$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b680b1ed-a169-361d-b1d4-6c944dca1531.roa File: b680b1ed-a169-361d-b1d4-6c944dca1531.roa (raw, json) Hash identifier: Nrtpoxv/jTPxLjuuVomJdTDha+O0qCMDsDmruTmFMpk= Subject key identifier: E8:11:97:14:43:F5:73:C3:C1:42:6C:87:11:45:0F:C5:93:E9:5E:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A3418A06474DF7A2F460 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b680b1ed-a169-361d-b1d4-6c944dca1531.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a3:41:8a:06:47:4d:f7:a2:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=9315d43b-5682-4b59-8a5f-4edce8defdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:de:43:14:82:be:5d:6a:73:2c:24:ed:de:c0: 47:7e:0d:98:29:3c:c7:06:3c:ab:e3:e4:c9:0b:1d: 67:cd:a9:05:26:9a:6e:62:fe:78:2b:dc:46:7e:42: 34:65:74:02:2f:77:29:8d:e3:0b:42:eb:26:23:70: d0:d8:94:77:d6:cd:34:73:9c:51:db:ac:99:e1:99: 3e:1c:1c:1b:ef:6d:57:fd:23:25:7f:5a:58:3c:bb: f9:c3:03:9e:9c:4e:dc:98:fc:d2:67:45:ba:5f:3c: 84:56:d5:ef:ca:4e:36:2c:ff:e0:d5:f4:4e:c5:ef: 26:95:f1:30:97:32:76:54:22:6a:f3:9a:0d:32:b0: 7b:63:d2:c3:dd:e7:36:a2:9a:0f:47:c3:b8:fe:eb: 85:ec:45:f3:a1:2e:52:8b:05:96:bd:5f:b9:71:54: c4:83:ee:3f:68:74:f2:e6:4f:a5:28:34:35:80:37: b8:7b:cf:d9:c6:9a:08:6c:e0:4a:38:70:2b:ef:fc: 30:57:8d:3e:96:f7:6b:d2:ae:72:c5:30:d6:f7:84: bf:0a:73:6a:cb:f6:b5:32:d8:ae:30:b2:46:8d:42: 94:51:34:d3:d9:63:60:2c:5b:b1:f9:b3:a5:7a:6f: 1f:45:b9:7b:bc:16:57:28:36:e7:7a:a9:d2:3c:4e: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:11:97:14:43:F5:73:C3:C1:42:6C:87:11:45:0F:C5:93:E9:5E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b680b1ed-a169-361d-b1d4-6c944dca1531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b2:d4:d8:50:2c:ac:b5:90:44:ce:96:5d:c8:7d:d9:ab:00: c2:5c:e3:15:c6:08:f0:52:83:7e:c7:d8:cb:d0:e2:16:ca:59: b1:14:16:07:ce:a2:26:0d:76:eb:29:70:9e:d2:b2:2b:d9:28: ea:13:28:5e:59:ca:d5:66:af:fd:03:50:33:28:d0:b9:77:c7: a8:36:4e:29:7f:ce:9b:2a:84:dd:f8:8b:9e:c1:cb:bc:02:1c: 3a:aa:2f:d4:59:3c:95:3b:fb:5c:d0:3f:8c:18:0a:16:74:4c: 7c:cb:0b:6b:be:f1:51:f2:ca:e1:6b:6a:f1:ee:de:24:51:b1: ee:33:5f:25:c3:3f:69:28:8a:e5:1d:63:d0:3f:63:31:f1:f8: e6:e8:cc:a8:0a:6e:48:f7:a7:e3:11:26:ce:8a:da:7c:83:7e: d5:44:70:9a:f0:0e:84:b3:62:cb:ae:d8:24:3d:a2:3b:90:51: 80:f6:b0:93:6b:d7:b1:ee:84:5f:9e:ed:81:50:c7:4b:b3:09: 84:67:1c:64:f8:ac:72:ec:d6:d4:2f:d3:02:5c:fd:a6:76:76: 8c:a4:b5:38:37:64:2e:94:ba:83:a8:6d:c6:a2:0e:bf:e7:b2: 07:fb:b3:86:73:3e:ef:78:da:8b:20:c7:f7:6c:5e:d9:a3:ba: ea:68:aa:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaNBigZHTfei9GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTMxNWQ0M2ItNTY4Mi00YjU5LThhNWYtNGVkY2U4ZGVmZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt5DFIK+XWpzLCTt3sBHfg2YKTzHBjyr4+TJ Cx1nzakFJppuYv54K9xGfkI0ZXQCL3cpjeMLQusmI3DQ2JR31s00c5xR26yZ4Zk+ HBwb721X/SMlf1pYPLv5wwOenE7cmPzSZ0W6XzyEVtXvyk42LP/g1fROxe8mlfEw lzJ2VCJq85oNMrB7Y9LD3ec2opoPR8O4/uuF7EXzoS5SiwWWvV+5cVTEg+4/aHTy 5k+lKDQ1gDe4e8/ZxpoIbOBKOHAr7/wwV40+lvdr0q5yxTDW94S/CnNqy/a1Mtiu MLJGjUKUUTTT2WNgLFux+bOlem8fRbl7vBZXKDbneqnSPE6yewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgRlxRD9XPDwUJshxFFD8WT6V5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjY4MGIxZWQtYTE2OS0z NjFkLWIxZDQtNmM5NDRkY2ExNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWy1NhQLKy1kETOll3IfdmrAMJc4xXGCPBSg37H2MvQ4hbKWbEUFgfO oiYNduspcJ7SsivZKOoTKF5ZytVmr/0DUDMo0Ll3x6g2Til/zpsqhN34i57By7wC HDqqL9RZPJU7+1zQP4wYChZ0THzLC2u+8VHyyuFravHu3iRRse4zXyXDP2koiuUd Y9A/YzHx+ObozKgKbkj3p+MRJs6K2nyDftVEcJrwDoSzYsuu2CQ9ojuQUYD2sJNr 17HuhF+e7YFQx0uzCYRnHGT4rHLs1tQv0wJc/aZ2doyktTg3ZC6UuoOobcaiDr/n sgf7s4ZzPu942osgx/dsXtmjuupoqvw= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:08 2025 by rpki-client