$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9daf897d-e3c9-3505-b5df-5304b554eb66.roa File: 9daf897d-e3c9-3505-b5df-5304b554eb66.roa (raw, json) Hash identifier: HVX2dOsObXWVjgZ6fpiYExqeSHPnRC3LXh5vZNWlcvM= Subject key identifier: 5D:98:9E:FB:75:0E:6C:90:39:EA:D0:9C:7A:6A:AC:53:50:F0:D3:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BE570D76E4EDB9657480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9daf897d-e3c9-3505-b5df-5304b554eb66.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.216.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:be:57:0d:76:e4:ed:b9:65:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=d2812035-171c-4514-b335-a331eb549a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:64:43:07:3a:d5:07:04:bc:c1:be:26:73: 74:2c:57:57:51:8d:df:ef:07:fd:96:4a:20:ea:9e: 24:49:76:81:30:80:f0:13:be:22:71:ed:22:01:c6: dd:c1:28:5b:b8:e7:fb:39:91:7b:8c:57:a4:fa:26: f2:cc:55:66:af:52:82:3c:db:66:54:9c:0b:80:ca: 97:7e:fb:26:ef:07:eb:ed:a2:38:c8:77:b7:ab:cb: 2d:6b:9d:ad:49:f9:7d:e3:ab:17:0e:e2:4b:e9:09: 33:c3:57:f2:24:d9:74:e1:3b:22:ef:da:cb:32:91: fa:6c:50:6f:0f:31:6c:45:e8:e3:de:29:36:c2:96: ce:41:97:9f:88:ad:67:98:05:8e:64:93:c4:4e:f3: d0:55:b9:9b:9e:19:af:bf:64:90:84:0b:08:1e:dd: 7b:95:53:22:94:10:58:c9:79:0d:bb:9b:b8:da:c6: e7:94:70:7c:c9:d3:cf:e2:3c:08:04:7c:28:ab:f3: 63:4b:1e:21:f6:27:61:6b:07:0e:96:0e:08:89:2b: 14:a6:2b:af:d9:88:bf:24:98:1a:ed:ad:16:0f:f0: 03:fa:85:4c:b1:2b:ff:b1:77:4f:40:c1:e1:cf:aa: 9a:14:af:f4:af:58:f9:04:0e:f0:7e:23:f7:24:50: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:98:9E:FB:75:0E:6C:90:39:EA:D0:9C:7A:6A:AC:53:50:F0:D3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9daf897d-e3c9-3505-b5df-5304b554eb66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0e:a8:9f:a1:70:fd:22:13:2f:f1:ca:31:f4:cd:a6:90:4b: 2d:02:21:fe:04:e4:42:50:ca:99:1e:23:fe:5f:7c:ff:a8:e9: ab:8d:c1:78:cc:a0:c6:74:0e:e5:9a:e8:23:0e:41:5c:a6:5d: 56:49:e8:49:c5:ea:2c:34:c2:d2:af:65:e0:c0:42:5e:67:69: 4d:a9:b5:b7:e5:bb:51:d4:c6:2b:2d:77:b0:60:ba:c2:90:b1: a1:1f:3b:9a:75:6f:ea:63:1f:eb:b8:0c:6a:c7:87:83:8c:2b: 88:1c:cd:a2:ab:0c:fd:58:c0:ba:61:17:d4:79:af:59:82:e4: a2:b5:e4:4f:cd:d1:ec:bc:37:88:80:8f:71:70:ce:bc:a1:5a: 07:3b:8b:e7:86:e5:de:32:81:77:9d:92:17:ac:e8:28:fb:41: 49:00:c6:8a:19:b2:32:c1:ee:62:2e:69:79:36:40:23:7f:ce: ac:13:52:f5:71:c2:7c:7c:5e:20:4a:ae:c7:9c:82:f3:6f:ee: 81:e6:49:d9:2f:b0:24:f6:65:4c:51:7d:cb:47:5d:4b:a2:31: f9:5f:54:bd:ee:4c:1e:63:ae:73:85:dc:c5:c4:27:5a:ad:fa: 11:1b:e1:4d:00:45:82:88:5e:f8:f8:95:9a:c5:7b:28:01:67: b8:ec:19:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAb5XDXbk7blldIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDI4MTIwMzUtMTcxYy00NTE0LWIzMzUtYTMzMWViNTQ5YTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxpkQwc61QcEvMG+JnN0LFdXUY3f7wf9lkog 6p4kSXaBMIDwE74ice0iAcbdwShbuOf7OZF7jFek+ibyzFVmr1KCPNtmVJwLgMqX fvsm7wfr7aI4yHe3q8sta52tSfl946sXDuJL6Qkzw1fyJNl04Tsi79rLMpH6bFBv DzFsRejj3ik2wpbOQZefiK1nmAWOZJPETvPQVbmbnhmvv2SQhAsIHt17lVMilBBY yXkNu5u42sbnlHB8ydPP4jwIBHwoq/NjSx4h9idhawcOlg4IiSsUpiuv2Yi/JJga 7a0WD/AD+oVMsSv/sXdPQMHhz6qaFK/0r1j5BA7wfiP3JFBw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2Ynvt1DmyQOerQnHpqrFNQ8NO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWRhZjg5N2QtZTNjOS0z NTA1LWI1ZGYtNTMwNGI1NTRlYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQOqJ+hcP0iEy/xyjH0zaaQSy0CIf4E5EJQypkeI/5ffP+o6auNwXjM oMZ0DuWa6CMOQVymXVZJ6EnF6iw0wtKvZeDAQl5naU2ptbflu1HUxistd7BgusKQ saEfO5p1b+pjH+u4DGrHh4OMK4gczaKrDP1YwLphF9R5r1mC5KK15E/N0ey8N4iA j3FwzryhWgc7i+eG5d4ygXedkhes6Cj7QUkAxooZsjLB7mIuaXk2QCN/zqwTUvVx wnx8XiBKrsecgvNv7oHmSdkvsCT2ZUxRfctHXUuiMflfVL3uTB5jrnOF3MXEJ1qt +hEb4U0ARYKIXvj4lZrFeygBZ7jsGQQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:43 2025 by rpki-client