$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1250c957-531a-36e7-a8f7-70099a66bc75.roa File: 1250c957-531a-36e7-a8f7-70099a66bc75.roa (raw, json) Hash identifier: f4e9vsCNeVwEviGpZ2hanCk63VhquyUm5EAubnBgWhI= Subject key identifier: C3:F2:5D:D1:30:6A:F6:F3:AB:7C:85:93:02:52:7D:EA:5A:75:1B:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F019CEF5B7FB2666FF7C168 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1250c957-531a-36e7-a8f7-70099a66bc75.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:9c:ef:5b:7f:b2:66:6f:f7:c1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=cb252ab3-b20a-49d2-8c4f-dc1956223d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:aa:a9:d1:da:c6:1b:cf:78:61:15:15:71:fe: 7e:3c:13:52:1c:6c:4c:d7:2b:cd:22:d3:f4:d8:a5: 41:1b:2b:b7:11:96:6d:d9:fd:1e:90:4b:41:ed:44: 83:40:20:ec:15:62:e2:34:10:81:c5:be:e4:8c:7c: 8a:89:09:c9:32:bb:a3:03:d8:3c:89:15:d1:61:82: fd:05:29:5c:f2:e2:ad:1b:f7:47:75:ff:95:75:c0: 1d:d2:77:4e:55:8e:85:49:3c:22:1f:52:d2:6a:f5: 43:a1:c4:60:34:51:f4:92:aa:fb:a8:74:27:47:14: 7e:7c:24:8d:18:5e:e1:0d:70:68:c2:8e:b2:a0:05: f0:36:f8:18:1c:25:1d:30:63:fb:23:c7:66:53:75: 30:b1:c6:9c:4a:a7:79:71:d6:b3:b7:93:6b:a2:1e: dc:0b:ee:9b:80:ee:e0:c3:74:96:59:41:d5:be:de: 7b:a5:58:6d:cb:f1:2a:c9:94:b6:99:14:4e:64:a0: cf:dd:2d:0e:3a:1d:08:c2:15:b5:37:64:5f:f9:97: f0:93:b4:ce:7c:4a:be:f3:24:ec:32:95:26:59:78: de:be:da:55:03:c5:5a:09:22:ae:aa:62:83:ed:6f: ca:3b:b3:7b:17:a8:93:9a:04:86:41:c9:53:cb:32: 71:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F2:5D:D1:30:6A:F6:F3:AB:7C:85:93:02:52:7D:EA:5A:75:1B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1250c957-531a-36e7-a8f7-70099a66bc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:dd:05:be:92:bd:ce:91:42:24:01:28:f9:b2:33:7e:8c:aa: 39:b5:c0:d2:55:1a:75:79:de:43:f3:f1:cd:29:76:c0:a5:06: 39:8e:38:d9:b2:f4:76:4d:29:84:50:bd:d6:50:4a:1b:05:cc: 35:24:12:91:5c:52:d0:55:36:04:b2:a8:f0:b4:77:5f:23:87: cc:3a:42:1d:ef:c1:a9:8f:ac:ca:ed:0b:4d:18:a4:1b:2c:77: ff:62:50:08:fe:51:65:05:7a:c2:e2:ba:9f:20:8f:35:f1:2d: e4:b3:5f:0f:ef:77:4d:0e:8b:a3:b0:84:2b:96:39:ac:87:1f: 43:cc:e2:ba:67:cb:c5:23:ee:86:33:d6:50:29:7a:e4:32:66: 73:6d:bd:a7:7c:b4:af:77:db:2c:4f:f3:a9:b2:e5:aa:1d:8e: bb:74:4f:e2:70:f5:e4:1d:4c:b7:ce:1e:cd:fc:19:e5:c2:c9: 29:10:4a:59:5c:6b:4d:6a:24:c9:18:8c:10:8b:83:07:3d:57: a3:17:bb:1d:57:ff:4d:c7:00:9b:c7:9b:6b:cf:1a:10:75:aa: 40:56:73:7b:51:4f:e0:8d:df:7a:01:b8:e2:e6:af:38:ca:05: b3:ca:a0:76:5e:51:7d:46:07:4c:99:a7:b0:7f:c6:aa:3f:8d: 21:ba:d3:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZzvW3+yZm/3wWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2IyNTJhYjMtYjIwYS00OWQyLThjNGYtZGMxOTU2MjIzZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6qp0drGG894YRUVcf5+PBNSHGxM1yvNItP0 2KVBGyu3EZZt2f0ekEtB7USDQCDsFWLiNBCBxb7kjHyKiQnJMrujA9g8iRXRYYL9 BSlc8uKtG/dHdf+VdcAd0ndOVY6FSTwiH1LSavVDocRgNFH0kqr7qHQnRxR+fCSN GF7hDXBowo6yoAXwNvgYHCUdMGP7I8dmU3UwscacSqd5cdazt5Nroh7cC+6bgO7g w3SWWUHVvt57pVhty/EqyZS2mRROZKDP3S0OOh0IwhW1N2Rf+Zfwk7TOfEq+8yTs MpUmWXjevtpVA8VaCSKuqmKD7W/KO7N7F6iTmgSGQclTyzJxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPyXdEwavbzq3yFkwJSfepadRtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTI1MGM5NTctNTMxYS0z NmU3LWE4ZjctNzAwOTlhNjZiYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFndBb6Svc6RQiQBKPmyM36Mqjm1wNJVGnV53kPz8c0pdsClBjmOONmy 9HZNKYRQvdZQShsFzDUkEpFcUtBVNgSyqPC0d18jh8w6Qh3vwamPrMrtC00YpBss d/9iUAj+UWUFesLiup8gjzXxLeSzXw/vd00Oi6OwhCuWOayHH0PM4rpny8Uj7oYz 1lApeuQyZnNtvad8tK932yxP86my5aodjrt0T+Jw9eQdTLfOHs38GeXCySkQSllc a01qJMkYjBCLgwc9V6MXux1X/03HAJvHm2vPGhB1qkBWc3tRT+CN33oBuOLmrzjK BbPKoHZeUX1GB0yZp7B/xqo/jSG602Q= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:25 2025 by rpki-client