$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa8ba42-3a57-3513-be41-75a13047040b.roa File: 4aa8ba42-3a57-3513-be41-75a13047040b.roa (raw, json) Hash identifier: 7zzAW+Cbd86osdPavfSrmwUPtUC5mD5PtprGshLfJ0s= Subject key identifier: 06:12:2D:34:A8:52:FE:71:54:84:FB:F9:23:CB:2E:CB:ED:15:D8:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01CE299A943FEEA2FAE2C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa8ba42-3a57-3513-be41-75a13047040b.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.223.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ce:29:9a:94:3f:ee:a2:fa:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=3b25f5b1-b816-48ae-90f1-2633ccf2ad40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:0a:1d:ad:1a:cb:f4:2a:c8:16:32:f4:aa: 61:62:ed:5d:43:aa:2c:e5:cc:39:db:e8:6e:07:c4: d1:33:02:d0:63:7d:11:8f:05:a1:99:31:f1:3a:0b: d0:98:72:84:21:94:26:dc:54:b9:07:d6:db:c6:92: c7:6a:e6:32:5d:23:bc:d4:e3:5d:f0:1c:13:13:79: 29:a2:62:0b:d8:44:3e:26:c2:ba:31:e8:ce:5f:dd: 51:2c:f7:5d:67:99:2c:f2:fe:6e:fd:f6:53:9c:f6: 1b:f2:90:04:b1:6f:f2:e8:bb:df:36:a4:ef:f4:4b: 0e:fe:d1:3c:3c:2c:f4:e0:b9:86:91:e3:53:64:4d: f1:53:42:30:dd:b9:3e:01:cb:d5:f9:5b:4a:0a:82: 36:5f:f0:99:36:da:4b:86:1c:97:47:fa:0b:6e:bb: 44:d9:04:d7:18:68:28:9f:a9:d4:34:38:bc:b3:4a: 50:42:0f:7d:a9:e9:2c:0e:c9:ea:ca:e1:69:a8:dd: e6:98:bb:c7:83:5c:ba:6f:ef:b5:32:ab:4e:68:d3: 90:0e:92:27:ea:9f:b1:86:cf:be:11:31:88:c9:f5: 66:95:7c:8a:46:4f:58:a4:95:71:26:22:22:79:95: 05:73:5c:21:ed:74:a8:78:39:b9:e7:1a:3c:d2:a5: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:12:2D:34:A8:52:FE:71:54:84:FB:F9:23:CB:2E:CB:ED:15:D8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa8ba42-3a57-3513-be41-75a13047040b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4a:aa:25:0f:b7:16:d3:be:d4:2f:1c:f4:b3:af:47:d0:ef: d5:5e:cc:2b:a8:46:c8:7d:96:1c:b1:c8:e8:e7:02:bb:9b:f5: 2f:23:74:df:f2:50:96:73:9f:0d:de:d9:70:e5:20:0b:35:60: e7:a8:8b:a8:c0:30:51:12:43:85:db:e1:ec:fb:78:60:f9:f3: 88:56:47:a9:6e:a8:9e:d7:2f:2c:77:53:3f:25:10:c6:0f:19: c5:8e:5d:3d:08:85:41:93:40:49:2d:23:42:41:60:5c:f4:a6: da:06:fd:73:3c:ef:01:84:7f:0a:82:b9:d9:96:6d:e0:4e:98: e4:c6:9e:8f:82:7d:5d:1e:4b:06:95:0b:22:78:33:8c:65:79: 20:b6:3c:b5:6e:b5:d1:9e:c7:38:49:7e:86:30:8e:58:be:34: ba:c8:75:4d:bf:07:2d:88:e8:77:15:2e:f6:83:66:5d:02:d7: d8:1d:ec:37:97:f4:64:2a:19:57:f5:96:b2:c5:56:cf:00:62: f3:88:8d:5f:da:9a:65:ff:6a:a1:c8:af:18:44:d2:b2:22:3e: de:06:ad:a7:82:5a:f9:a7:fc:bf:39:ca:ba:d1:22:f6:2f:06: e6:c2:62:a7:69:82:ef:f5:99:4c:f0:ac:83:c4:fc:de:50:73: 6c:44:62:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAc4pmpQ/7qL64sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2IyNWY1YjEtYjgxNi00OGFlLTkwZjEtMjYzM2NjZjJhZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBkKHa0ay/QqyBYy9KphYu1dQ6os5cw52+hu B8TRMwLQY30RjwWhmTHxOgvQmHKEIZQm3FS5B9bbxpLHauYyXSO81ONd8BwTE3kp omIL2EQ+JsK6MejOX91RLPddZ5ks8v5u/fZTnPYb8pAEsW/y6LvfNqTv9EsO/tE8 PCz04LmGkeNTZE3xU0Iw3bk+AcvV+VtKCoI2X/CZNtpLhhyXR/oLbrtE2QTXGGgo n6nUNDi8s0pQQg99qeksDsnqyuFpqN3mmLvHg1y6b++1MqtOaNOQDpIn6p+xhs++ ETGIyfVmlXyKRk9YpJVxJiIieZUFc1wh7XSoeDm55xo80qUlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYSLTSoUv5xVIT7+SPLLsvtFdi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGFhOGJhNDItM2E1Ny0z NTEzLWJlNDEtNzVhMTMwNDcwNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN8NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtKqiUPtxbTvtQvHPSzr0fQ79VezCuoRsh9lhyxyOjnArub9S8jdN/y UJZznw3e2XDlIAs1YOeoi6jAMFESQ4Xb4ez7eGD584hWR6luqJ7XLyx3Uz8lEMYP GcWOXT0IhUGTQEktI0JBYFz0ptoG/XM87wGEfwqCudmWbeBOmOTGno+CfV0eSwaV CyJ4M4xleSC2PLVutdGexzhJfoYwjli+NLrIdU2/By2I6HcVLvaDZl0C19gd7DeX 9GQqGVf1lrLFVs8AYvOIjV/ammX/aqHIrxhE0rIiPt4GraeCWvmn/L85yrrRIvYv BubCYqdpgu/1mUzwrIPE/N5Qc2xEYrk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:51:21 2025 by rpki-client