$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29aaa313-3df2-3fc2-8327-5ae1c67fc16b.roa File: 29aaa313-3df2-3fc2-8327-5ae1c67fc16b.roa (raw, json) Hash identifier: lYq0RrkrprxjnTLFY6pEJ2yQpwWwXqo9rJUp0VBPlnA= Subject key identifier: 73:8F:23:B0:F7:63:1A:07:5F:42:FB:FF:7D:F1:88:BF:09:F5:CC:9B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29B64EAC60F925E8DA980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29aaa313-3df2-3fc2-8327-5ae1c67fc16b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9b:64:ea:c6:0f:92:5e:8d:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=f8371d84-a6c5-4c65-bd0e-bde958cf6e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:ef:85:31:52:73:6c:9d:89:97:85:17:fd: ff:fd:5d:e9:d7:2d:2a:f6:0d:30:a2:2f:f1:49:6e: 0c:af:a6:18:ed:76:25:de:a1:73:71:2a:8e:c4:c2: d0:a7:d4:77:0f:89:7b:0c:0c:94:98:3a:f3:04:65: 08:33:7d:8c:fd:6c:5a:77:36:87:4b:f6:4d:a6:6a: bd:07:f9:2b:a6:9c:9d:55:5a:42:0b:90:cc:49:2d: 60:ee:9c:80:62:4b:37:7e:3b:73:84:60:c6:76:03: a2:1f:23:c2:01:f8:cb:14:e0:48:16:c1:2f:1f:71: 89:61:aa:a8:b2:66:b2:3f:32:1a:65:f1:86:11:f3: 27:6c:8b:e2:81:7b:1c:c4:bb:0f:d3:8a:a2:72:c5: 15:1d:ce:31:21:d1:39:d2:66:81:dc:3d:a5:65:43: 37:6b:c7:ba:97:ad:ce:40:a7:3f:67:b7:32:02:b2: 1a:cc:29:9e:05:e1:b2:a4:6d:0f:40:c1:44:db:23: 57:3d:11:df:f3:ce:2b:36:d5:d5:5a:97:db:71:51: a2:32:ce:53:73:67:cf:64:e7:08:eb:0b:1d:a6:15: b0:12:7d:61:df:bf:14:39:84:fd:c7:02:73:36:45: 31:14:b4:0a:8d:a7:6b:6e:cb:5e:04:f1:70:19:c9: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8F:23:B0:F7:63:1A:07:5F:42:FB:FF:7D:F1:88:BF:09:F5:CC:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29aaa313-3df2-3fc2-8327-5ae1c67fc16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6b:6f:7e:dc:a6:b6:63:c8:01:53:08:1c:26:d7:90:33:c5: f1:8b:4b:e0:9a:66:79:e9:c6:cb:6a:db:7a:ed:92:d7:9b:45: 77:1f:16:09:e8:a8:f0:4f:30:94:e8:47:81:8d:3d:3f:30:00: 3c:db:50:a0:c3:90:f8:a6:c3:f9:b9:cd:e6:77:99:f6:de:83: ed:9b:12:36:51:17:73:27:13:bc:56:ae:a8:5f:59:37:94:11: cb:7d:a8:35:5e:cc:5a:ae:05:0a:64:e6:c4:a3:54:31:22:f3: 6c:bc:c0:86:5c:96:e6:44:62:6e:a9:e0:40:94:58:15:9f:8b: 34:5d:01:34:02:bb:a9:6d:10:e3:3d:0a:16:6d:51:fb:5b:5e: 7a:17:b9:e3:bf:46:1b:06:85:54:25:45:c9:c2:34:36:4d:f2: 36:61:9b:52:55:15:a8:56:3c:de:ff:09:6a:55:b0:6c:17:6e: 8d:4b:71:c0:ee:16:fb:9e:7d:5a:36:4c:3c:8e:c0:f9:15:77: 01:2a:32:03:f0:57:ff:95:74:6d:6d:8f:52:88:ac:c8:9c:71: c6:cd:2c:e5:3b:9e:b1:4d:1a:8c:5f:ac:02:a7:d7:59:9f:8d: 41:4e:4f:25:e3:26:03:9f:43:e5:68:5d:70:9b:df:44:2e:1a: 59:1e:79:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ptk6sYPkl6NqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZjgzNzFkODQtYTZjNS00YzY1LWJkMGUtYmRlOTU4Y2Y2ZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0nvhTFSc2ydiZeFF/3//V3p1y0q9g0woi/x SW4Mr6YY7XYl3qFzcSqOxMLQp9R3D4l7DAyUmDrzBGUIM32M/WxadzaHS/ZNpmq9 B/krppydVVpCC5DMSS1g7pyAYks3fjtzhGDGdgOiHyPCAfjLFOBIFsEvH3GJYaqo smayPzIaZfGGEfMnbIvigXscxLsP04qicsUVHc4xIdE50maB3D2lZUM3a8e6l63O QKc/Z7cyArIazCmeBeGypG0PQMFE2yNXPRHf884rNtXVWpfbcVGiMs5Tc2fPZOcI 6wsdphWwEn1h378UOYT9xwJzNkUxFLQKjadrbsteBPFwGcle4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOPI7D3YxoHX0L7/33xiL8J9cybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjlhYWEzMTMtM2RmMi0z ZmMyLTgzMjctNWFlMWM2N2ZjMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNpTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxrb37cprZjyAFTCBwm15AzxfGLS+CaZnnpxstq23rtktebRXcfFgno qPBPMJToR4GNPT8wADzbUKDDkPimw/m5zeZ3mfbeg+2bEjZRF3MnE7xWrqhfWTeU Ect9qDVezFquBQpk5sSjVDEi82y8wIZcluZEYm6p4ECUWBWfizRdATQCu6ltEOM9 ChZtUftbXnoXueO/RhsGhVQlRcnCNDZN8jZhm1JVFahWPN7/CWpVsGwXbo1LccDu FvuefVo2TDyOwPkVdwEqMgPwV/+VdG1tj1KIrMicccbNLOU7nrFNGoxfrAKn11mf jUFOTyXjJgOfQ+VoXXCb30QuGlkeeTU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:52 2025 by rpki-client