$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65a26d6e-8918-3c5b-b188-6eadf5e35110.roa File: 65a26d6e-8918-3c5b-b188-6eadf5e35110.roa (raw, json) Hash identifier: QYTb+GfkUygm8DVBenrjEYwBcZ+3mbs3Xvd1oGlcHvQ= Subject key identifier: 5B:7B:4E:51:DA:E3:4B:4A:DC:8A:E7:55:31:8A:03:D7:D2:F2:29:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01CE94EF8EC5F5FBDBEE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65a26d6e-8918-3c5b-b188-6eadf5e35110.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.223.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ce:94:ef:8e:c5:f5:fb:db:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=038aa6e3-059c-491a-800c-9500fee1dce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:51:f3:62:90:43:97:3f:ed:29:ce:4a:a2: 9c:87:76:9e:3f:38:19:52:dd:6a:46:60:c0:8f:a3: dc:56:3a:d4:fb:f4:eb:95:38:83:15:8d:47:48:f4: b2:83:e2:e2:b4:98:59:df:93:87:de:4e:1a:ca:bf: 4d:2a:58:4b:f9:cf:73:26:f3:b5:f8:b3:0b:5a:8f: 7e:aa:5b:13:32:d9:81:a5:79:63:22:f2:1f:c9:ed: 5b:9e:30:e8:c1:4d:b4:09:6f:2e:be:16:cd:77:8d: d9:c0:57:bc:e4:44:c4:74:1a:06:4d:fb:31:d5:11: 8d:67:c6:28:74:6e:e0:47:2c:16:53:ce:eb:0a:9f: 64:0e:54:07:5f:f0:47:50:8c:75:af:b3:40:f9:c5: 0e:58:a6:1c:d3:1d:66:75:55:10:28:4f:f3:25:a6: 43:ee:80:d4:c9:4e:93:1c:1b:89:1e:d6:a7:6c:5c: f2:5b:61:f1:f7:72:72:29:34:3e:38:35:d0:43:1b: cb:98:4b:0c:3f:f3:30:61:ea:db:29:e7:59:c1:4b: 14:91:20:a2:4d:82:69:1c:c5:cd:d0:31:38:4d:78: 6a:77:7b:5a:b8:c3:b2:2b:3d:88:7c:96:b1:f3:50: 0a:12:c0:fd:c1:60:84:2a:58:2c:10:ed:c7:88:7f: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7B:4E:51:DA:E3:4B:4A:DC:8A:E7:55:31:8A:03:D7:D2:F2:29:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65a26d6e-8918-3c5b-b188-6eadf5e35110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:23:7b:02:7c:c3:6e:95:88:8d:01:33:4f:39:a7:a4:98:64: 02:59:79:e5:20:7a:db:ad:cd:26:e9:c7:60:80:b7:3e:94:54: 5c:76:12:67:b3:c8:b4:3f:90:36:1d:56:41:54:5c:15:4d:2e: 68:d0:96:9a:3f:49:5a:6a:6d:37:d3:6b:54:4e:56:bc:36:88: a2:0f:9f:b7:5c:a0:59:60:1d:89:c1:ab:f9:31:ee:8b:d3:93: cd:9f:eb:04:f2:45:a0:e1:91:42:74:92:d1:b9:84:4d:73:ba: e5:80:45:d3:bc:84:ac:52:09:2a:1b:9d:6c:56:fb:23:4a:1b: 1e:26:fe:7d:97:47:83:57:61:8b:ce:04:69:33:e8:e9:22:b3: 15:76:4c:0d:ee:76:fa:05:30:c2:46:2f:20:c9:9a:09:e0:e9: ed:c7:84:42:9e:7b:e7:e3:ef:e0:1c:e1:f1:4b:8d:12:23:1b: af:f8:0f:24:10:52:f1:08:2d:b8:1d:3b:d3:1f:26:f3:34:4e: 76:f1:ea:6b:70:b2:d8:1e:09:00:a3:d3:bb:bf:66:fe:fd:5a: 21:f9:28:bc:69:da:c7:29:03:7a:56:4a:91:0a:e5:a1:ad:64: 77:97:fb:9b:56:17:38:96:df:34:bf:a7:8c:67:25:a4:e3:eb: 86:eb:5e:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAc6U747F9fvb7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDM4YWE2ZTMtMDU5Yy00OTFhLTgwMGMtOTUwMGZlZTFkY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMFR82KQQ5c/7SnOSqKch3aePzgZUt1qRmDA j6PcVjrU+/TrlTiDFY1HSPSyg+LitJhZ35OH3k4ayr9NKlhL+c9zJvO1+LMLWo9+ qlsTMtmBpXljIvIfye1bnjDowU20CW8uvhbNd43ZwFe85ETEdBoGTfsx1RGNZ8Yo dG7gRywWU87rCp9kDlQHX/BHUIx1r7NA+cUOWKYc0x1mdVUQKE/zJaZD7oDUyU6T HBuJHtanbFzyW2Hx93JyKTQ+ODXQQxvLmEsMP/MwYerbKedZwUsUkSCiTYJpHMXN 0DE4TXhqd3tauMOyKz2IfJax81AKEsD9wWCEKlgsEO3HiH+V+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt7TlHa40tK3IrnVTGKA9fS8iliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjVhMjZkNmUtODkxOC0z YzViLWIxODgtNmVhZGY1ZTM1MTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgjewJ8w26ViI0BM085p6SYZAJZeeUgetutzSbpx2CAtz6UVFx2Emez yLQ/kDYdVkFUXBVNLmjQlpo/SVpqbTfTa1ROVrw2iKIPn7dcoFlgHYnBq/kx7ovT k82f6wTyRaDhkUJ0ktG5hE1zuuWARdO8hKxSCSobnWxW+yNKGx4m/n2XR4NXYYvO BGkz6OkisxV2TA3udvoFMMJGLyDJmgng6e3HhEKee+fj7+Ac4fFLjRIjG6/4DyQQ UvEILbgdO9MfJvM0Tnbx6mtwstgeCQCj07u/Zv79WiH5KLxp2scpA3pWSpEK5aGt ZHeX+5tWFziW3zS/p4xnJaTj64brXvs= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:22 2025 by rpki-client