$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2940a0b0-1e3d-3d1e-8507-ef0f7b57265d.roa File: 2940a0b0-1e3d-3d1e-8507-ef0f7b57265d.roa (raw, json) Hash identifier: P6w8bq9UL6IY0yu2RP/f4dynya0OvW+GqmE4Qdt6eVU= Subject key identifier: B0:B0:C6:D8:5A:F1:FB:DA:3E:E3:85:48:47:2D:BD:F4:11:39:10:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F019C24A0706899DFC85C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2940a0b0-1e3d-3d1e-8507-ef0f7b57265d.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.200.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:9c:24:a0:70:68:99:df:c8:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=12fec2df-df8b-471d-a463-2ccf27b8cebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:c0:7c:ee:4f:9e:94:f5:e4:e7:d9:93:be: ae:59:d7:d3:64:93:3d:70:53:76:2f:d6:11:c3:cc: 18:4a:cd:81:e3:da:0a:85:c0:15:2f:c5:d6:7b:a8: 89:b8:7b:c8:f6:94:be:9a:a9:05:8c:c4:87:c8:5a: 32:23:3f:4f:26:58:9e:2d:3b:66:9f:f4:11:dc:2d: 27:07:d4:c7:28:27:85:97:11:80:71:a8:b9:16:5e: 62:50:96:76:fc:e0:99:0b:b2:a2:f5:f4:ad:11:9a: 0b:43:40:01:af:c2:fd:00:4d:77:52:09:04:65:ee: 55:b7:44:3c:a3:57:18:a8:40:0a:a7:a9:31:ec:e9: 29:44:0e:68:06:ca:ef:d4:92:0f:ec:ec:a2:c0:1f: c4:9d:f6:c0:b0:ea:ae:2e:a7:8b:7b:4e:a7:45:50: 27:1c:37:99:40:a6:b4:85:c6:c8:2a:a9:69:cb:9f: 6f:7b:ac:c8:5c:e5:ab:ac:0e:37:83:42:57:70:16: 1d:b7:10:f5:0b:12:f7:1f:0f:ac:9d:f7:7e:46:44: 6a:2b:bd:c2:f2:30:8a:2c:ed:46:45:02:7a:06:4b: 6e:4e:ee:c7:65:28:ec:8d:da:21:b6:a9:fc:52:c7: 36:a9:28:9e:f5:b0:9e:a4:ef:d2:e7:4b:a7:15:df: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B0:C6:D8:5A:F1:FB:DA:3E:E3:85:48:47:2D:BD:F4:11:39:10:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2940a0b0-1e3d-3d1e-8507-ef0f7b57265d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fb:7f:aa:b7:b5:b1:21:81:6c:f1:1d:59:68:72:e3:7a:67: e1:b5:9a:27:ff:c2:d7:1d:e0:59:94:27:12:0a:11:b0:f2:53: 04:78:ea:16:fd:fb:92:e0:08:d2:df:54:85:4e:e8:7e:dd:43: 25:b3:30:ad:a3:cc:ad:fc:5d:13:cb:1e:ad:f4:c5:9b:bc:3c: a3:3f:db:74:32:e0:78:43:77:c0:e3:0b:57:c0:1d:e6:e7:c3: bf:54:e7:07:7d:42:3a:b9:80:b7:b7:35:0a:05:6e:76:25:b9: 31:46:c5:6a:57:d9:c1:64:cc:94:75:07:a1:50:f5:a4:92:ba: f1:b0:f1:da:cf:42:ca:24:b1:da:83:de:61:3f:38:38:00:4d: bd:45:b3:83:8d:0a:be:83:41:d3:b8:27:ce:92:63:cc:3d:db: 03:28:32:88:cd:de:f4:e2:02:cb:68:e5:b1:65:07:9c:4d:20: da:96:49:5e:0b:71:78:8f:5e:55:40:44:8e:b7:4a:87:8f:7b: 22:4d:f2:be:08:cd:b8:f1:61:fe:d6:76:35:e3:85:99:82:6c: 08:ac:f5:55:cb:7b:2c:4e:16:11:2f:3a:3f:38:8c:3e:70:d1: 6d:9f:9c:6b:22:82:e2:6a:9b:ff:b3:d7:0b:aa:94:df:f9:55: 03:c9:3a:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZwkoHBomd/IXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTJmZWMyZGYtZGY4Yi00NzFkLWE0NjMtMmNjZjI3YjhjZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqTAfO5PnpT15OfZk76uWdfTZJM9cFN2L9YR w8wYSs2B49oKhcAVL8XWe6iJuHvI9pS+mqkFjMSHyFoyIz9PJlieLTtmn/QR3C0n B9THKCeFlxGAcai5Fl5iUJZ2/OCZC7Ki9fStEZoLQ0ABr8L9AE13UgkEZe5Vt0Q8 o1cYqEAKp6kx7OkpRA5oBsrv1JIP7OyiwB/EnfbAsOquLqeLe06nRVAnHDeZQKa0 hcbIKqlpy59ve6zIXOWrrA43g0JXcBYdtxD1CxL3Hw+snfd+RkRqK73C8jCKLO1G RQJ6BktuTu7HZSjsjdohtqn8Usc2qSie9bCepO/S50unFd+nnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCwxtha8fvaPuOFSEctvfQRORBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjk0MGEwYjAtMWUzZC0z ZDFlLTg1MDctZWYwZjdiNTcyNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP7f6q3tbEhgWzxHVlocuN6Z+G1mif/wtcd4FmUJxIKEbDyUwR46hb9 +5LgCNLfVIVO6H7dQyWzMK2jzK38XRPLHq30xZu8PKM/23Qy4HhDd8DjC1fAHebn w79U5wd9Qjq5gLe3NQoFbnYluTFGxWpX2cFkzJR1B6FQ9aSSuvGw8drPQsoksdqD 3mE/ODgATb1Fs4ONCr6DQdO4J86SY8w92wMoMojN3vTiAsto5bFlB5xNINqWSV4L cXiPXlVARI63SoePeyJN8r4IzbjxYf7WdjXjhZmCbAis9VXLeyxOFhEvOj84jD5w 0W2fnGsiguJqm/+z1wuqlN/5VQPJOvQ= -----END CERTIFICATE-----Generated at Thu Oct 16 01:34:32 2025 by rpki-client