$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/648b36ca-3053-3ac5-9697-c6c37bb549db.roa File: 648b36ca-3053-3ac5-9697-c6c37bb549db.roa (raw, json) Hash identifier: nrgViyNUavgmkJ8CgML0jWsstYtRllGJ2ThJ7FncYrw= Subject key identifier: F2:ED:EB:2A:87:E9:17:27:68:40:47:BD:98:0F:40:A4:F2:75:D7:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01AFA70115A68D802D9C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/648b36ca-3053-3ac5-9697-c6c37bb549db.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:af:a7:01:15:a6:8d:80:2d:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=da4ff476-716d-4f55-b91f-3b7a4b55f6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:5a:25:cd:09:73:25:bd:ff:94:e0:8e:fd: 77:7c:4d:72:7b:d0:83:d3:42:34:b1:64:9f:16:7d: 43:74:23:a9:04:2e:51:9d:ac:00:00:4e:d7:06:00: e0:f5:c8:13:10:92:c5:da:14:df:65:7e:eb:cb:f9: 94:ef:7d:f6:c8:a9:d8:74:28:38:e2:ea:81:aa:f4: d6:4e:d5:77:b1:08:86:cc:da:fd:54:02:f0:f6:32: fd:93:9f:06:46:0a:98:77:c3:67:a2:f2:2a:73:97: ac:4c:ba:e6:9c:05:bf:a7:61:dd:1f:04:ae:6c:f5: 4c:0e:2e:69:9a:1d:69:e2:95:02:c6:37:a1:be:6b: c0:64:68:6a:b0:8e:e8:d3:c8:23:3e:70:92:7a:29: b1:54:a6:d0:3f:4a:0e:df:db:46:c0:cc:f2:a0:7f: 21:07:fa:0d:9c:cd:78:4e:bb:4a:a2:f7:3d:8e:dc: 55:94:3e:5f:f2:b8:17:25:2e:6e:db:ba:a7:cb:54: f6:aa:c3:02:b7:b8:08:d6:0d:3a:53:2e:3e:bf:a2: 31:5b:47:5d:c4:57:c2:83:ba:97:c3:32:3f:bd:ec: 0c:d2:bb:47:48:7b:bc:c6:55:85:bb:6a:4f:2d:2b: 47:58:36:7c:10:f3:94:c1:d9:f2:1a:25:cb:8d:ed: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:ED:EB:2A:87:E9:17:27:68:40:47:BD:98:0F:40:A4:F2:75:D7:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/648b36ca-3053-3ac5-9697-c6c37bb549db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c5:63:95:3e:f1:dd:1a:05:70:db:b4:f0:d3:8a:76:19:e4: 2e:66:bc:af:ef:64:7a:48:af:79:2b:3f:09:c1:16:55:eb:6e: 2b:6e:54:42:11:e8:ab:0d:49:79:6a:83:e1:10:23:f7:c9:b1: 47:47:fe:25:20:77:c7:84:af:cc:3a:e0:7e:81:d2:d0:af:26: c8:a8:74:bd:40:87:88:ca:83:7b:8a:20:f2:e2:ff:fa:36:78: e1:28:20:3a:3d:df:c4:0d:7b:63:18:b0:77:75:99:b7:71:15: 79:38:7a:7e:6f:53:ae:a4:62:ad:f0:e5:76:ff:9b:39:b7:c4: e5:d1:a2:49:27:f6:1a:3d:44:94:13:01:bd:3c:c3:98:6c:e0: ee:fe:d4:f0:f2:ad:82:0a:61:6b:85:c6:7b:6f:3e:fc:8a:2f: 6c:b7:cb:24:ab:b4:07:28:b9:7c:9b:00:c2:fc:8c:b9:3d:73: 23:a5:12:35:cd:66:05:80:17:74:62:72:ad:a2:f1:7f:f9:83: 0b:2f:65:83:18:d3:88:c1:84:60:66:70:1a:17:b9:7c:1b:3a: 33:2a:3f:3f:59:f4:67:63:9d:a0:95:b1:a9:5d:59:f5:97:6b: de:32:d4:a9:71:71:45:49:01:65:d9:b0:cd:0f:55:36:24:c0: c2:20:ed:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAa+nARWmjYAtnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGE0ZmY0NzYtNzE2ZC00ZjU1LWI5MWYtM2I3YTRiNTVmNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKdaJc0JcyW9/5Tgjv13fE1ye9CD00I0sWSf Fn1DdCOpBC5RnawAAE7XBgDg9cgTEJLF2hTfZX7ry/mU7332yKnYdCg44uqBqvTW TtV3sQiGzNr9VALw9jL9k58GRgqYd8NnovIqc5esTLrmnAW/p2HdHwSubPVMDi5p mh1p4pUCxjehvmvAZGhqsI7o08gjPnCSeimxVKbQP0oO39tGwMzyoH8hB/oNnM14 TrtKovc9jtxVlD5f8rgXJS5u27qny1T2qsMCt7gI1g06Uy4+v6IxW0ddxFfCg7qX wzI/vewM0rtHSHu8xlWFu2pPLStHWDZ8EPOUwdnyGiXLje21FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLt6yqH6RcnaEBHvZgPQKTyddfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjQ4YjM2Y2EtMzA1My0z YWM1LTk2OTctYzZjMzdiYjU0OWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfFY5U+8d0aBXDbtPDTinYZ5C5mvK/vZHpIr3krPwnBFlXrbituVEIR 6KsNSXlqg+EQI/fJsUdH/iUgd8eEr8w64H6B0tCvJsiodL1Ah4jKg3uKIPLi//o2 eOEoIDo938QNe2MYsHd1mbdxFXk4en5vU66kYq3w5Xb/mzm3xOXRokkn9ho9RJQT Ab08w5hs4O7+1PDyrYIKYWuFxntvPvyKL2y3yySrtAcouXybAML8jLk9cyOlEjXN ZgWAF3Ricq2i8X/5gwsvZYMY04jBhGBmcBoXuXwbOjMqPz9Z9GdjnaCVsaldWfWX a94y1KlxcUVJAWXZsM0PVTYkwMIg7Sw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:11 2025 by rpki-client