$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70d70a16-70f3-3db6-a6df-9060be2f2489.roa File: 70d70a16-70f3-3db6-a6df-9060be2f2489.roa (raw, json) Hash identifier: 5mVJok9PEdgvVUChWAQxTkFHvdOSBFDuKpPhTZetthc= Subject key identifier: C2:1C:84:5D:3C:02:EE:4C:1B:3D:AE:C8:BA:70:08:9F:A7:CC:4F:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01AC828AF5B1A9A2264900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70d70a16-70f3-3db6-a6df-9060be2f2489.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ac:82:8a:f5:b1:a9:a2:26:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f26685eb-e1ed-4be3-b371-de8d0c9ff78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:79:83:58:20:7e:b6:09:99:34:6e:ba:f8:fc: 84:94:54:1f:9a:2e:7c:76:63:2e:3c:67:bf:db:04: cc:15:f6:ee:60:eb:0d:1f:bf:c2:92:3e:c4:f4:2c: 9f:91:64:88:65:cb:67:fe:a0:a3:f5:ca:d3:45:02: dd:30:3c:7b:6c:1f:78:1f:ca:c6:05:5e:87:20:5f: 0f:4d:3a:78:60:8a:e3:d5:de:92:9b:a9:b2:18:10: c3:38:89:ed:b1:cd:77:55:bf:62:d7:c0:ab:fe:d4: aa:86:f5:09:4e:e4:99:dd:1b:80:1f:d9:ad:fc:89: 95:f7:22:8a:e3:43:38:47:a8:02:a2:60:51:da:72: 4d:c4:45:a2:60:f5:5d:69:94:c6:8f:38:7d:77:fb: cb:04:e7:c9:24:4a:eb:5a:90:b0:72:86:9f:05:a8: bc:ef:eb:54:20:da:28:df:46:ad:b6:e6:55:e5:62: cc:43:37:2f:0c:a7:5d:4a:17:11:16:51:40:12:ab: 68:74:bc:bc:a8:7a:18:d9:d5:ba:0a:b6:46:7a:56: 22:9b:a3:36:90:82:78:f6:57:85:0a:2c:6e:10:42: c6:5a:39:87:32:0f:28:59:06:cb:11:69:72:90:51: 08:5f:ab:9f:f6:da:c2:b8:f6:2b:66:59:e5:dd:c2: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1C:84:5D:3C:02:EE:4C:1B:3D:AE:C8:BA:70:08:9F:A7:CC:4F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70d70a16-70f3-3db6-a6df-9060be2f2489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fa:f1:9f:ae:44:48:a0:3b:34:eb:39:d7:35:b0:3e:27:94: 2f:94:77:dc:07:74:a2:c6:17:a0:f4:e9:26:27:53:0b:2b:1a: 2d:20:ca:3a:bd:d3:bc:77:d7:df:f8:1c:b2:50:a1:52:c1:a1: 67:ca:5f:88:85:5b:d1:55:e3:3c:15:a6:61:9f:27:5f:ce:a0: 54:4f:2a:59:85:12:21:d0:ff:0c:a1:52:e3:42:61:b6:5e:a2: e7:05:78:a9:64:c2:52:09:b1:ab:0e:c1:fc:d8:63:8a:79:6b: a1:01:07:8e:c0:9c:bf:0a:42:7e:8f:3b:50:22:05:6a:8c:8d: 51:33:61:17:65:dc:0b:f5:b0:7d:b3:64:9a:77:d1:7e:36:21: ba:99:b3:6e:57:e3:69:7d:17:c3:cc:d8:65:ab:ef:10:57:4d: bb:b0:0c:75:c4:ed:02:26:7c:0d:b0:53:b2:ee:27:cb:c8:6f: d0:1e:b0:1e:57:0b:74:7a:a9:26:74:e9:da:cd:5e:8b:fc:15: 3b:87:54:6a:c4:02:34:e9:f4:9d:51:93:a7:ac:fb:9c:e9:62: 2b:45:c1:74:3b:86:2c:8f:e2:9f:51:f8:f6:7b:fe:bf:da:c0: db:5f:21:45:3d:6b:77:4e:9a:15:ae:e5:83:e7:24:64:17:ca: 5b:6b:30:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAayCivWxqaImSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjI2Njg1ZWItZTFlZC00YmUzLWIzNzEtZGU4ZDBjOWZmNzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHmDWCB+tgmZNG66+PyElFQfmi58dmMuPGe/ 2wTMFfbuYOsNH7/Ckj7E9CyfkWSIZctn/qCj9crTRQLdMDx7bB94H8rGBV6HIF8P TTp4YIrj1d6Sm6myGBDDOIntsc13Vb9i18Cr/tSqhvUJTuSZ3RuAH9mt/ImV9yKK 40M4R6gComBR2nJNxEWiYPVdaZTGjzh9d/vLBOfJJErrWpCwcoafBai87+tUINoo 30attuZV5WLMQzcvDKddShcRFlFAEqtodLy8qHoY2dW6CrZGelYim6M2kIJ49leF CixuEELGWjmHMg8oWQbLEWlykFEIX6uf9trCuPYrZlnl3cIUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIchF08Au5MGz2uyLpwCJ+nzE9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzBkNzBhMTYtNzBmMy0z ZGI2LWE2ZGYtOTA2MGJlMmYyNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNBSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv68Z+uREigOzTrOdc1sD4nlC+Ud9wHdKLGF6D06SYnUwsrGi0gyjq9 07x319/4HLJQoVLBoWfKX4iFW9FV4zwVpmGfJ1/OoFRPKlmFEiHQ/wyhUuNCYbZe oucFeKlkwlIJsasOwfzYY4p5a6EBB47AnL8KQn6PO1AiBWqMjVEzYRdl3Av1sH2z ZJp30X42IbqZs25X42l9F8PM2GWr7xBXTbuwDHXE7QImfA2wU7LuJ8vIb9AesB5X C3R6qSZ06drNXov8FTuHVGrEAjTp9J1Rk6es+5zpYitFwXQ7hiyP4p9R+PZ7/r/a wNtfIUU9a3dOmhWu5YPnJGQXyltrMNI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:02 2025 by rpki-client