$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/843234a9-a64e-34e4-b1a9-95ebc0d732d2.roa File: 843234a9-a64e-34e4-b1a9-95ebc0d732d2.roa (raw, json) Hash identifier: 85qJ+NU61frTLZqVMCOMP7xfIAW++wtFMpZm25hOP0o= Subject key identifier: 1E:D4:32:07:D9:B5:DA:14:41:58:D8:98:99:22:70:09:0A:86:D1:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BF3F996C115A35DFDB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/843234a9-a64e-34e4-b1a9-95ebc0d732d2.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.216.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:bf:3f:99:6c:11:5a:35:df:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=a4a53137-4cbc-4eed-aa7f-bde106ffac85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:05:4a:c8:03:44:ec:8c:8b:29:76:69:25: d2:5d:37:21:3d:04:2b:aa:f1:fb:eb:70:56:5c:b0: 1a:02:84:e9:48:f7:35:7d:59:68:80:e0:71:a2:1b: 3c:b2:19:53:23:22:28:13:23:f0:38:ac:3c:a2:48: dc:09:1d:8e:89:2e:74:16:bd:36:31:41:bc:e8:74: 5a:0b:2e:22:33:57:0b:83:6a:a6:9e:4b:77:74:f8: b3:ff:e1:0b:43:38:74:6c:4d:b7:bc:85:57:a3:4b: e3:f4:31:62:18:93:69:32:e2:97:f1:6d:7f:a4:02: d5:50:b9:d2:d7:ed:9f:27:08:9b:b3:61:85:d6:66: 85:63:2b:a0:e6:20:d4:74:01:7a:cf:33:51:34:0b: 65:52:68:46:50:bd:4e:d3:71:2a:d3:2c:8f:11:a7: ea:fd:a7:56:2e:1a:80:6d:a0:58:a2:2f:3f:b5:18: 7a:e1:0a:f3:52:78:27:3b:e4:2f:9e:c7:ef:6e:e2: d3:f9:86:eb:82:9c:ea:58:89:27:ee:99:ea:50:59: f4:a8:fd:1b:62:73:6c:d0:bb:7a:e7:21:27:c0:28: e2:a5:0f:e8:8c:6e:8c:6e:09:95:22:f4:e9:ed:34: e7:df:6b:62:1c:ac:cf:ea:c3:23:e4:73:21:05:96: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D4:32:07:D9:B5:DA:14:41:58:D8:98:99:22:70:09:0A:86:D1:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/843234a9-a64e-34e4-b1a9-95ebc0d732d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:db:2d:45:b3:ec:15:b5:18:10:f8:ef:f3:05:51:c2:2b:4f: 16:bf:ce:72:11:b5:0c:44:56:58:be:34:db:3e:f5:12:12:47: c4:3d:eb:30:cc:50:4d:ee:a9:98:90:6e:da:f2:47:51:86:f9: bc:cc:01:00:a2:79:18:da:22:4e:e2:03:10:d4:55:e0:2a:8c: e3:37:0b:a5:39:1b:d8:2b:ac:3a:a2:26:b2:88:20:f2:8f:6e: 9e:df:0a:37:60:50:6e:06:c4:d9:f0:99:f3:ce:55:0f:56:40: e9:52:3b:b0:4b:76:b8:f5:48:33:26:0d:d1:ce:af:03:fe:14: 3d:67:c5:67:bb:4d:0b:f4:9b:52:cf:b4:f4:6c:7d:45:86:11: 8d:7d:f4:5c:02:fa:65:6e:11:1e:72:a4:d5:fc:b9:18:ab:4c: c3:ec:56:bd:f9:e8:2f:ce:53:5b:6f:d8:c9:85:3e:dd:10:85: 93:b0:fa:ce:91:17:3d:d2:2a:31:69:6f:c8:b7:f6:5c:72:90: 59:45:60:5b:59:ab:11:aa:39:83:31:93:03:23:cd:d0:e6:fe: 76:9a:0f:96:0d:a5:db:f4:b7:7c:e5:20:a1:ab:10:ba:d8:9c: 07:ba:4c:b9:b8:27:f7:ac:79:b6:7f:fe:8c:89:8d:53:a8:4b: a3:15:db:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAb8/mWwRWjXf2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTRhNTMxMzctNGNiYy00ZWVkLWFhN2YtYmRlMTA2ZmZhYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPkFSsgDROyMiyl2aSXSXTchPQQrqvH763BW XLAaAoTpSPc1fVlogOBxohs8shlTIyIoEyPwOKw8okjcCR2OiS50Fr02MUG86HRa Cy4iM1cLg2qmnkt3dPiz/+ELQzh0bE23vIVXo0vj9DFiGJNpMuKX8W1/pALVULnS 1+2fJwibs2GF1maFYyug5iDUdAF6zzNRNAtlUmhGUL1O03Eq0yyPEafq/adWLhqA baBYoi8/tRh64QrzUngnO+QvnsfvbuLT+YbrgpzqWIkn7pnqUFn0qP0bYnNs0Lt6 5yEnwCjipQ/ojG6MbgmVIvTp7TTn32tiHKzP6sMj5HMhBZZywwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7UMgfZtdoUQVjYmJkicAkKhtHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODQzMjM0YTktYTY0ZS0z NGU0LWIxYTktOTVlYmMwZDczMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/bLUWz7BW1GBD47/MFUcIrTxa/znIRtQxEVli+NNs+9RISR8Q96zDM UE3uqZiQbtryR1GG+bzMAQCieRjaIk7iAxDUVeAqjOM3C6U5G9grrDqiJrKIIPKP bp7fCjdgUG4GxNnwmfPOVQ9WQOlSO7BLdrj1SDMmDdHOrwP+FD1nxWe7TQv0m1LP tPRsfUWGEY199FwC+mVuER5ypNX8uRirTMPsVr356C/OU1tv2MmFPt0QhZOw+s6R Fz3SKjFpb8i39lxykFlFYFtZqxGqOYMxkwMjzdDm/naaD5YNpdv0t3zlIKGrELrY nAe6TLm4J/esebZ//oyJjVOoS6MV2yQ= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:45 2025 by rpki-client