$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4301de6f-478c-3a5d-bb0f-c7ca1438c46e.roa File: 4301de6f-478c-3a5d-bb0f-c7ca1438c46e.roa (raw, json) Hash identifier: U0hiJIqxr06uyVG5D3I1Sofx/lqyqXkkdlN7OCSItRg= Subject key identifier: 96:D0:96:74:32:16:95:AE:ED:EB:62:FE:7F:C0:47:CD:9E:01:85:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01CC176D9886B71DFB7980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4301de6f-478c-3a5d-bb0f-c7ca1438c46e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.222.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:cc:17:6d:98:86:b7:1d:fb:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=6249efd2-0320-4b80-b045-af7c84429bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:08:ea:d9:4b:b4:f4:1c:7d:06:cb:f1:2b: 91:87:94:a9:c4:ec:09:2b:25:37:6b:ef:41:1c:31: 84:46:f0:e6:65:5a:0b:3a:d0:e3:e9:4c:46:15:cb: bc:57:1b:6c:55:d7:62:cd:b9:30:9f:6e:4e:1d:3c: 04:41:45:be:01:28:d3:b3:85:c7:ad:38:b3:b4:9f: 67:b9:c5:45:8e:2e:34:f2:09:d3:8f:5c:ab:a4:f1: 7b:42:dc:c9:16:3a:9a:de:0e:66:df:c4:7c:2b:a3: 42:7d:88:e3:5e:4d:8f:6e:72:37:fa:0c:00:fb:bf: 9c:32:a4:3c:cb:e5:93:a2:15:58:99:ab:96:88:9e: 6b:5f:e3:ed:8b:75:39:05:f7:7f:97:0b:d6:c3:b1: 51:c9:6b:f5:7a:1f:35:47:1a:aa:e1:6b:59:3b:13: 18:f9:63:29:d7:1b:d7:ae:85:e7:16:6b:56:37:db: 74:d4:c8:09:d9:b5:f9:fe:60:78:ed:79:c8:71:c0: 6b:7b:fa:b8:53:8a:a2:f9:de:90:b6:d3:7e:eb:f6: ce:cc:3c:b0:b6:ba:8b:1a:49:a9:21:f8:a0:d8:fe: f8:c5:12:67:48:28:00:43:90:e7:20:4b:c8:3f:d2: a2:4f:1d:21:95:63:79:85:24:a9:8f:05:6e:a5:a9: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D0:96:74:32:16:95:AE:ED:EB:62:FE:7F:C0:47:CD:9E:01:85:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4301de6f-478c-3a5d-bb0f-c7ca1438c46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a8:d1:f9:20:60:df:f1:d2:2b:8e:f2:94:52:f6:7d:0d:8f: f7:30:f2:3d:97:6c:e9:30:15:ed:a0:14:89:14:50:1f:92:1d: 82:2b:dc:f0:34:92:80:87:92:da:ac:1c:34:f9:20:dd:ba:b8: a6:f8:da:e2:61:4c:38:5c:e7:54:4b:4e:68:0e:63:38:63:f0: 87:09:d3:05:e8:32:4d:31:e4:d9:78:70:c8:37:01:75:c3:44: 90:84:70:26:f0:fa:56:0a:18:cf:93:6b:49:2a:99:d8:58:53: e6:45:4c:bd:9f:00:73:e2:4d:24:3e:8b:15:eb:dc:72:d0:26: 34:13:99:00:cf:3d:19:b5:35:bd:2e:be:df:89:9c:22:c3:7e: 7e:35:13:63:34:9f:1b:66:2a:f5:74:22:83:e5:6a:b2:ee:dc: 06:c9:00:84:53:3f:3b:b8:c4:28:1b:c5:68:bb:64:d8:0c:ff: 31:9b:02:5c:cd:e0:12:32:70:ad:06:25:20:f8:b7:ff:7c:5c: 2c:ac:a5:f0:64:33:f7:42:eb:4d:76:91:46:8d:74:cd:7f:49: 51:9c:0e:c0:15:be:89:fb:94:93:27:38:ae:44:30:88:5f:29: a2:35:71:f9:6a:0d:0c:b2:b4:94:3c:ea:8e:a4:f8:08:15:bc: 8c:cd:a6:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcwXbZiGtx37eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NjI0OWVmZDItMDMyMC00YjgwLWIwNDUtYWY3Yzg0NDI5YmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIoI6tlLtPQcfQbL8SuRh5SpxOwJKyU3a+9B HDGERvDmZVoLOtDj6UxGFcu8VxtsVddizbkwn25OHTwEQUW+ASjTs4XHrTiztJ9n ucVFji408gnTj1yrpPF7QtzJFjqa3g5m38R8K6NCfYjjXk2PbnI3+gwA+7+cMqQ8 y+WTohVYmauWiJ5rX+Pti3U5Bfd/lwvWw7FRyWv1eh81Rxqq4WtZOxMY+WMp1xvX roXnFmtWN9t01MgJ2bX5/mB47XnIccBre/q4U4qi+d6QttN+6/bOzDywtrqLGkmp Ifig2P74xRJnSCgAQ5DnIEvIP9KiTx0hlWN5hSSpjwVupan+1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbQlnQyFpWu7eti/n/AR82eAYXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDMwMWRlNmYtNDc4Yy0z YTVkLWJiMGYtYzdjYTE0MzhjNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKio0fkgYN/x0iuO8pRS9n0Nj/cw8j2XbOkwFe2gFIkUUB+SHYIr3PA0 koCHktqsHDT5IN26uKb42uJhTDhc51RLTmgOYzhj8IcJ0wXoMk0x5Nl4cMg3AXXD RJCEcCbw+lYKGM+Ta0kqmdhYU+ZFTL2fAHPiTSQ+ixXr3HLQJjQTmQDPPRm1Nb0u vt+JnCLDfn41E2M0nxtmKvV0IoPlarLu3AbJAIRTPzu4xCgbxWi7ZNgM/zGbAlzN 4BIycK0GJSD4t/98XCyspfBkM/dC6012kUaNdM1/SVGcDsAVvon7lJMnOK5EMIhf KaI1cflqDQyytJQ86o6k+AgVvIzNptI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:25:59 2025 by rpki-client