$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df8dd13-2d92-366d-b84b-210b566b1e5b.roa File: 2df8dd13-2d92-366d-b84b-210b566b1e5b.roa (raw, json) Hash identifier: LU2bTSuvnXMvBj80FaxXxSpwWyOdG5YvJBJo+bNxnMo= Subject key identifier: BA:70:C5:B7:32:3B:EE:C1:3D:7F:9B:1D:6D:15:61:1F:3E:AE:31:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B6797F7422C24E6BB52005E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df8dd13-2d92-366d-b84b-210b566b1e5b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 22773 IP address blocks: 72.200.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f7:42:2c:24:e6:bb:52:00:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3a30f0f8-b601-4633-8406-538acdfff919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:55:34:b9:75:2c:ce:2b:cf:0d:82:08:0d:72: 4a:69:98:38:43:ce:66:5c:18:18:ea:68:be:77:7a: f3:c7:0a:15:86:9a:a0:bd:c3:ea:06:c0:58:c1:9a: 37:ae:5c:92:c0:01:66:e8:e5:3a:91:ee:3e:3f:c0: 7b:53:a7:cf:7e:be:be:ee:14:4d:d5:d6:ee:75:d7: a6:c2:d8:12:63:52:6e:64:a1:33:e3:cd:59:49:ed: bc:ab:17:93:d5:95:22:9f:69:c8:7d:64:d2:cc:2d: a1:5c:24:79:7b:46:ec:c6:9a:58:04:48:8b:c7:fe: 4e:a6:d8:99:70:2b:df:23:d7:2b:a5:39:f6:38:f3: 40:c5:f3:ff:ce:ee:c9:6d:e7:8b:02:6f:9c:87:5d: a9:7c:1f:7e:c8:2d:6e:56:60:cb:83:ff:86:d3:f1: d9:26:ee:51:9f:98:1b:a9:58:31:b1:79:c3:3b:ae: f8:e8:79:f8:99:26:2f:1b:3f:dd:3c:3e:e0:65:ab: c3:75:56:9a:68:8f:b1:0d:4d:00:1e:03:a0:75:1c: 19:0e:d5:7c:35:ab:76:cc:42:c5:00:0f:b8:4c:9a: 2c:0c:06:3a:ed:4e:d5:4c:d9:47:06:6b:34:7e:7d: 32:a6:9a:c1:e6:f9:9f:2c:6a:d7:7f:8e:d5:1a:41: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:70:C5:B7:32:3B:EE:C1:3D:7F:9B:1D:6D:15:61:1F:3E:AE:31:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df8dd13-2d92-366d-b84b-210b566b1e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f0:be:5e:c4:6b:1e:f8:9e:2f:7d:2b:11:74:7c:74:83:f4: c0:eb:79:02:9b:3c:9a:64:34:55:3b:95:b8:c2:11:75:77:3e: 33:e8:0f:3c:71:0a:8a:c5:ed:cc:15:a5:d9:13:e3:ba:b3:65: ad:55:03:4b:d8:63:36:39:af:44:73:28:19:19:83:62:4a:dd: be:27:5e:3f:ee:5d:34:46:88:c6:1d:27:94:d8:7b:31:aa:68: 99:c7:03:2b:0e:90:e5:e1:fb:00:97:fd:30:91:13:a5:b1:45: 5e:fa:0d:5a:d5:58:38:c9:30:11:23:de:a2:08:79:77:da:37: 00:de:3f:46:cd:3f:a8:88:e4:be:69:d9:21:09:4b:c6:a3:85: c6:9d:82:b6:44:63:dd:68:c3:a7:f9:ca:69:46:67:d7:0c:da: 8c:08:c4:78:df:72:e8:44:c7:52:0e:d0:9f:6c:d1:b4:64:38: 20:43:4e:84:46:ab:6f:d4:e3:ca:a8:00:88:be:23:50:9c:df: d6:3c:1b:ce:f9:ec:6b:4a:59:a9:ec:35:96:15:9e:56:9d:8f: c3:cc:5d:68:b6:f4:81:91:0e:e0:36:50:fb:73:f7:ab:5e:90: 8b:57:c6:20:40:47:bd:8c:ad:01:86:eb:ad:d1:6f:8c:eb:2f: 71:72:5e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/dCLCTmu1IAXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2EzMGYwZjgtYjYwMS00NjMzLTg0MDYtNTM4YWNkZmZmOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31U0uXUszivPDYIIDXJKaZg4Q85mXBgY6mi+ d3rzxwoVhpqgvcPqBsBYwZo3rlySwAFm6OU6ke4+P8B7U6fPfr6+7hRN1dbuddem wtgSY1JuZKEz481ZSe28qxeT1ZUin2nIfWTSzC2hXCR5e0bsxppYBEiLx/5OptiZ cCvfI9crpTn2OPNAxfP/zu7JbeeLAm+ch12pfB9+yC1uVmDLg/+G0/HZJu5Rn5gb qVgxsXnDO6746Hn4mSYvGz/dPD7gZavDdVaaaI+xDU0AHgOgdRwZDtV8Nat2zELF AA+4TJosDAY67U7VTNlHBms0fn0ypprB5vmfLGrXf47VGkGtewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpwxbcyO+7BPX+bHW0VYR8+rjEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRmOGRkMTMtMmQ5Mi0z NjZkLWI4NGItMjEwYjU2NmIxZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjwvl7Eax74ni99KxF0fHSD9MDreQKbPJpkNFU7lbjCEXV3PjPoDzxx CorF7cwVpdkT47qzZa1VA0vYYzY5r0RzKBkZg2JK3b4nXj/uXTRGiMYdJ5TYezGq aJnHAysOkOXh+wCX/TCRE6WxRV76DVrVWDjJMBEj3qIIeXfaNwDeP0bNP6iI5L5p 2SEJS8ajhcadgrZEY91ow6f5ymlGZ9cM2owIxHjfcuhEx1IO0J9s0bRkOCBDToRG q2/U48qoAIi+I1Cc39Y8G8757GtKWansNZYVnladj8PMXWi29IGRDuA2UPtz96te kItXxiBAR72MrQGG663Rb4zrL3FyXlo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:06 2025 by rpki-client