$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89f3f6ad-c0dd-3233-9b45-8f21919f2601.roa File: 89f3f6ad-c0dd-3233-9b45-8f21919f2601.roa (raw, json) Hash identifier: IzURnOknRUeKxcHDp1pb0YxLbPFIqGm+DcsWrD8IODM= Subject key identifier: E7:A1:8E:B2:AE:72:3D:17:C1:54:96:1A:BB:DD:DE:5A:B7:76:CF:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B1DF1D4B6B8E67D955E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89f3f6ad-c0dd-3233-9b45-8f21919f2601.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b1:df:1d:4b:6b:8e:67:d9:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ec9c0ec7-d981-4f35-b540-3da12bd6cdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:84:ae:66:a4:e1:37:1a:b8:08:11:78:a2:19: 58:e2:aa:68:ea:28:6a:b6:a3:51:52:f8:f7:a1:6e: fb:97:aa:e1:4b:2f:e7:e5:e5:01:42:0f:0e:3d:88: 65:b9:6d:b9:db:73:8d:63:c3:bc:0c:7e:0a:00:af: 72:f0:45:21:da:8d:3c:88:f7:9e:e5:90:c5:44:4c: 6a:ed:40:fd:1c:97:4d:c0:2d:65:43:23:c7:b3:ca: b9:f9:92:ed:ca:55:d0:14:60:d3:8b:88:96:10:38: d9:ad:59:69:59:44:80:60:08:ff:78:b6:09:d4:90: 2a:eb:7e:19:77:6e:4c:64:1c:b4:0c:e4:5d:6c:68: 06:ee:13:1a:ff:d1:bd:75:28:f9:a7:3c:8e:54:15: f6:76:59:5d:01:9f:04:f2:72:41:5f:b4:c5:39:3d: 43:92:ac:e9:1e:2e:63:5e:ad:ae:fb:9e:34:66:b7: d9:94:86:e6:94:00:2c:1f:49:09:18:de:8c:aa:88: 5a:9f:ae:fe:a3:33:df:2a:01:88:d8:0c:e7:c2:7e: 67:8d:df:af:f2:4b:9e:12:57:77:82:66:5b:10:25: 19:40:6d:4e:fa:27:c1:38:04:f2:d9:ed:ad:13:ea: 28:48:68:88:a0:08:ee:1a:6d:a1:2b:b2:2e:73:48: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A1:8E:B2:AE:72:3D:17:C1:54:96:1A:BB:DD:DE:5A:B7:76:CF:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89f3f6ad-c0dd-3233-9b45-8f21919f2601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:28:05:55:c5:69:7d:f6:a4:a8:11:a3:dc:15:87:d2:65:5d: 53:1e:b8:08:95:13:d7:d5:bb:38:e0:7a:36:c7:cb:fc:17:e1: 8a:c4:2d:da:32:d0:91:d0:4a:72:b6:e0:fc:06:83:b9:1e:d9: da:73:14:0e:33:e4:5d:61:72:d8:68:54:1b:c9:ab:21:6d:77: ec:14:63:52:79:6b:c8:d2:b6:e6:b5:57:02:8a:81:37:46:67: 0d:82:fc:90:08:77:58:06:20:7e:db:78:c5:7b:ba:3e:15:83: 38:7e:0e:5d:1b:ab:4f:e8:d1:f3:ae:0e:0e:9e:d2:bb:45:f4: 65:da:07:1f:1f:18:46:81:5e:54:29:b3:3c:a1:5f:48:f6:9c: e0:fb:0c:bc:27:73:2a:1f:52:ab:d0:89:81:2c:51:ea:c0:17: e5:fc:fb:55:11:03:cf:44:52:57:f2:c9:4b:ec:2a:ca:ff:04: 15:75:37:84:c7:63:d2:19:73:7a:5e:c9:c2:24:76:6f:99:d3: 3a:c7:7a:a9:5f:9a:70:5a:7e:a0:92:8c:1f:44:ff:55:d8:28: bb:12:32:06:d2:96:48:ac:6b:ac:02:39:1f:7a:aa:f0:7c:29: 31:6e:e6:9e:b5:bb:17:45:96:68:f2:26:21:65:1b:e8:b9:1f: 99:13:bf:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbHfHUtrjmfZVeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWM5YzBlYzctZDk4MS00ZjM1LWI1NDAtM2RhMTJiZDZjZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoISuZqThNxq4CBF4ohlY4qpo6ihqtqNRUvj3 oW77l6rhSy/n5eUBQg8OPYhluW2523ONY8O8DH4KAK9y8EUh2o08iPee5ZDFRExq 7UD9HJdNwC1lQyPHs8q5+ZLtylXQFGDTi4iWEDjZrVlpWUSAYAj/eLYJ1JAq634Z d25MZBy0DORdbGgG7hMa/9G9dSj5pzyOVBX2dlldAZ8E8nJBX7TFOT1DkqzpHi5j Xq2u+540ZrfZlIbmlAAsH0kJGN6Mqohan67+ozPfKgGI2Aznwn5njd+v8kueEld3 gmZbECUZQG1O+ifBOATy2e2tE+ooSGiIoAjuGm2hK7Iuc0gjGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOehjrKucj0XwVSWGrvd3lq3ds9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODlmM2Y2YWQtYzBkZC0z MjMzLTliNDUtOGYyMTkxOWYyNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQoBVXFaX32pKgRo9wVh9JlXVMeuAiVE9fVuzjgejbHy/wX4YrELdoy 0JHQSnK24PwGg7ke2dpzFA4z5F1hcthoVBvJqyFtd+wUY1J5a8jStua1VwKKgTdG Zw2C/JAId1gGIH7beMV7uj4Vgzh+Dl0bq0/o0fOuDg6e0rtF9GXaBx8fGEaBXlQp szyhX0j2nOD7DLwncyofUqvQiYEsUerAF+X8+1URA89EUlfyyUvsKsr/BBV1N4TH Y9IZc3peycIkdm+Z0zrHeqlfmnBafqCSjB9E/1XYKLsSMgbSlkisa6wCOR96qvB8 KTFu5p61uxdFlmjyJiFlG+i5H5kTv3g= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:24 2025 by rpki-client