$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad9b7577-071b-308c-a503-30a4e21bf0d8.roa File: ad9b7577-071b-308c-a503-30a4e21bf0d8.roa (raw, json) Hash identifier: XqGzt476ZVCgExTiaQhrtE9KIP7Ft2JjDEsRSB+7zgs= Subject key identifier: 09:EB:FA:1E:61:0B:A5:45:EC:60:3D:44:67:99:0E:1C:0D:70:39:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B6D182207C30CB67B280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad9b7577-071b-308c-a503-30a4e21bf0d8.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.211.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b6:d1:82:20:7c:30:cb:67:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=479bb294-7410-4431-977d-1444a8de5407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:71:5d:1e:2e:b3:89:a1:43:c6:4d:5d:43:1d: 87:c6:e9:ab:ce:b3:02:fb:f3:1a:d6:1a:70:ed:f3: d3:99:87:d8:7f:f5:a6:bd:29:7f:87:12:6f:9c:b3: 5b:af:11:68:3a:00:02:a2:ab:47:e8:5d:1a:56:84: a2:08:e4:65:3b:5f:34:12:87:f5:f5:09:89:65:5b: 80:c9:88:36:36:f2:6d:89:be:e0:33:5e:c4:8a:8e: b6:9a:80:44:92:a3:1c:07:cf:09:02:e9:93:70:2a: ce:09:3a:2d:fb:91:86:ae:c5:d2:a8:6a:2a:13:8b: af:a2:d1:a7:5b:64:e1:9f:71:0a:b3:93:c9:c4:ab: 61:41:fa:e2:eb:74:7b:e0:d2:46:53:39:3d:a4:87: 3d:c2:a4:3f:b6:00:71:cf:12:a5:64:72:30:f1:2a: 00:93:80:56:f8:79:c9:3f:c3:bd:28:e4:cd:18:0f: fa:f4:c6:68:98:75:35:2c:c8:b9:f7:2f:c8:77:76: d5:e5:f6:4e:7f:b6:80:fe:a1:32:07:84:c6:e5:eb: 1c:b5:6d:84:0b:c0:c7:4e:8e:14:bd:36:d9:f0:e3: ee:78:d0:33:47:00:4c:6b:0d:72:9b:e6:3d:25:9f: 2e:7b:ba:b3:33:20:22:2a:50:85:7b:f4:6d:2c:ab: 93:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EB:FA:1E:61:0B:A5:45:EC:60:3D:44:67:99:0E:1C:0D:70:39:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad9b7577-071b-308c-a503-30a4e21bf0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:52:8d:31:12:ca:42:5a:69:c2:4e:87:64:00:32:25:f3:6d: c2:8f:69:93:cd:77:27:44:28:8b:0b:cc:43:d1:44:45:00:28: 6f:62:2e:6b:c0:ca:2f:05:5e:52:f7:d4:3f:ed:64:5f:05:49: f9:ef:e0:82:ba:f2:ff:b6:14:69:27:f3:fa:02:dd:8a:84:8f: b7:d8:e6:50:1a:4e:46:a8:a2:38:db:26:ce:21:86:fc:c8:ec: 44:8d:5c:86:a1:52:b6:0b:eb:29:aa:52:4e:52:ed:47:d3:87: f2:1c:fe:fc:4c:5b:ab:ed:f9:74:d1:f1:ad:d2:b3:47:94:2b: aa:c3:48:98:62:d8:2a:c9:d7:cb:0e:80:39:f4:42:96:db:c4: 01:ec:ab:46:01:03:31:60:34:d7:27:e6:10:a4:71:c5:59:7a: ab:05:5a:e1:e5:e6:24:a2:68:9f:5b:5f:a5:79:51:51:0b:82: ec:46:37:29:c1:6f:17:f8:cd:14:d1:6d:52:a9:ba:2f:8e:49: ac:08:87:16:49:6b:c6:85:63:10:74:fd:c6:61:65:e3:c5:b2: 48:01:70:ff:4d:0c:82:43:bc:2c:40:4f:09:8c:de:38:75:1b: 4a:cf:22:96:69:b2:ba:e1:dc:77:fb:90:0e:3f:5c:b2:14:71: 24:14:d4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbbRgiB8MMtnsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDc5YmIyOTQtNzQxMC00NDMxLTk3N2QtMTQ0NGE4ZGU1NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHFdHi6ziaFDxk1dQx2HxumrzrMC+/Ma1hpw 7fPTmYfYf/WmvSl/hxJvnLNbrxFoOgACoqtH6F0aVoSiCORlO180Eof19QmJZVuA yYg2NvJtib7gM17Eio62moBEkqMcB88JAumTcCrOCTot+5GGrsXSqGoqE4uvotGn W2Thn3EKs5PJxKthQfri63R74NJGUzk9pIc9wqQ/tgBxzxKlZHIw8SoAk4BW+HnJ P8O9KOTNGA/69MZomHU1LMi59y/Id3bV5fZOf7aA/qEyB4TG5esctW2EC8DHTo4U vTbZ8OPueNAzRwBMaw1ym+Y9JZ8ue7qzMyAiKlCFe/RtLKuTiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnr+h5hC6VF7GA9RGeZDhwNcDnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWQ5Yjc1NzctMDcxYi0z MDhjLWE1MDMtMzBhNGUyMWJmMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBSjTESykJaacJOh2QAMiXzbcKPaZPNdydEKIsLzEPRREUAKG9iLmvA yi8FXlL31D/tZF8FSfnv4IK68v+2FGkn8/oC3YqEj7fY5lAaTkaoojjbJs4hhvzI 7ESNXIahUrYL6ymqUk5S7UfTh/Ic/vxMW6vt+XTR8a3Ss0eUK6rDSJhi2CrJ18sO gDn0QpbbxAHsq0YBAzFgNNcn5hCkccVZeqsFWuHl5iSiaJ9bX6V5UVELguxGNynB bxf4zRTRbVKpui+OSawIhxZJa8aFYxB0/cZhZePFskgBcP9NDIJDvCxATwmM3jh1 G0rPIpZpsrrh3Hf7kA4/XLIUcSQU1FQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:34:59 2025 by rpki-client