$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5281befb-0d11-3177-95d0-2913d715c232.roa File: 5281befb-0d11-3177-95d0-2913d715c232.roa (raw, json) Hash identifier: 1HjRArGVnIVEOQlYIUkBwGYkPQ9eAEQVJo4lG9wro/s= Subject key identifier: 98:56:8F:20:8B:E9:EA:86:09:2E:6D:6C:2E:31:79:E1:34:77:4E:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A0CDCC9D36AB067DFB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5281befb-0d11-3177-95d0-2913d715c232.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a0:cd:cc:9d:36:ab:06:7d:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=049f814a-2e3a-4935-a55d-acca759b9b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:8f:5a:88:a5:f8:53:fa:81:be:19:c2:b7: 0d:89:5e:3e:4d:93:1f:31:c9:3c:14:c8:24:12:22: 8d:28:8a:98:ed:95:4d:45:3b:8c:82:67:09:97:37: b1:cc:31:f1:f2:34:f9:67:8c:84:56:0f:15:b1:74: 5f:d4:2e:31:84:1d:bc:97:27:36:03:6c:94:4c:eb: 2f:fa:00:7f:3b:53:24:97:62:b0:24:5f:c7:2c:4b: fc:cc:59:b7:bf:72:ba:cd:d7:61:75:8c:7e:21:f8: 8f:9f:b9:83:d9:06:9e:73:a9:50:59:96:da:d0:ad: d0:f5:02:42:d3:69:f7:53:8f:26:bd:17:f3:27:37: fe:0a:63:41:d1:fe:f1:00:d3:77:87:9c:81:18:97: 52:f5:a6:47:b4:24:fc:52:06:ef:16:be:50:ca:97: 11:00:31:9d:f2:49:d1:91:d4:26:df:fb:b3:ef:c6: d6:c8:3e:ba:c6:35:0e:6d:43:ed:8c:61:7b:a6:70: f0:31:66:24:e2:d1:1c:91:3b:58:43:b5:97:44:13: e4:f2:5f:2e:1d:45:51:f3:2e:64:62:65:19:c3:84: f2:ae:8b:e7:1d:42:8a:06:4a:d7:be:70:c8:5d:e8: 41:d5:a5:ba:32:50:40:30:84:85:a6:7b:20:22:2f: 74:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:56:8F:20:8B:E9:EA:86:09:2E:6D:6C:2E:31:79:E1:34:77:4E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5281befb-0d11-3177-95d0-2913d715c232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ec:89:35:d8:dc:f8:bf:4d:8e:23:97:82:4d:04:6d:8c:09: ec:bb:9e:7d:d4:48:cc:91:84:94:b4:c0:33:1d:94:8e:27:0e: 0f:80:ce:b0:c4:f1:2a:9a:65:bd:67:fa:76:d8:c6:02:23:8f: 32:d4:1b:4f:27:60:7d:61:7d:f8:8b:6b:1b:40:91:b6:3e:21: 4f:a8:0b:da:12:bb:eb:f6:b2:0b:38:8a:9a:bc:3a:73:fd:e1: 92:ac:e9:cc:ed:5c:73:78:a4:f3:97:f7:78:7d:a9:ca:78:31: 55:07:8f:50:72:1a:93:ab:2e:ac:b9:a7:f9:bd:15:df:8d:fa: bd:43:a7:81:16:e3:e0:89:9a:18:8a:b9:5e:ee:f2:1c:7e:96: fc:62:c4:1f:0e:ef:d7:ce:99:3c:08:60:41:b0:83:0d:e1:17: b1:48:a8:21:1b:40:a5:9b:ed:72:47:28:6c:52:55:8f:5d:0a: c4:0a:3d:26:d3:75:ab:aa:b7:3a:ea:e4:6b:10:7f:de:47:0a: b6:10:94:a7:d3:5b:73:78:fc:24:53:2e:ec:4b:aa:3f:91:a3: 50:03:11:8b:1a:20:72:1f:03:88:69:ee:b0:9d:36:2a:66:fb: 9d:39:9a:aa:0a:65:b3:62:16:24:0b:32:d1:80:08:f0:c8:6a: e0:c4:1e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaDNzJ02qwZ9+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDQ5ZjgxNGEtMmUzYS00OTM1LWE1NWQtYWNjYTc1OWI5YjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR2PWoil+FP6gb4ZwrcNiV4+TZMfMck8FMgk EiKNKIqY7ZVNRTuMgmcJlzexzDHx8jT5Z4yEVg8VsXRf1C4xhB28lyc2A2yUTOsv +gB/O1Mkl2KwJF/HLEv8zFm3v3K6zddhdYx+IfiPn7mD2Qaec6lQWZba0K3Q9QJC 02n3U48mvRfzJzf+CmNB0f7xANN3h5yBGJdS9aZHtCT8UgbvFr5QypcRADGd8knR kdQm3/uz78bWyD66xjUObUPtjGF7pnDwMWYk4tEckTtYQ7WXRBPk8l8uHUVR8y5k YmUZw4TyrovnHUKKBkrXvnDIXehB1aW6MlBAMISFpnsgIi905wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhWjyCL6eqGCS5tbC4xeeE0d05jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI4MWJlZmItMGQxMS0z MTc3LTk1ZDAtMjkxM2Q3MTVjMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMl+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7siTXY3Pi/TY4jl4JNBG2MCey7nn3USMyRhJS0wDMdlI4nDg+AzrDE 8SqaZb1n+nbYxgIjjzLUG08nYH1hffiLaxtAkbY+IU+oC9oSu+v2sgs4ipq8OnP9 4ZKs6cztXHN4pPOX93h9qcp4MVUHj1ByGpOrLqy5p/m9Fd+N+r1Dp4EW4+CJmhiK uV7u8hx+lvxixB8O79fOmTwIYEGwgw3hF7FIqCEbQKWb7XJHKGxSVY9dCsQKPSbT dauqtzrq5GsQf95HCrYQlKfTW3N4/CRTLuxLqj+Ro1ADEYsaIHIfA4hp7rCdNipm +505mqoKZbNiFiQLMtGACPDIauDEHnM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:46 2025 by rpki-client