$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/256f6f83-cccf-3fb5-8c79-275fc44a4b5a.roa File: 256f6f83-cccf-3fb5-8c79-275fc44a4b5a.roa (raw, json) Hash identifier: itxiJ4TW2nL9DOtcq7lF4ybXK3q0UwwFzQ07yy7ACro= Subject key identifier: BA:56:99:1B:67:78:EA:06:32:97:3D:46:14:2F:63:C4:5A:F7:A1:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A7D7311888CE0C09C600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/256f6f83-cccf-3fb5-8c79-275fc44a4b5a.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.206.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a7:d7:31:18:88:ce:0c:09:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=49009158-9b55-43e3-93d1-441c35fd84e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f3:2c:de:c0:4c:73:9a:99:4d:25:4f:50:31: a5:7c:ed:4c:b3:72:96:bb:1c:56:76:c4:86:4f:21: 2b:c4:47:0b:7b:55:59:9c:68:f8:64:a6:75:39:a9: 9c:d4:bd:9a:ca:47:a1:fc:6a:c1:b4:c2:88:c0:0d: 92:e3:a7:70:04:3d:01:d1:d3:8e:14:9c:ab:b6:80: 4f:ca:11:a2:68:48:b8:8c:44:11:9f:c9:35:ac:ed: a7:4b:ad:28:37:2b:91:62:fb:e9:04:ad:72:52:97: 65:e4:55:d5:7a:d2:3b:26:dc:50:76:92:12:df:aa: 14:7a:ac:83:70:37:43:11:b5:08:2d:55:6b:09:f8: fd:29:1f:1d:4c:cb:2d:9c:0d:36:49:e8:20:8a:a6: e1:6b:2d:ce:36:90:29:6d:02:f9:e6:29:b8:75:d9: dc:0c:a7:45:40:63:4e:cd:3f:b5:4b:04:a6:be:4d: 53:f1:24:41:db:cb:01:33:43:2d:d6:bc:92:a1:e9: be:c6:39:92:9a:25:4e:67:5c:7d:cf:d3:31:9f:57: 0a:f5:ac:23:a4:0d:11:ca:63:13:97:f7:38:4a:3d: b6:24:21:47:7d:84:7b:00:95:30:3c:7d:6d:fa:96: b5:dd:61:c1:77:d7:41:d4:b1:bc:18:22:85:1c:4b: fa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:56:99:1B:67:78:EA:06:32:97:3D:46:14:2F:63:C4:5A:F7:A1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/256f6f83-cccf-3fb5-8c79-275fc44a4b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:77:ab:dd:e7:6d:64:84:c4:10:40:d9:7a:89:72:91:f3:a1: c0:85:30:e9:55:dc:4d:50:8e:d7:d5:bb:de:e7:21:5d:a3:a5: 85:10:08:ba:02:a5:7c:31:9b:86:4d:45:34:fa:44:74:55:67: 0b:02:fc:0b:81:a1:d4:f3:67:11:4c:ba:0a:41:d7:b5:aa:b1: 21:80:31:4e:a5:bc:ae:cb:2a:5a:0d:c9:cd:98:03:dd:4c:02: 13:87:84:10:05:58:4b:7a:2b:7e:a9:b9:f2:5f:99:00:88:a7: bc:41:70:85:c1:ca:91:13:c4:99:74:87:49:8b:0f:67:a6:3b: eb:41:f6:8e:14:6c:1a:13:ce:ff:7a:13:90:34:e4:26:78:b3: 65:5c:a5:4f:8f:77:40:52:67:c8:d8:f0:fc:55:0a:bb:cc:76: 66:3a:14:7b:e7:73:19:dd:2e:5d:90:7f:82:52:7c:d1:3f:38: 8a:6f:9e:98:32:f0:d0:70:cb:11:f7:5a:78:2f:48:ab:b9:2e: 19:f3:eb:34:7c:f2:e5:c2:1c:25:5a:2a:75:7e:36:50:ba:8e: c0:69:a2:6e:6f:2f:a8:2e:35:06:77:fe:99:16:0c:15:08:ac: 37:3c:47:f3:02:5f:d3:46:b3:63:b2:5e:bb:28:d6:36:22:9e: 14:c5:4d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAafXMRiIzgwJxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDkwMDkxNTgtOWI1NS00M2UzLTkzZDEtNDQxYzM1ZmQ4NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfMs3sBMc5qZTSVPUDGlfO1Ms3KWuxxWdsSG TyErxEcLe1VZnGj4ZKZ1Oamc1L2aykeh/GrBtMKIwA2S46dwBD0B0dOOFJyrtoBP yhGiaEi4jEQRn8k1rO2nS60oNyuRYvvpBK1yUpdl5FXVetI7JtxQdpIS36oUeqyD cDdDEbUILVVrCfj9KR8dTMstnA02Seggiqbhay3ONpApbQL55im4ddncDKdFQGNO zT+1SwSmvk1T8SRB28sBM0Mt1rySoem+xjmSmiVOZ1x9z9Mxn1cK9awjpA0RymMT l/c4Sj22JCFHfYR7AJUwPH1t+pa13WHBd9dB1LG8GCKFHEv6xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpWmRtneOoGMpc9RhQvY8Ra96ERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjU2ZjZmODMtY2NjZi0z ZmI1LThjNzktMjc1ZmM0NGE0YjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB3q93nbWSExBBA2XqJcpHzocCFMOlV3E1QjtfVu97nIV2jpYUQCLoC pXwxm4ZNRTT6RHRVZwsC/AuBodTzZxFMugpB17WqsSGAMU6lvK7LKloNyc2YA91M AhOHhBAFWEt6K36pufJfmQCIp7xBcIXBypETxJl0h0mLD2emO+tB9o4UbBoTzv96 E5A05CZ4s2VcpU+Pd0BSZ8jY8PxVCrvMdmY6FHvncxndLl2Qf4JSfNE/OIpvnpgy 8NBwyxH3WngvSKu5Lhnz6zR88uXCHCVaKnV+NlC6jsBpom5vL6guNQZ3/pkWDBUI rDc8R/MCX9NGs2OyXrso1jYinhTFTWg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:27 2025 by rpki-client