$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6555da47-af67-3f70-be54-ba7a9082bd9d.roa File: 6555da47-af67-3f70-be54-ba7a9082bd9d.roa (raw, json) Hash identifier: cdSj4EfYZt3FRM20JszNvekJxbvuZdq3+w1Qy7KabpA= Subject key identifier: 3D:00:AA:55:BD:B4:52:19:92:85:0D:98:AD:91:ED:F6:BE:F5:3E:1E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B335BEAF3CB2DCADAC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6555da47-af67-3f70-be54-ba7a9082bd9d.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b3:35:be:af:3c:b2:dc:ad:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=05ef119f-d20d-4cc4-85c4-ed63b1c57a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:6e:92:e3:79:7f:0e:23:59:9c:77:ed:4a: 89:70:63:f6:9d:f1:6b:3c:74:0c:8b:3f:0e:2f:0a: 9f:d3:f0:b0:a4:f1:d8:22:0b:8e:1d:ab:93:a5:09: 10:a6:22:67:45:33:e1:21:23:d7:c4:8f:0c:e5:a6: 52:75:e1:22:ac:5d:b7:7f:d8:17:00:2d:f6:e6:e5: 3a:c3:c4:f3:1e:03:89:cc:db:e7:d4:de:a8:d8:73: d3:9e:2c:01:3f:e2:4c:e9:a0:b0:e1:ab:2d:eb:1a: 3c:93:3c:1e:22:7b:7a:0c:53:95:31:ce:a3:54:96: d5:83:9f:27:45:f4:3a:50:34:92:7c:fc:c4:34:7d: 17:cf:34:64:d6:1f:89:f2:5e:80:45:d0:d1:c0:22: 8a:fa:e4:20:a6:71:9b:d2:3b:31:89:dd:7e:68:f8: 68:a5:9c:d6:5f:35:4e:b8:c2:5b:3e:f9:00:a3:19: 4f:41:62:54:76:86:aa:56:d1:aa:45:c6:8e:2e:c9: a7:d9:f6:d1:62:7e:a5:32:fd:60:05:e2:21:32:ca: 4b:10:0a:8c:e4:e9:b2:1f:40:09:3f:d0:65:63:3b: 17:13:10:5f:81:88:b9:0d:16:a9:00:10:b5:92:8a: 48:d7:c5:8d:17:60:ec:75:cc:61:59:74:d4:bc:4e: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:00:AA:55:BD:B4:52:19:92:85:0D:98:AD:91:ED:F6:BE:F5:3E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6555da47-af67-3f70-be54-ba7a9082bd9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:6e:88:46:43:67:07:35:0b:5a:17:15:0c:d4:b4:f6:28:19: 2b:9e:f8:36:18:fd:59:c6:19:24:26:66:9d:0c:91:24:3b:33: 92:d0:4e:91:15:79:21:dd:ce:af:e1:81:45:e2:b9:ea:21:79: f4:25:24:87:39:ab:76:6e:cd:66:5e:07:4c:f4:e2:3b:e6:f1: c9:28:41:44:95:9c:81:ee:1c:73:46:de:72:10:7c:93:d2:2d: 17:27:0f:5a:b2:46:a2:3f:63:61:d6:30:1e:8d:2d:2b:fe:a3: 92:ed:fa:37:f9:15:3f:38:c2:66:6d:58:91:de:3e:3a:2b:92: e5:62:76:26:9b:19:2c:e4:6d:4b:22:55:f7:57:d1:78:ce:05: 99:4f:59:20:d0:5f:4e:e2:e9:e6:2c:fe:b0:74:d0:fa:94:8f: e5:3a:05:56:54:51:81:4d:bb:c9:d5:67:81:6e:92:c0:bc:44: a1:2b:00:5a:dd:2a:8a:b3:24:4b:a1:78:4e:e8:11:bc:b5:85: a6:3b:dc:57:e7:6d:10:21:90:90:69:32:97:79:71:54:52:e8: 1f:a4:d8:30:99:f8:1e:85:5c:2a:9d:fa:4e:22:8e:3e:68:e2: d1:9d:b2:45:31:07:f7:16:e7:82:f6:5d:a4:ed:a3:44:7d:4f: 8d:50:8d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbM1vq88stytrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDVlZjExOWYtZDIwZC00Y2M0LTg1YzQtZWQ2M2IxYzU3YTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYRukuN5fw4jWZx37UqJcGP2nfFrPHQMiz8O Lwqf0/CwpPHYIguOHauTpQkQpiJnRTPhISPXxI8M5aZSdeEirF23f9gXAC325uU6 w8TzHgOJzNvn1N6o2HPTniwBP+JM6aCw4ast6xo8kzweInt6DFOVMc6jVJbVg58n RfQ6UDSSfPzENH0XzzRk1h+J8l6ARdDRwCKK+uQgpnGb0jsxid1+aPhopZzWXzVO uMJbPvkAoxlPQWJUdoaqVtGqRcaOLsmn2fbRYn6lMv1gBeIhMspLEAqM5OmyH0AJ P9BlYzsXExBfgYi5DRapABC1kopI18WNF2DsdcxhWXTUvE4FTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0AqlW9tFIZkoUNmK2R7fa+9T4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjU1NWRhNDctYWY2Ny0z ZjcwLWJlNTQtYmE3YTkwODJiZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASND9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChuiEZDZwc1C1oXFQzUtPYoGSue+DYY/VnGGSQmZp0MkSQ7M5LQTpEV eSHdzq/hgUXiueohefQlJIc5q3ZuzWZeB0z04jvm8ckoQUSVnIHuHHNG3nIQfJPS LRcnD1qyRqI/Y2HWMB6NLSv+o5Lt+jf5FT84wmZtWJHePjorkuVidiabGSzkbUsi VfdX0XjOBZlPWSDQX07i6eYs/rB00PqUj+U6BVZUUYFNu8nVZ4FuksC8RKErAFrd KoqzJEuheE7oEby1haY73FfnbRAhkJBpMpd5cVRS6B+k2DCZ+B6FXCqd+k4ijj5o 4tGdskUxB/cW54L2XaTto0R9T41Qja0= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:32 2025 by rpki-client