$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14cc098d-4376-3197-8e2a-80a3c6605034.roa File: 14cc098d-4376-3197-8e2a-80a3c6605034.roa (raw, json) Hash identifier: WRjQi+DUspMal6J3OpUAOifkR6LE+6LDAxwqtoKQr8s= Subject key identifier: 9D:94:D8:A4:AD:49:F7:B0:FA:FD:C6:4E:DC:FB:AC:EF:1C:60:74:4E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C8001D0F740D21855100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14cc098d-4376-3197-8e2a-80a3c6605034.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.221.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c8:00:1d:0f:74:0d:21:85:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=7bbedb50-17ff-4efe-bf18-249c5c59d5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:0b:da:06:d2:95:83:52:c2:2b:6d:1b:00: 20:f7:7c:14:de:19:5a:93:48:be:89:3e:a3:02:8e: d2:a3:8c:da:b1:e7:f3:a1:6c:3d:ee:c1:8b:c1:45: f9:86:fc:e5:3c:a0:c2:3d:db:9a:d6:c7:6c:27:b0: 4e:19:50:38:70:68:0d:11:d0:18:80:da:8e:07:c6: 37:85:9a:10:d2:a0:d7:30:da:b0:40:4a:73:5b:70: 70:39:8c:63:8c:bc:84:02:57:f8:c4:b3:b6:a3:be: 8e:61:03:df:2a:30:e8:78:57:b6:a0:62:1f:c1:08: b7:ea:76:ad:b0:b4:14:af:f7:50:9d:c5:9b:91:89: 5a:3d:54:56:42:3a:6e:1a:14:6b:7a:dc:65:06:22: ec:74:45:2a:72:9f:1c:17:c9:56:80:fe:bd:ef:38: c6:53:5b:ce:d2:2f:d8:e3:f4:54:5d:ac:1c:de:31: fb:20:90:d5:37:47:a3:5b:5d:e1:ba:f1:07:9f:99: 20:c5:94:42:ce:e9:91:d5:b0:eb:0f:bd:3a:48:da: 38:e6:bb:98:74:15:b0:2f:4e:ee:33:4c:9b:a7:59: 31:ae:7a:ce:85:b1:3f:67:25:8f:f5:ae:76:8c:c8: e6:7c:77:3b:10:53:16:7e:03:4d:4f:0c:b6:07:cf: 2b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:D8:A4:AD:49:F7:B0:FA:FD:C6:4E:DC:FB:AC:EF:1C:60:74:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14cc098d-4376-3197-8e2a-80a3c6605034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c7:fb:ff:fd:b4:ce:b2:94:14:f8:07:eb:99:97:b6:99:56: 2e:0d:5b:1d:50:d2:15:fe:de:fe:28:be:28:64:f8:7d:c9:1b: da:2a:4d:4f:e3:a0:68:95:9b:87:20:0f:46:de:4b:ce:52:c6: a9:0d:95:b9:30:74:11:cc:83:fa:af:5a:97:40:b1:6d:b3:3b: 65:7b:ee:f9:18:66:d6:1d:b4:bc:21:84:58:a6:b7:00:70:44: f4:7c:4c:74:86:dc:71:7b:59:ac:ae:20:0d:96:58:bf:1f:6e: ed:6b:c2:dd:06:a5:8f:11:b8:6d:6a:95:47:c6:85:08:53:85: ea:11:0c:68:31:f2:6b:f7:3d:20:ca:e7:79:5a:df:5a:f9:4d: 51:66:79:27:4d:4c:9c:02:55:85:77:e9:33:72:b3:04:53:8b: db:1e:60:f2:a8:fb:f0:84:48:99:99:f0:6b:05:05:89:d1:90: 2c:dc:d0:1a:03:53:84:9c:17:bc:6c:42:86:b1:ca:66:e5:d0: dc:9d:6c:51:29:e1:19:90:a3:3e:2f:2f:08:9f:df:03:bb:a7: fc:78:1b:53:f7:8a:58:16:e3:09:f9:72:01:bf:9c:ca:a3:d8: a5:88:e4:49:13:06:d1:be:bf:13:56:b4:ed:f4:19:c5:c2:4d: f7:2f:c8:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcgAHQ90DSGFUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk N2JiZWRiNTAtMTdmZi00ZWZlLWJmMTgtMjQ5YzVjNTlkNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S4L2gbSlYNSwittGwAg93wU3hlak0i+iT6j Ao7So4zasefzoWw97sGLwUX5hvzlPKDCPdua1sdsJ7BOGVA4cGgNEdAYgNqOB8Y3 hZoQ0qDXMNqwQEpzW3BwOYxjjLyEAlf4xLO2o76OYQPfKjDoeFe2oGIfwQi36nat sLQUr/dQncWbkYlaPVRWQjpuGhRretxlBiLsdEUqcp8cF8lWgP697zjGU1vO0i/Y 4/RUXawc3jH7IJDVN0ejW13huvEHn5kgxZRCzumR1bDrD706SNo45ruYdBWwL07u M0ybp1kxrnrOhbE/ZyWP9a52jMjmfHc7EFMWfgNNTwy2B88rIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2U2KStSfew+v3GTtz7rO8cYHROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTRjYzA5OGQtNDM3Ni0z MTk3LThlMmEtODBhM2M2NjA1MDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrH+//9tM6ylBT4B+uZl7aZVi4NWx1Q0hX+3v4ovihk+H3JG9oqTU/j oGiVm4cgD0beS85SxqkNlbkwdBHMg/qvWpdAsW2zO2V77vkYZtYdtLwhhFimtwBw RPR8THSG3HF7WayuIA2WWL8fbu1rwt0GpY8RuG1qlUfGhQhTheoRDGgx8mv3PSDK 53la31r5TVFmeSdNTJwCVYV36TNyswRTi9seYPKo+/CESJmZ8GsFBYnRkCzc0BoD U4ScF7xsQoaxymbl0NydbFEp4RmQoz4vLwif3wO7p/x4G1P3ilgW4wn5cgG/nMqj 2KWI5EkTBtG+vxNWtO30GcXCTfcvyIc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:41:47 2025 by rpki-client