$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22812ef1-bbb3-30fc-8263-9de2427f6667.roa File: 22812ef1-bbb3-30fc-8263-9de2427f6667.roa (raw, json) Hash identifier: Ccoeem13OncX4WUlbNSZUiFHB9y+8Its4c4yR65J3qo= Subject key identifier: E7:DB:4B:B7:A4:A2:F3:6B:11:FE:55:4B:BD:0E:3D:B1:B1:FF:0C:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BFB0DDC17F81B392D190 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22812ef1-bbb3-30fc-8263-9de2427f6667.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.216.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:bf:b0:dd:c1:7f:81:b3:92:d1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=6757bf29-4723-46fc-b12c-0b71c0659ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:e3:4e:7d:b9:5c:36:54:2f:25:97:48:bb: 38:aa:f3:ae:47:41:a9:05:4c:5a:51:d2:63:8e:99: 6d:d0:fa:ae:18:45:3f:46:0c:3b:5d:6e:ac:1f:c1: 76:22:22:17:bc:07:bf:65:45:38:b8:42:b9:a8:b0: 6f:03:1f:bf:04:22:38:e9:08:d7:e1:d2:13:1c:eb: 75:f3:ad:79:cf:f1:e0:8e:83:d9:68:86:b3:ad:a6: e7:1e:44:98:a7:83:90:9c:68:9a:d5:c7:84:6d:0e: 36:76:a5:25:ef:96:38:18:cf:a5:41:48:c2:79:40: 2f:25:ce:50:b7:95:bc:bf:f0:9a:1c:7b:32:d8:5b: 05:a2:9c:07:3d:20:90:84:46:0d:07:c7:30:f4:9b: dd:34:53:d5:fa:d2:80:1e:37:f2:b3:af:68:d7:69: 3b:86:2c:85:d8:37:14:a6:13:90:d5:eb:82:3c:ea: 26:2e:5c:ac:64:88:03:0b:02:24:f5:37:ff:09:a8: c9:53:9b:ab:98:53:15:3d:4d:07:c5:e1:68:ae:87: 5d:a5:8d:3d:34:1b:ac:4b:29:6c:71:a8:7d:5d:4d: d8:8d:57:ac:c5:55:d8:06:55:38:dc:f7:25:11:73: 06:74:69:97:b1:2d:64:01:5c:43:bd:80:e7:b6:6e: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DB:4B:B7:A4:A2:F3:6B:11:FE:55:4B:BD:0E:3D:B1:B1:FF:0C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22812ef1-bbb3-30fc-8263-9de2427f6667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2a:42:ac:0b:56:b0:eb:67:14:04:68:1d:1c:09:3a:6b:21: 25:ec:0a:82:a2:a6:cb:0e:8a:28:4d:6f:ea:1e:e5:6d:84:0e: 02:b4:2c:c8:ff:8a:ce:ec:01:0f:4e:55:6b:74:66:88:1a:8a: e1:c7:c5:1d:ca:65:15:d6:a6:20:e5:54:3e:90:56:59:c4:68: 78:15:b7:82:d6:ab:19:79:8b:75:d4:7c:8a:58:8b:d9:17:18: 38:8f:e2:c3:f7:a1:ac:30:16:c3:89:62:a3:c6:7a:31:a8:40: 5a:ee:19:5e:e8:f2:13:1a:88:63:09:b4:0f:98:2e:e4:14:1d: a2:a2:59:6d:a6:cd:29:f1:23:67:a0:31:b4:41:6b:f3:e2:97: 52:1a:c5:d0:97:a6:05:96:81:ec:54:10:9a:29:3c:da:3d:c4: 84:f7:19:62:af:2d:2f:f5:96:e8:f3:15:79:60:b8:74:3d:dd: 96:14:55:43:58:f3:be:d8:7a:51:ee:02:5a:cb:69:2c:c3:ac: 2f:0b:d6:f7:c8:76:d3:a6:57:47:05:aa:67:37:37:fb:20:ad: 54:3c:17:d4:92:d0:41:24:6c:55:42:4b:a8:12:33:ae:34:82: 5f:6c:70:e6:ce:85:85:c5:6e:5f:a5:e5:d0:0e:98:98:82:c5: c1:12:03:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAb+w3cF/gbOS0ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Njc1N2JmMjktNDcyMy00NmZjLWIxMmMtMGI3MWMwNjU5YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWTjTn25XDZULyWXSLs4qvOuR0GpBUxaUdJj jplt0PquGEU/Rgw7XW6sH8F2IiIXvAe/ZUU4uEK5qLBvAx+/BCI46QjX4dITHOt1 8615z/HgjoPZaIazrabnHkSYp4OQnGia1ceEbQ42dqUl75Y4GM+lQUjCeUAvJc5Q t5W8v/CaHHsy2FsFopwHPSCQhEYNB8cw9JvdNFPV+tKAHjfys69o12k7hiyF2DcU phOQ1euCPOomLlysZIgDCwIk9Tf/CajJU5urmFMVPU0HxeForoddpY09NBusSyls cah9XU3YjVesxVXYBlU43PclEXMGdGmXsS1kAVxDvYDntm7NxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfbS7ekovNrEf5VS70OPbGx/wyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjI4MTJlZjEtYmJiMy0z MGZjLTgyNjMtOWRlMjQyN2Y2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQqQqwLVrDrZxQEaB0cCTprISXsCoKipssOiihNb+oe5W2EDgK0LMj/ is7sAQ9OVWt0ZogaiuHHxR3KZRXWpiDlVD6QVlnEaHgVt4LWqxl5i3XUfIpYi9kX GDiP4sP3oawwFsOJYqPGejGoQFruGV7o8hMaiGMJtA+YLuQUHaKiWW2mzSnxI2eg MbRBa/Pil1IaxdCXpgWWgexUEJopPNo9xIT3GWKvLS/1lujzFXlguHQ93ZYUVUNY 877YelHuAlrLaSzDrC8L1vfIdtOmV0cFqmc3N/sgrVQ8F9SS0EEkbFVCS6gSM640 gl9scObOhYXFbl+l5dAOmJiCxcESA4c= -----END CERTIFICATE-----Generated at Thu Oct 16 01:46:55 2025 by rpki-client