$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b4295b4-f633-3e66-a83e-fdef307d4ecf.roa File: 4b4295b4-f633-3e66-a83e-fdef307d4ecf.roa (raw, json) Hash identifier: L0yrpXetlz/jyFFcwW6s7iWarUZPL2/4pwkAsb+GRkE= Subject key identifier: 48:DE:E1:60:3B:6C:D3:90:90:44:BD:B8:39:0E:5A:8F:47:DA:06:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F019C01629F416285CBC9A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b4295b4-f633-3e66-a83e-fdef307d4ecf.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.200.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:9c:01:62:9f:41:62:85:cb:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=099ec1e6-480c-4e67-8d84-db6355d0798f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6e:0f:e0:9e:79:e7:69:0b:10:f4:ad:73:1c: bc:f8:39:dd:29:c9:84:a5:f8:d1:50:4b:10:53:19: df:10:55:19:46:66:cb:9d:fb:60:58:2e:bc:ad:64: d6:b9:6a:74:94:95:2d:f6:d3:79:5c:3d:51:c0:51: d1:89:13:28:da:ec:03:3e:7c:05:23:63:39:3c:00: 8b:23:4e:0a:78:2b:69:de:58:a3:b3:a1:65:2f:44: 97:2a:86:72:0d:28:4a:0b:60:72:b0:04:1a:2e:a6: ac:e1:23:c2:e9:22:57:5f:a8:ed:bb:27:2b:fe:d4: 37:2b:09:2d:21:f0:32:df:81:01:ad:90:00:ee:34: cb:bb:a8:f6:7e:b2:95:d4:e2:c8:57:67:57:ad:33: 4a:af:03:9c:7f:23:9c:02:db:e9:ea:9f:33:8f:b8: 6a:df:7f:c7:cd:b2:0e:82:14:9b:94:15:8b:16:c3: 6b:7a:0b:4b:24:d4:38:2c:2f:71:f8:64:af:68:ae: 44:78:4a:73:1c:1e:51:5a:5d:ea:c9:65:69:7d:51: 83:fb:39:da:c7:d4:6a:1f:4f:c4:de:72:68:5c:8a: b4:4b:b6:ef:96:ca:fb:f5:79:a1:65:51:d0:5e:fb: 37:b7:30:11:b6:03:f0:a2:58:e5:01:c9:7b:51:0f: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:E1:60:3B:6C:D3:90:90:44:BD:B8:39:0E:5A:8F:47:DA:06:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b4295b4-f633-3e66-a83e-fdef307d4ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:91:00:57:45:e9:e2:13:c4:43:fd:e7:90:8f:8e:d3:a6:b7: 7c:42:78:0e:84:e2:5e:94:06:a7:9b:eb:07:e1:d5:83:4d:d5: ed:4a:ac:f0:c9:06:2d:2d:c1:4c:87:f8:a8:be:db:d9:99:5d: cd:87:be:ca:45:03:a3:96:63:2b:88:79:9c:86:2d:15:cc:64: 55:b1:67:ea:54:55:5d:a1:23:56:8a:2b:be:88:2b:4d:b3:74: e9:59:f5:ff:7d:51:a7:4d:5f:cc:cc:a5:9a:bd:1e:f6:01:5e: 91:67:63:e0:b9:23:46:a7:46:ad:83:a9:a6:ff:0a:42:d2:45: ed:32:4a:33:93:35:74:b4:97:f2:1c:1e:31:7e:8a:ce:b1:0a: 38:3f:35:0f:46:02:1b:d1:9b:aa:a8:55:38:ec:5c:d3:00:e1: ec:1d:6f:84:19:a5:94:36:12:ea:46:f8:29:77:78:c3:47:09: 67:78:b9:4e:e2:38:f5:94:c0:99:44:99:7f:6a:d9:b2:7b:ba: c4:34:f9:ba:25:f9:7d:82:75:cd:80:65:31:d8:d1:d2:69:fc: 68:14:c7:83:84:01:f3:45:4a:cb:ff:ff:04:50:1e:55:e2:ab: 9b:2e:2f:35:95:f9:9d:1b:05:ea:a4:75:a6:9c:b5:34:54:9a: 33:dd:d1:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZwBYp9BYoXLyaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDk5ZWMxZTYtNDgwYy00ZTY3LThkODQtZGI2MzU1ZDA3OThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi24P4J5552kLEPStcxy8+DndKcmEpfjRUEsQ UxnfEFUZRmbLnftgWC68rWTWuWp0lJUt9tN5XD1RwFHRiRMo2uwDPnwFI2M5PACL I04KeCtp3lijs6FlL0SXKoZyDShKC2BysAQaLqas4SPC6SJXX6jtuycr/tQ3Kwkt IfAy34EBrZAA7jTLu6j2frKV1OLIV2dXrTNKrwOcfyOcAtvp6p8zj7hq33/HzbIO ghSblBWLFsNregtLJNQ4LC9x+GSvaK5EeEpzHB5RWl3qyWVpfVGD+znax9RqH0/E 3nJoXIq0S7bvlsr79XmhZVHQXvs3tzARtgPwoljlAcl7UQ8mfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEje4WA7bNOQkES9uDkOWo9H2gZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGI0Mjk1YjQtZjYzMy0z ZTY2LWE4M2UtZmRlZjMwN2Q0ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMhlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyRAFdF6eITxEP955CPjtOmt3xCeA6E4l6UBqeb6wfh1YNN1e1KrPDJ Bi0twUyH+Ki+29mZXc2HvspFA6OWYyuIeZyGLRXMZFWxZ+pUVV2hI1aKK76IK02z dOlZ9f99UadNX8zMpZq9HvYBXpFnY+C5I0anRq2Dqab/CkLSRe0ySjOTNXS0l/Ic HjF+is6xCjg/NQ9GAhvRm6qoVTjsXNMA4ewdb4QZpZQ2EupG+Cl3eMNHCWd4uU7i OPWUwJlEmX9q2bJ7usQ0+bol+X2Cdc2AZTHY0dJp/GgUx4OEAfNFSsv//wRQHlXi q5suLzWV+Z0bBeqkdaactTRUmjPd0a8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:04 2025 by rpki-client