976153a685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a1:fc:09:a1:0d:65:c7:f8:73:cc:1c:62:8b:0b:49:48:6a: c6:09:4d:7a:6d:5b:3e:a0:ab:ca:57:14:25:2c:62:57:15:ab: 1f:41:5b:09:40:68:f2:8a:cc:e5:6b:dc:54:5f:7c:e0:81:6e: fa:b4:cd:7f:a9:f7:9a:2d:8b:84:3d:22:eb:c7:14:e0:1a:b2: 18:16:80:e8:cc:b8:59:26:ab:9b:69:ce:f1:cd:f7:d5:ec:97: 13:d1:60:7d:4c:bf:d9:c7:28:f3:d5:b9:50:35:cd:df:40:db: 00:c9:19:9f:be:0e:7e:96:54:eb:41:39:b5:1c:a3:51:92:96: 72:08:14:32:2c:e1:a9:ca:f3:6d:f2:ec:18:ad:6a:43:7a:72: 6c:ac:a5:9d:87:6c:3e:b6:b4:27:00:5e:54:a6:87:af:40:70: 13:82:10:be:9d:c7:21:18:a0:80:1d:88:8a:ad:da:cd:d5:55: c7:fb:e1:7b:6d:18:ce:f6:c8:23:df:e6:06:ba:70:8a:c2:12: 87:e7:50:57:66:23:ba:cc:64:c3:bf:62:c8:91:b8:16:25:ae: 63:d2:48:e0:21:e8:fe:a4:95:67:f5:46:fc:87:6a:7e:d4:08: c6:fc:81:b3:9b:17:04:51:59:15:0f:ff:52:5b:2c:d7:fb:a4: 4b:bd:a1:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAa/4T5l0CczYaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MjBkZTc3ZjItM2IzZi00ZTE2LTg3MWQtOTJjOGRkOWQxMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq+dd0PXF3LTxmxJOXO0GCpIQvzcT+ItymJk 2GnRJ+VyYu5m+h141lDuhEM4TaAFVTZvM5VCvtDjHKhICfo4CmO/lsgDUQrKZmUQ y9zX3a5dQYE7n5XtynooWdaQLnwAGBilbfHgVgSxSyusXQ8KoxsKFSIJGcSvJ3Mn 1gFVIGtPbsnH3xHNgXolsSlgfmj7k6jNG7DPxJ9WGCUpIn7Q7rY1WYDJWfqbiFl+ DR0wFO7jwbmWiLlr7s+fnd7kOqZZWjTg79buuU+xVJDuP2Z4yH/Egz+5RTilD4CO jCIjCrhty6lylMp7tb5ifyFSB7Qoy5u8sCvPgA2wzWHzrH0dsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjgDU48hxnpR9SIBSdzF8h8fWAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTFhMGUxYmYtYjY0ZS0z YzRhLTg2ZDMtYjk5NzYxNTNhNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqh/AmhDWXH+HPMHGKLC0lIasYJTXptWz6gq8pXFCUsYlcVqx9BWwlA aPKKzOVr3FRffOCBbvq0zX+p95oti4Q9IuvHFOAashgWgOjMuFkmq5tpzvHN99Xs lxPRYH1Mv9nHKPPVuVA1zd9A2wDJGZ++Dn6WVOtBObUco1GSlnIIFDIs4anK823y 7BitakN6cmyspZ2HbD62tCcAXlSmh69AcBOCEL6dxyEYoIAdiIqt2s3VVcf74Xtt GM72yCPf5ga6cIrCEofnUFdmI7rMZMO/YsiRuBYlrmPSSOAh6P6klWf1RvyHan7U CMb8gbObFwRRWRUP/1JbLNf7pEu9oYw= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:47 2025 by rpki-client