$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3c25cb6-d513-3253-b9f7-1994bf609622.roa File: a3c25cb6-d513-3253-b9f7-1994bf609622.roa (raw, json) Hash identifier: Pc6+hiVzmWgAsz6A8lqsw7fsjBG6diFAaBIw03LPW9U= Subject key identifier: D2:1E:B0:90:FF:82:02:7D:54:BE:16:53:35:9B:02:BE:7D:3C:61:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B17D05B01DA9F852A880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3c25cb6-d513-3253-b9f7-1994bf609622.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b1:7d:05:b0:1d:a9:f8:52:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=097b13a9-55a9-4bd2-9c47-8d7441c6c3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:89:fb:40:79:b0:9d:4e:37:2c:bc:5b:5a: 8c:1c:90:9b:03:82:e0:78:e3:50:a6:24:40:04:8f: eb:2d:7d:1d:33:50:6d:ec:97:0b:b2:99:0a:33:c5: d9:72:99:90:c9:8a:49:e1:b7:b8:29:b7:2d:74:a3: 34:a9:46:7e:eb:11:e6:8c:6f:49:96:46:85:b0:1f: 36:d7:9e:58:e9:84:f0:a2:51:a6:eb:03:75:97:50: ab:ae:a5:fe:f4:4a:3b:69:95:c0:e0:f3:d6:6d:da: 6d:fc:09:10:d5:d6:7d:28:c2:30:4e:7b:eb:56:69: f7:1e:cc:9a:25:d8:8a:8a:54:6a:39:bc:d1:28:94: ac:d4:4f:26:5f:29:38:07:ea:6d:f2:2b:9a:dc:1f: fe:a6:3b:71:bd:f2:14:12:6e:a5:b8:c7:16:7a:80: 23:b8:58:d4:38:1d:9f:5a:d4:1c:fa:5a:45:45:ab: 62:21:95:72:d3:fe:c2:2a:cb:d0:6e:80:b6:ea:28: 4b:b3:21:94:83:54:89:c1:ef:0a:1f:f8:dc:1f:d3: 67:5e:57:a2:6a:ff:46:72:84:af:42:02:02:85:15: dc:cd:9d:7b:70:d6:39:10:47:46:51:11:a1:78:24: 56:a2:6d:10:63:4a:b6:97:5a:16:85:d1:96:1f:c5: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1E:B0:90:FF:82:02:7D:54:BE:16:53:35:9B:02:BE:7D:3C:61:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3c25cb6-d513-3253-b9f7-1994bf609622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:47:c1:41:b3:82:ff:13:27:da:12:7a:15:04:0d:92:c9:4a: 02:85:e1:c7:3f:ff:16:bc:f9:3e:1a:4f:85:68:16:25:c8:72: 6e:60:5d:a1:e0:1e:6c:97:91:ec:9b:65:fb:78:61:08:3a:78: 31:35:a3:94:18:02:16:13:d5:25:11:74:43:53:f5:df:87:98: 99:c5:1f:d8:b8:a8:b7:d7:f3:8f:e4:98:30:40:f2:66:f3:0b: 60:eb:4d:9a:75:33:cc:2e:53:e8:47:7b:4d:c4:33:5b:5f:16: 47:cb:96:9d:58:bc:63:d9:d1:da:0b:1c:2a:4d:0c:29:c0:6a: 9b:6e:f0:64:10:dc:4d:c1:9f:ac:cb:77:1a:85:5c:ea:06:0b: ae:4e:8e:b3:d3:0e:ad:70:bf:e5:61:89:17:58:b4:cc:e1:41: 1d:b4:7a:3b:ed:a2:a2:1a:94:0e:cf:23:51:d8:ee:4b:4f:4b: ac:74:7d:32:f2:dd:0c:9a:bf:11:84:36:51:49:7c:6a:a7:24: 27:02:62:dc:ac:34:ef:24:46:bf:98:7c:74:24:4c:57:1a:f4: 0c:b5:71:00:8a:40:8d:42:5a:68:5f:d0:96:e4:0e:6d:6a:92: b7:4f:da:28:bb:78:35:ae:16:4e:db:d5:83:42:a1:ff:48:2d: b4:6e:92:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbF9BbAdqfhSqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDk3YjEzYTktNTVhOS00YmQyLTljNDctOGQ3NDQxYzZjM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVWJ+0B5sJ1ONyy8W1qMHJCbA4LgeONQpiRA BI/rLX0dM1Bt7JcLspkKM8XZcpmQyYpJ4be4KbctdKM0qUZ+6xHmjG9JlkaFsB82 155Y6YTwolGm6wN1l1CrrqX+9Eo7aZXA4PPWbdpt/AkQ1dZ9KMIwTnvrVmn3Hsya JdiKilRqObzRKJSs1E8mXyk4B+pt8iua3B/+pjtxvfIUEm6luMcWeoAjuFjUOB2f WtQc+lpFRatiIZVy0/7CKsvQboC26ihLsyGUg1SJwe8KH/jcH9NnXleiav9GcoSv QgIChRXczZ17cNY5EEdGURGheCRWom0QY0q2l1oWhdGWH8WdXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIesJD/ggJ9VL4WUzWbAr59PGGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTNjMjVjYjYtZDUxMy0z MjUzLWI5ZjctMTk5NGJmNjA5NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlHwUGzgv8TJ9oSehUEDZLJSgKF4cc//xa8+T4aT4VoFiXIcm5gXaHg HmyXkeybZft4YQg6eDE1o5QYAhYT1SURdENT9d+HmJnFH9i4qLfX84/kmDBA8mbz C2DrTZp1M8wuU+hHe03EM1tfFkfLlp1YvGPZ0doLHCpNDCnAaptu8GQQ3E3Bn6zL dxqFXOoGC65OjrPTDq1wv+VhiRdYtMzhQR20ejvtoqIalA7PI1HY7ktPS6x0fTLy 3QyavxGENlFJfGqnJCcCYtysNO8kRr+YfHQkTFca9Ay1cQCKQI1CWmhf0JbkDm1q krdP2ii7eDWuFk7b1YNCof9ILbRukuY= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:16 2025 by rpki-client