$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/892ca836-f618-3d77-99a9-1dbbe7e71418.roa File: 892ca836-f618-3d77-99a9-1dbbe7e71418.roa (raw, json) Hash identifier: IEmYWXFUcR5RD0eHW42DYgmL3ZydBGefwpTfKDPhjd4= Subject key identifier: DC:1C:C6:60:1C:80:C5:9D:91:BB:1F:69:B5:97:5E:84:71:D5:6A:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01D2F57606F2423F42F140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/892ca836-f618-3d77-99a9-1dbbe7e71418.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.223.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:d2:f5:76:06:f2:42:3f:42:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=7335117e-a8a9-4fdc-a022-b479f5dc4396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:14:dd:18:50:ee:a5:7f:9d:b8:4c:d9:4d:0c: 76:44:2e:30:b3:8f:1e:56:09:03:ab:07:35:bd:60: 94:21:fc:48:b0:fc:9c:8a:99:85:32:0e:b3:67:7f: 9c:42:1f:32:b1:8c:89:e2:16:f9:64:59:7c:a6:b5: 37:a0:24:59:3b:86:d5:16:2b:04:30:ca:ae:2b:55: 78:bc:fc:fd:94:88:4b:b4:d5:cd:4c:7e:8b:fc:66: 2a:5a:5b:66:5f:3b:d1:79:0b:69:67:b5:d6:f1:89: c1:ae:0e:b6:48:66:91:10:55:2e:d9:95:5e:a1:b9: 73:f3:c3:f3:66:a3:31:16:f0:b1:ee:e4:5f:0d:bb: 4d:85:fc:26:a1:c9:5a:cd:b5:3d:24:57:73:ab:1a: 5f:90:24:d9:10:a3:85:d9:1c:92:1c:d7:a6:9b:b5: 64:51:4e:dc:3c:40:df:9b:19:3a:0e:c5:f4:09:d8: f1:97:6a:f0:06:26:bd:21:67:45:7c:92:61:12:86: 9e:83:c6:f2:ab:4a:c9:48:36:5f:85:75:fc:75:86: 5d:6a:3c:11:37:27:d3:31:40:5b:1f:36:f5:59:e5: 63:1b:ec:d2:fd:77:78:a6:01:cb:60:6a:57:8a:13: 13:0f:3d:52:6b:7a:22:7e:fe:df:6b:06:09:25:e1: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1C:C6:60:1C:80:C5:9D:91:BB:1F:69:B5:97:5E:84:71:D5:6A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/892ca836-f618-3d77-99a9-1dbbe7e71418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:cb:8a:70:38:26:95:76:06:d9:1e:b6:3e:b7:8e:44:c1:bd: d2:23:66:90:a4:8d:3d:51:c4:d7:64:1e:55:05:89:97:f4:c3: fa:70:d6:44:9a:47:44:c5:6b:9e:96:cf:12:5e:87:0e:52:49: 48:8c:f9:35:16:8d:d6:7b:b0:de:2a:c4:b2:ec:9a:6d:c7:27: 28:0c:91:63:80:7b:20:6d:03:9e:a8:a9:84:d5:11:23:e8:23: a5:b9:fd:43:e9:79:32:ad:75:71:58:1b:f0:61:4c:17:98:25: 50:a7:c2:0c:44:67:ec:84:71:85:60:21:a5:c7:2a:79:d6:38: 9a:5f:cb:2c:f8:31:99:ef:d7:c2:ff:65:6e:13:9e:0a:86:a8: 1d:8a:47:7c:34:5e:ab:a9:67:89:c0:30:e2:e2:61:d3:96:16: 52:d8:d5:b4:0a:76:e5:76:13:fc:2f:14:e4:7f:52:fd:7d:31: 02:2b:09:07:21:36:00:c0:27:83:83:59:67:1c:8a:f0:39:ad: 3b:ab:63:a6:48:18:3d:67:7d:ee:ba:2d:3e:75:3f:f7:0f:42: 55:8a:ee:8d:09:f7:b0:34:7c:5b:98:63:07:27:c5:00:84:22: b6:09:f1:b8:10:e4:a5:1b:4c:41:d7:ac:bc:46:5f:ae:bb:06: 76:24:a4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAdL1dgbyQj9C8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NzMzNTExN2UtYThhOS00ZmRjLWEwMjItYjQ3OWY1ZGM0Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hTdGFDupX+duEzZTQx2RC4ws48eVgkDqwc1 vWCUIfxIsPycipmFMg6zZ3+cQh8ysYyJ4hb5ZFl8prU3oCRZO4bVFisEMMquK1V4 vPz9lIhLtNXNTH6L/GYqWltmXzvReQtpZ7XW8YnBrg62SGaREFUu2ZVeoblz88Pz ZqMxFvCx7uRfDbtNhfwmoclazbU9JFdzqxpfkCTZEKOF2RySHNemm7VkUU7cPEDf mxk6DsX0Cdjxl2rwBia9IWdFfJJhEoaeg8byq0rJSDZfhXX8dYZdajwRNyfTMUBb Hzb1WeVjG+zS/Xd4pgHLYGpXihMTDz1Sa3oifv7fawYJJeHX3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwcxmAcgMWdkbsfabWXXoRx1Wr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODkyY2E4MzYtZjYxOC0z ZDc3LTk5YTktMWRiYmU3ZTcxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvLinA4JpV2Btketj63jkTBvdIjZpCkjT1RxNdkHlUFiZf0w/pw1kSa R0TFa56WzxJehw5SSUiM+TUWjdZ7sN4qxLLsmm3HJygMkWOAeyBtA56oqYTVESPo I6W5/UPpeTKtdXFYG/BhTBeYJVCnwgxEZ+yEcYVgIaXHKnnWOJpfyyz4MZnv18L/ ZW4TngqGqB2KR3w0XqupZ4nAMOLiYdOWFlLY1bQKduV2E/wvFOR/Uv19MQIrCQch NgDAJ4ODWWccivA5rTurY6ZIGD1nfe66LT51P/cPQlWK7o0J97A0fFuYYwcnxQCE IrYJ8bgQ5KUbTEHXrLxGX667BnYkpH8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:53 2025 by rpki-client