$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a4ded71-9c34-3aa0-97f2-5e8b67efa395.roa File: 7a4ded71-9c34-3aa0-97f2-5e8b67efa395.roa (raw, json) Hash identifier: vjWv70byxPS0U5I0GNyCf/6Hhm2LTiubYfcIuhTjM7o= Subject key identifier: 91:51:E4:B8:29:89:EE:BD:88:E1:6A:1E:2D:90:07:00:2D:6F:8D:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A6A3443774B6C0206030 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a4ded71-9c34-3aa0-97f2-5e8b67efa395.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.206.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a6:a3:44:37:74:b6:c0:20:60:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=5840690e-224f-4656-835b-b913e1c0d721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:c1:cb:b1:0d:20:78:99:3e:48:b4:9c:fc: fd:a8:9d:6b:cf:88:6d:0f:3a:5b:f6:70:8f:95:87: 76:d5:52:48:ab:4d:f7:ab:45:2e:8f:d5:0e:89:66: 68:7b:8c:d3:3d:85:35:d3:fc:da:09:b7:1d:44:59: 47:59:bc:a8:15:86:b6:dc:6a:6f:64:8f:d8:ae:20: f5:ad:4c:a7:7a:57:ec:a1:27:b1:9c:31:43:e1:2f: d4:3e:15:22:7e:f5:ed:6a:1d:a4:b1:3f:a7:6a:db: 89:73:8b:ca:f9:c1:20:e2:56:8e:77:80:8d:40:13: 1b:8c:0a:1e:32:95:b8:db:32:12:0f:2c:8a:ce:67: ea:3b:0c:92:25:2b:90:c9:f5:1f:2f:18:8c:78:3d: 69:7a:96:64:78:4f:87:ba:73:18:a1:60:58:c4:d7: 8a:3c:b9:e6:64:21:c5:cb:7e:51:41:f4:89:77:cd: 34:41:13:d7:30:31:ec:8e:ae:3a:7f:ba:91:e4:bd: 5e:1d:15:39:f2:e7:92:d8:87:32:8e:6d:fc:de:26: 76:ad:b9:0e:ac:9b:2d:8f:82:66:a7:ce:50:dd:62: cc:ab:da:bd:20:e9:f3:83:bb:b1:d6:8e:1c:c9:2a: d3:8f:d3:2a:4c:ba:53:55:a5:12:1f:0b:ba:97:74: a4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:51:E4:B8:29:89:EE:BD:88:E1:6A:1E:2D:90:07:00:2D:6F:8D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a4ded71-9c34-3aa0-97f2-5e8b67efa395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:20:65:c6:af:2b:a8:39:b9:29:bc:f0:3b:a7:3c:cb:a5:93: 09:e0:b9:2a:52:89:e9:9b:51:de:cb:ea:45:a1:7a:b4:15:6a: 14:3a:a5:5f:f3:95:6b:90:4c:85:ac:1b:57:33:bb:ec:04:ae: 08:12:98:41:17:fe:cd:ef:f8:c6:55:13:90:2e:fe:04:7e:84: 96:17:8b:91:ba:03:a2:24:be:f1:2d:78:cb:03:fa:ef:20:7b: 28:29:f8:45:f2:06:92:34:76:98:5e:18:b4:89:2a:73:4d:f9: e5:e7:7b:5e:f5:4a:70:f7:13:e4:84:c4:7a:a0:de:a7:af:42: 3a:36:a7:33:cd:a9:e1:84:3d:97:ce:63:96:de:cc:f6:bd:79: e9:2e:0f:19:89:3b:20:6c:76:d3:77:63:f9:4c:e8:96:29:05: fd:01:18:f0:8c:45:06:18:5e:9b:7b:e7:23:8a:5a:71:eb:06: 1b:35:89:60:9f:67:92:94:1f:a1:42:7b:69:16:d7:2f:b7:19: d9:b6:ea:0b:5d:df:de:68:39:28:51:01:6c:1c:3f:30:67:4c: 3d:14:57:09:76:81:41:9a:aa:9a:92:02:f2:97:87:ba:e8:6b: ba:48:51:ef:f2:e4:72:f4:82:3a:4d:65:54:09:a5:1a:35:56: d0:e7:3c:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaajRDd0tsAgYDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NTg0MDY5MGUtMjI0Zi00NjU2LTgzNWItYjkxM2UxYzBkNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYvBy7ENIHiZPki0nPz9qJ1rz4htDzpb9nCP lYd21VJIq033q0Uuj9UOiWZoe4zTPYU10/zaCbcdRFlHWbyoFYa23GpvZI/YriD1 rUynelfsoSexnDFD4S/UPhUifvXtah2ksT+natuJc4vK+cEg4laOd4CNQBMbjAoe MpW42zISDyyKzmfqOwySJSuQyfUfLxiMeD1pepZkeE+HunMYoWBYxNeKPLnmZCHF y35RQfSJd800QRPXMDHsjq46f7qR5L1eHRU58ueS2Icyjm383iZ2rbkOrJstj4Jm p85Q3WLMq9q9IOnzg7ux1o4cySrTj9MqTLpTVaUSHwu6l3SkEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFR5Lgpie69iOFqHi2QBwAtb40JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2E0ZGVkNzEtOWMzNC0z YWEwLTk3ZjItNWU4YjY3ZWZhMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMgZcavK6g5uSm88DunPMulkwnguSpSiembUd7L6kWherQVahQ6pV/z lWuQTIWsG1czu+wErggSmEEX/s3v+MZVE5Au/gR+hJYXi5G6A6IkvvEteMsD+u8g eygp+EXyBpI0dpheGLSJKnNN+eXne171SnD3E+SExHqg3qevQjo2pzPNqeGEPZfO Y5bezPa9eekuDxmJOyBsdtN3Y/lM6JYpBf0BGPCMRQYYXpt75yOKWnHrBhs1iWCf Z5KUH6FCe2kW1y+3Gdm26gtd395oOShRAWwcPzBnTD0UVwl2gUGaqpqSAvKXh7ro a7pIUe/y5HL0gjpNZVQJpRo1VtDnPFA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:35 2025 by rpki-client