$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5eda552-4dd7-3d22-91d0-7de9120fec54.roa File: a5eda552-4dd7-3d22-91d0-7de9120fec54.roa (raw, json) Hash identifier: uFhRjNCb4kkG3IK3QOBRUP2UrqWdYPuLgLSxwlnqDZM= Subject key identifier: 81:4B:9A:03:E0:7A:91:95:89:B3:2C:83:BF:9F:A1:16:59:D6:B6:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B4B9E579E2F8E314C780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5eda552-4dd7-3d22-91d0-7de9120fec54.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.210.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b4:b9:e5:79:e2:f8:e3:14:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=c7327815-d64a-46c4-9ff3-c987060a0e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e5:c0:eb:09:fc:5c:30:13:57:03:73:4d:da: 63:ce:8d:e8:96:25:ac:b6:bb:05:fe:e9:4e:a4:02: 7d:41:c5:6d:40:7f:d9:43:d4:34:fd:7a:b0:60:78: 4d:bb:e3:96:ff:c5:61:c3:d7:8c:84:b3:92:d6:e2: 81:1d:f7:de:11:6b:ef:57:0f:e6:46:3c:b8:3e:7f: 0d:e7:01:9a:82:39:08:a2:2b:53:95:cc:01:97:49: 2e:73:81:61:2a:c3:ec:ec:28:4b:a9:d0:df:4c:87: ae:b1:7e:bb:77:be:bf:61:92:a7:54:3b:d4:df:a3: a5:33:94:f2:f1:8c:98:05:a0:97:3f:5f:f9:ea:30: bb:23:cb:45:4a:bc:39:73:f4:ce:e4:52:27:af:89: 87:df:1c:c0:8f:b2:ef:a1:f0:07:a9:f4:c5:7d:f0: 6c:6b:1c:fa:ce:0d:af:af:6c:8a:0e:43:d7:aa:18: 22:db:a5:3f:f5:05:a6:a2:55:b3:b7:86:40:17:1b: 4a:59:8f:fe:05:88:53:c7:1b:f3:54:5d:3a:ea:1c: b4:e1:46:3c:18:34:67:e9:d1:4e:f6:6a:5b:db:3e: 98:6c:50:52:e3:5f:5a:40:58:85:26:3c:2d:e3:83: 2c:99:3d:d1:c7:36:db:38:c6:10:a9:1e:dd:93:ad: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4B:9A:03:E0:7A:91:95:89:B3:2C:83:BF:9F:A1:16:59:D6:B6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5eda552-4dd7-3d22-91d0-7de9120fec54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:cf:b2:bb:d7:3b:4a:c9:1b:f0:46:cd:9f:b5:4a:9e:73:31: 86:db:a3:fc:5b:fd:5c:06:01:e0:a4:59:50:47:bd:25:46:00: 78:74:53:f5:80:46:e9:0f:28:a1:00:2f:71:51:79:2a:b3:89: 8e:3c:10:b2:99:81:72:48:19:f5:75:46:b3:4f:b4:14:ed:ad: d3:35:ac:1c:36:20:14:46:66:04:95:0c:aa:8a:35:8a:30:5c: 24:c0:01:b8:2f:7e:81:2e:61:5c:ca:25:42:d5:99:ea:b2:09: 53:cf:11:45:40:8c:21:ad:c9:5c:4d:81:af:cb:59:2e:41:1c: 54:94:0b:a6:10:08:88:0b:2e:5e:6f:08:dc:09:bd:95:b3:f9: 65:a7:fa:6c:65:ad:17:72:9f:9a:63:22:ec:be:44:fe:77:b8: ea:e1:75:97:28:38:a7:52:3c:96:02:25:d1:00:56:00:ca:92: ee:b8:9c:3a:5e:80:ed:62:84:35:0e:b7:33:be:1b:a5:e9:80: bf:2a:74:11:9c:4a:51:88:83:61:ec:2a:61:83:68:46:1b:3a: 6d:c5:07:6d:b9:90:3b:f8:9d:8e:a3:f1:d1:0f:ec:3e:e8:72: cb:1d:a9:65:6f:9f:7d:85:be:52:b6:c9:71:e1:76:ff:ea:91: d0:3a:0e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbS55Xni+OMUx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzczMjc4MTUtZDY0YS00NmM0LTlmZjMtYzk4NzA2MGEwZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuXA6wn8XDATVwNzTdpjzo3oliWstrsF/ulO pAJ9QcVtQH/ZQ9Q0/XqwYHhNu+OW/8Vhw9eMhLOS1uKBHffeEWvvVw/mRjy4Pn8N 5wGagjkIoitTlcwBl0kuc4FhKsPs7ChLqdDfTIeusX67d76/YZKnVDvU36OlM5Ty 8YyYBaCXP1/56jC7I8tFSrw5c/TO5FInr4mH3xzAj7LvofAHqfTFffBsaxz6zg2v r2yKDkPXqhgi26U/9QWmolWzt4ZAFxtKWY/+BYhTxxvzVF066hy04UY8GDRn6dFO 9mpb2z6YbFBS419aQFiFJjwt44MsmT3RxzbbOMYQqR7dk62lNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFLmgPgepGVibMsg7+foRZZ1rbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTVlZGE1NTItNGRkNy0z ZDIyLTkxZDAtN2RlOTEyMGZlYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNKDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPPsrvXO0rJG/BGzZ+1Sp5zMYbbo/xb/VwGAeCkWVBHvSVGAHh0U/WA RukPKKEAL3FReSqziY48ELKZgXJIGfV1RrNPtBTtrdM1rBw2IBRGZgSVDKqKNYow XCTAAbgvfoEuYVzKJULVmeqyCVPPEUVAjCGtyVxNga/LWS5BHFSUC6YQCIgLLl5v CNwJvZWz+WWn+mxlrRdyn5pjIuy+RP53uOrhdZcoOKdSPJYCJdEAVgDKku64nDpe gO1ihDUOtzO+G6XpgL8qdBGcSlGIg2HsKmGDaEYbOm3FB225kDv4nY6j8dEP7D7o cssdqWVvn32FvlK2yXHhdv/qkdA6Dm4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:13 2025 by rpki-client