$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7deda9de-6563-3d82-9a06-f50ebffee3e8.roa File: 7deda9de-6563-3d82-9a06-f50ebffee3e8.roa (raw, json) Hash identifier: FnOP334r8z8kQVLqex3y2ueyuRYSY0HPEe4GD6lTasI= Subject key identifier: 60:48:65:BD:6A:3D:F4:19:DF:61:90:D7:A1:17:C3:F2:D1:DC:ED:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01AB9B0E918EA7934F3340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7deda9de-6563-3d82-9a06-f50ebffee3e8.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ab:9b:0e:91:8e:a7:93:4f:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=83c21b4e-e4ee-45ad-8000-84016836ac03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:4b:90:37:4d:02:af:7b:65:f7:c7:98:92: 57:60:b6:62:a2:9e:1b:72:69:19:2d:42:4a:3a:81: 49:0c:46:53:0e:8f:46:8a:c5:97:f0:72:b8:52:37: be:da:5d:4f:ac:34:d5:ac:31:8c:ef:09:9f:06:38: 5c:33:85:59:bd:e3:38:88:ec:55:0d:f4:4e:d9:12: b7:06:b8:bd:63:24:01:04:cd:47:01:b9:0f:3a:db: c0:33:ca:49:79:8d:54:97:a6:6b:e3:7d:e8:d8:a8: a6:b3:56:bf:64:72:c3:3e:36:f1:9a:b7:10:e2:ad: ae:bf:d2:0c:17:8a:a8:e3:e9:12:66:ea:24:bb:ad: 8e:d3:62:03:77:de:07:4c:d4:32:3d:9e:21:b0:8f: 21:a3:41:88:c9:62:39:e3:71:20:a0:e2:37:f3:f3: 7a:98:25:80:02:c6:ce:ec:cb:63:f8:f5:ed:12:7a: a8:67:04:ac:47:62:8b:03:8d:22:6b:c4:bf:26:b7: 2a:e7:25:69:a6:56:1a:51:6f:f0:7f:43:7b:d3:2d: fb:22:fa:47:72:57:7d:e0:52:34:35:02:bf:e3:26: 1b:13:dd:c1:ce:92:53:cc:b8:5c:c3:2b:a0:5c:0b: f8:10:83:99:2c:a8:a7:33:73:08:1e:f8:65:c3:15: 12:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:48:65:BD:6A:3D:F4:19:DF:61:90:D7:A1:17:C3:F2:D1:DC:ED:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7deda9de-6563-3d82-9a06-f50ebffee3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9d:97:13:9d:6e:0d:4f:8c:72:71:ed:c0:68:86:3b:27:71: 54:b3:11:ba:b2:2d:87:4b:9f:d3:97:23:ed:25:2e:48:66:58: 73:98:a5:49:3b:ea:a8:d5:fd:48:db:c0:f6:69:2d:f9:36:de: d0:e4:fa:d1:97:8a:18:09:25:41:4e:c5:86:d0:98:55:d4:43: 4c:18:e3:f8:bf:ef:41:f0:e9:0d:79:2a:81:ad:a1:08:4e:6f: 0b:26:b5:9f:df:c3:b9:d8:08:c4:04:77:fc:2e:8a:39:23:e8: fb:4e:10:f2:f6:e1:fa:2f:6c:27:0f:4e:ae:c0:53:2b:41:e8: a1:e0:9c:0a:03:b1:c8:16:8b:1b:cf:5d:f9:18:6e:c5:a1:70: 95:d2:66:32:3c:ae:12:34:68:16:a1:80:24:d3:4e:f3:7f:be: 69:20:c0:32:c3:bc:8a:3a:b4:d2:9c:82:5a:e8:02:3b:c1:f6: eb:10:25:bf:00:26:ec:10:b1:87:ab:05:00:3d:25:2e:28:a5: 92:52:3e:b5:5d:e4:04:66:dc:54:bb:9a:97:e3:e6:5f:18:0b: 38:3f:33:76:01:20:24:2a:cd:42:03:26:6d:16:74:fc:db:8f: da:cf:5a:92:05:92:05:89:75:22:c9:d5:1a:85:f3:08:45:e6: 7a:d1:76:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaubDpGOp5NPM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODNjMjFiNGUtZTRlZS00NWFkLTgwMDAtODQwMTY4MzZhYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6RLkDdNAq97ZffHmJJXYLZiop4bcmkZLUJK OoFJDEZTDo9GisWX8HK4Uje+2l1PrDTVrDGM7wmfBjhcM4VZveM4iOxVDfRO2RK3 Bri9YyQBBM1HAbkPOtvAM8pJeY1Ul6Zr433o2Kims1a/ZHLDPjbxmrcQ4q2uv9IM F4qo4+kSZuoku62O02IDd94HTNQyPZ4hsI8ho0GIyWI543EgoOI38/N6mCWAAsbO 7Mtj+PXtEnqoZwSsR2KLA40ia8S/Jrcq5yVpplYaUW/wf0N70y37IvpHcld94FI0 NQK/4yYbE93BzpJTzLhcwyugXAv4EIOZLKinM3MIHvhlwxUSVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBIZb1qPfQZ32GQ16EXw/LR3O16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2RlZGE5ZGUtNjU2My0z ZDgyLTlhMDYtZjUwZWJmZmVlM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNA2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmdlxOdbg1PjHJx7cBohjsncVSzEbqyLYdLn9OXI+0lLkhmWHOYpUk7 6qjV/UjbwPZpLfk23tDk+tGXihgJJUFOxYbQmFXUQ0wY4/i/70Hw6Q15KoGtoQhO bwsmtZ/fw7nYCMQEd/wuijkj6PtOEPL24fovbCcPTq7AUytB6KHgnAoDscgWixvP XfkYbsWhcJXSZjI8rhI0aBahgCTTTvN/vmkgwDLDvIo6tNKcglroAjvB9usQJb8A JuwQsYerBQA9JS4opZJSPrVd5ARm3FS7mpfj5l8YCzg/M3YBICQqzUIDJm0WdPzb j9rPWpIFkgWJdSLJ1RqF8whF5nrRdt0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:01 2025 by rpki-client