$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87aadb80-4344-31e5-ad79-d9b4bca04a89.roa File: 87aadb80-4344-31e5-ad79-d9b4bca04a89.roa (raw, json) Hash identifier: N+NaUbW2aekGHxbqhqlMpwMpJ9DATzu5UN2VOMiL8rI= Subject key identifier: 68:66:03:93:B1:6E:56:8D:91:01:DE:88:CF:9D:C7:91:AD:D5:63:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01CDDF50B61840203A4CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87aadb80-4344-31e5-ad79-d9b4bca04a89.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.223.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:cd:df:50:b6:18:40:20:3a:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=3c2aebbb-52f7-4b3e-a486-fd7ff927706c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:23:fb:44:92:af:d0:b2:8d:ec:01:c4:b3: 24:9d:08:d9:2e:9c:e5:80:89:57:61:8f:d2:30:61: 17:68:9f:c9:c6:9b:2c:db:3a:f7:09:05:56:7a:3c: 05:59:c3:f3:33:52:ea:86:86:4e:cf:3c:0f:6c:22: fa:d7:51:54:ea:f7:b7:80:3c:75:89:a5:0e:b9:70: 44:d0:9d:bc:2b:f0:cc:d2:86:08:81:c1:41:0c:d6: d2:98:71:b6:4c:5a:4d:bb:fe:30:a3:6c:73:e5:f4: 47:65:6d:87:37:93:4b:97:b0:f0:f5:66:be:8d:c0: 3c:b4:52:34:55:52:22:ed:42:0f:4f:19:a5:69:af: 01:a1:6e:74:43:f2:8d:f5:d6:a2:de:7f:92:b2:14: 36:65:17:5e:97:7d:6a:5a:82:5f:39:13:94:84:59: df:20:b8:7e:00:82:67:d0:cb:dc:24:e8:1d:b9:fe: 4b:25:26:62:10:b6:53:c4:8c:3a:27:13:2b:5b:3a: ae:0c:1b:63:19:1f:92:8e:11:15:53:ab:9a:70:05: 90:5b:c8:1c:bf:3e:69:0e:39:17:d4:ad:e0:c3:52: 1d:e6:27:2b:bd:55:b4:e3:ab:fe:14:1b:d5:fb:bd: 6e:99:07:01:8a:8b:9d:12:71:61:b9:20:e6:ba:67: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:66:03:93:B1:6E:56:8D:91:01:DE:88:CF:9D:C7:91:AD:D5:63:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87aadb80-4344-31e5-ad79-d9b4bca04a89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:16:de:33:cf:46:be:7a:0c:ce:bf:2b:7c:be:24:b1:80:4b: d0:81:b8:61:36:c5:d1:f6:93:e2:d1:ee:ce:13:ee:38:4c:80: 73:05:ac:b8:33:64:87:10:3a:72:39:65:c9:f9:2f:86:85:2e: 40:4d:a9:15:32:0e:30:31:e2:48:03:3a:3d:76:f3:05:90:7e: 2a:f9:a3:e6:5a:b2:ee:18:10:01:cd:89:a1:db:be:b7:8b:c8: 9f:89:21:4b:30:0d:ea:d4:70:80:6f:8f:3f:34:47:35:8e:e5: d5:32:65:f1:7e:5c:96:cf:d0:d7:bf:c5:52:97:61:48:55:3b: bf:df:6e:f5:f3:32:d0:b0:ee:6f:21:27:ae:6d:0d:27:96:5d: 7d:36:74:e7:46:d7:65:5d:ae:9c:b6:cd:dd:7a:2f:89:53:82: 99:69:14:9e:69:61:e5:d2:82:82:c4:cf:f6:77:ae:80:77:15: 8c:55:c7:33:ce:8d:43:b8:9b:1f:fb:47:d4:c2:c3:45:0e:de: 3c:b1:32:cc:92:88:cd:a9:4e:9b:3d:56:d3:b5:07:49:95:74: 8c:1f:96:a4:d4:e7:bd:0a:96:22:ba:3d:50:4e:41:6a:a2:31: ca:1e:8a:fa:af:0e:1f:8d:5a:b4:2a:84:3f:ea:d9:01:af:0b: 4f:cd:e5:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAc3fULYYQCA6TMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2MyYWViYmItNTJmNy00YjNlLWE0ODYtZmQ3ZmY5Mjc3MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIcj+0SSr9CyjewBxLMknQjZLpzlgIlXYY/S MGEXaJ/Jxpss2zr3CQVWejwFWcPzM1LqhoZOzzwPbCL611FU6ve3gDx1iaUOuXBE 0J28K/DM0oYIgcFBDNbSmHG2TFpNu/4wo2xz5fRHZW2HN5NLl7Dw9Wa+jcA8tFI0 VVIi7UIPTxmlaa8BoW50Q/KN9dai3n+SshQ2ZRdel31qWoJfOROUhFnfILh+AIJn 0MvcJOgduf5LJSZiELZTxIw6JxMrWzquDBtjGR+SjhEVU6uacAWQW8gcvz5pDjkX 1K3gw1Id5icrvVW046v+FBvV+71umQcBioudEnFhuSDmumfJiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhmA5OxblaNkQHeiM+dx5Gt1WOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODdhYWRiODAtNDM0NC0z MWU1LWFkNzktZDliNGJjYTA0YTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAW3jPPRr56DM6/K3y+JLGAS9CBuGE2xdH2k+LR7s4T7jhMgHMFrLgz ZIcQOnI5Zcn5L4aFLkBNqRUyDjAx4kgDOj128wWQfir5o+Zasu4YEAHNiaHbvreL yJ+JIUswDerUcIBvjz80RzWO5dUyZfF+XJbP0Ne/xVKXYUhVO7/fbvXzMtCw7m8h J65tDSeWXX02dOdG12Vdrpy2zd16L4lTgplpFJ5pYeXSgoLEz/Z3roB3FYxVxzPO jUO4mx/7R9TCw0UO3jyxMsySiM2pTps9VtO1B0mVdIwflqTU570KliK6PVBOQWqi McoeivqvDh+NWrQqhD/q2QGvC0/N5f4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:13 2025 by rpki-client