$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20ca9fb6-15c9-32b8-baec-cdd3eab02d6b.roa File: 20ca9fb6-15c9-32b8-baec-cdd3eab02d6b.roa (raw, json) Hash identifier: uooN7psz7f8MOVbj2KOaVIZzGm5cdIODx4qpeHYGF4U= Subject key identifier: 8A:2A:EF:E7:E9:23:F0:54:D6:C6:35:80:BE:6B:B5:7D:11:02:70:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B5BBEBFD56E47897E080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20ca9fb6-15c9-32b8-baec-cdd3eab02d6b.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.210.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b5:bb:eb:fd:56:e4:78:97:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=2ddf13b1-559f-43f9-aa98-5af4389cab72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:4b:b5:ec:7a:e2:39:e3:3e:17:8f:ef:9d: fc:f2:ba:a7:2c:3d:3e:7a:d4:03:34:68:4a:df:a4: 19:a6:17:f2:07:7d:f6:45:9a:84:b6:e0:83:82:ba: 66:0d:2e:3c:40:15:e4:e5:08:da:a6:6b:3c:96:c8: 80:b0:0d:82:33:8e:6f:2a:c7:f9:e8:23:42:36:f2: 09:01:6c:70:da:e4:4d:26:af:2d:8b:f5:05:07:c2: a1:ec:08:72:14:06:fe:dc:8a:43:7a:e5:96:4b:63: 7f:51:c8:a0:48:68:c0:72:35:06:a2:41:fc:88:cf: 06:e2:2f:40:ca:fe:c0:c3:40:90:52:09:1b:c3:7a: d6:83:ca:7f:fc:40:a7:96:d8:80:bb:63:fc:91:76: 95:07:13:6d:40:5f:78:42:27:75:20:98:70:0b:c6: f2:61:b1:e5:73:5f:74:5c:41:bb:a8:9e:7f:fc:8c: 7e:64:b3:3d:95:b2:98:aa:ca:fd:01:17:12:30:01: 85:b4:38:9b:18:fc:a3:82:10:e1:a7:0f:21:cd:a3: 9b:0a:b4:39:48:50:33:d7:43:6e:fb:ac:37:ce:4c: 0d:40:bc:dd:bc:75:8f:74:9e:c1:9e:f2:8f:51:c1: 82:56:73:b7:3e:7a:67:07:7b:6c:d5:33:af:14:fd: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2A:EF:E7:E9:23:F0:54:D6:C6:35:80:BE:6B:B5:7D:11:02:70:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20ca9fb6-15c9-32b8-baec-cdd3eab02d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:06:78:f6:58:c6:b6:bc:1a:5b:bd:20:d6:3b:fd:89:18:fa: 4f:82:ad:ec:2a:f3:55:c1:b4:8e:bb:2d:c6:c5:0f:52:16:b2: 9c:80:70:92:e8:10:d6:10:1d:e2:87:16:9f:f1:cd:07:1d:36: c9:d1:31:9b:da:40:c4:ca:d8:fc:e4:48:78:82:5e:15:cc:72: 9a:4a:6e:72:83:16:71:6a:d1:9b:80:d9:c4:35:24:d7:1d:8d: 16:b3:9b:fe:88:fb:7f:18:02:fe:4d:13:bf:75:08:6d:bb:5e: 3f:59:88:e2:f5:2b:65:66:c8:6b:f7:a1:d2:e9:f7:02:0e:5e: 46:6f:dc:e1:b2:82:c5:61:bb:61:33:63:98:0a:46:33:30:8f: e7:5d:f3:b5:e7:80:19:93:07:14:5c:72:e1:dd:f0:1e:06:13: 20:a7:93:60:4a:bf:02:b7:99:b6:bc:92:ac:7b:b4:c1:df:82: 13:67:bd:dc:15:98:25:7d:4b:58:9e:91:78:55:1d:d3:8f:f9: cb:41:d8:53:57:5c:22:17:a1:90:21:e1:4e:4c:9a:f2:18:11: 26:da:66:a6:06:f7:54:26:95:cf:da:e8:95:4c:89:a1:c2:c9: 87:47:ea:bd:6a:d8:06:89:ac:3e:45:64:90:53:be:07:b3:2c: b3:44:28:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbW76/1W5HiX4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MmRkZjEzYjEtNTU5Zi00M2Y5LWFhOTgtNWFmNDM4OWNhYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJhLtex64jnjPheP75388rqnLD0+etQDNGhK 36QZphfyB332RZqEtuCDgrpmDS48QBXk5Qjapms8lsiAsA2CM45vKsf56CNCNvIJ AWxw2uRNJq8ti/UFB8Kh7AhyFAb+3IpDeuWWS2N/UcigSGjAcjUGokH8iM8G4i9A yv7Aw0CQUgkbw3rWg8p//ECnltiAu2P8kXaVBxNtQF94Qid1IJhwC8byYbHlc190 XEG7qJ5//Ix+ZLM9lbKYqsr9ARcSMAGFtDibGPyjghDhpw8hzaObCrQ5SFAz10Nu +6w3zkwNQLzdvHWPdJ7BnvKPUcGCVnO3PnpnB3ts1TOvFP1/iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoq7+fpI/BU1sY1gL5rtX0RAnBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjBjYTlmYjYtMTVjOS0z MmI4LWJhZWMtY2RkM2VhYjAyZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNKbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoGePZYxra8Glu9INY7/YkY+k+Crewq81XBtI67LcbFD1IWspyAcJLo ENYQHeKHFp/xzQcdNsnRMZvaQMTK2PzkSHiCXhXMcppKbnKDFnFq0ZuA2cQ1JNcd jRazm/6I+38YAv5NE791CG27Xj9ZiOL1K2VmyGv3odLp9wIOXkZv3OGygsVhu2Ez Y5gKRjMwj+dd87XngBmTBxRccuHd8B4GEyCnk2BKvwK3mba8kqx7tMHfghNnvdwV mCV9S1iekXhVHdOP+ctB2FNXXCIXoZAh4U5MmvIYESbaZqYG91Qmlc/a6JVMiaHC yYdH6r1q2AaJrD5FZJBTvgezLLNEKMs= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:02 2025 by rpki-client