$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b954b221-b19d-3044-8ceb-7c9f2756ff51.roa File: b954b221-b19d-3044-8ceb-7c9f2756ff51.roa (raw, json) Hash identifier: cUtKMAzFYJjEGd10vZeEcbGI80CCuiBX3VRSC+t0daE= Subject key identifier: 5F:80:92:29:31:DE:32:27:05:71:D4:B8:2D:63:6D:8C:64:D3:12:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01ABB8E48AFE20574BF280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b954b221-b19d-3044-8ceb-7c9f2756ff51.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ab:b8:e4:8a:fe:20:57:4b:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=961d3636-5e2f-4cf6-a6ca-c4ed2a16e37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:46:cc:5b:2f:e5:ae:96:41:42:74:03:26:db: 19:05:62:88:46:52:b4:8b:b1:8d:ae:c4:ab:ae:60: af:98:eb:2b:44:f8:b7:d5:e1:b7:9c:19:20:65:04: 1a:ef:c1:b5:ae:33:7b:7c:b0:de:7e:df:1b:a7:89: 0f:07:3e:9f:27:17:ed:bd:cf:33:2d:10:1d:af:fc: 6f:0c:d8:be:0b:36:ef:60:92:73:98:ea:2b:ca:53: e7:06:cf:f2:e5:d0:b2:5b:35:d1:db:87:75:ba:cf: b1:8f:84:a7:54:61:60:74:47:af:49:58:30:97:75: 5b:c2:95:51:7f:80:1e:a1:b5:3c:e4:48:5c:19:2c: 71:00:f4:47:4e:df:db:ac:e0:3f:92:3e:00:c2:1c: 54:4b:06:0b:cf:10:3e:ca:eb:8d:41:db:26:90:a5: da:93:87:4e:8f:61:e2:84:60:db:85:69:08:4d:d5: ee:4b:35:63:bd:fd:08:f7:71:9f:bd:a3:6d:13:08: f2:52:11:ad:eb:e3:f1:65:c8:25:b0:74:7a:38:bc: 41:04:13:8c:70:e4:9b:21:25:07:18:aa:1b:ca:12: f5:a4:2c:fd:ce:34:2d:26:49:87:79:50:eb:91:7b: ec:6d:42:40:b9:61:f6:2b:a4:d8:36:00:90:9a:4d: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:92:29:31:DE:32:27:05:71:D4:B8:2D:63:6D:8C:64:D3:12:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b954b221-b19d-3044-8ceb-7c9f2756ff51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:3d:2b:27:4b:8a:65:4e:a9:28:5e:4d:5b:cd:7b:57:04:bf: 42:9f:4e:8d:3f:31:6a:2e:83:db:e8:cf:3f:31:07:d9:c0:02: c5:75:f1:f2:d0:13:f1:75:f1:ce:d6:bf:90:10:06:de:4d:7a: 7f:d3:7d:f7:d7:7a:49:e9:a1:ad:51:3a:1a:2e:14:c0:72:0d: 37:05:8b:7c:4f:ce:2a:bc:31:ab:43:67:6c:a2:8b:89:7c:b4: b6:ab:4d:e2:d4:19:d6:96:28:23:03:c1:3d:c8:c6:fd:b2:4a: de:a8:39:e4:ec:2b:2f:ab:c0:84:dc:00:d9:99:7f:8a:fa:b6: d3:9b:52:eb:51:41:f8:92:96:66:93:9a:31:4a:fd:9d:56:03: f2:5f:15:bf:ac:1e:40:20:1b:c9:a8:0a:ca:0a:8e:01:43:ef: d0:3e:40:08:61:0b:2d:d4:4b:6b:58:93:9a:7e:f9:6c:2e:2b: a3:fe:3b:84:73:41:5c:1f:10:78:e3:18:eb:a9:91:d0:e7:d4: 31:1a:35:13:62:ad:98:9a:43:94:6f:11:ef:b8:ec:b8:38:ab: ce:af:22:3d:90:8d:cc:3d:6c:c1:d5:6d:c8:e3:07:c5:45:d8: 7c:70:c6:31:18:30:8e:14:87:b9:88:1d:ea:90:8a:c9:40:91: 75:9b:cc:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAau45Ir+IFdL8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTYxZDM2MzYtNWUyZi00Y2Y2LWE2Y2EtYzRlZDJhMTZlMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEbMWy/lrpZBQnQDJtsZBWKIRlK0i7GNrsSr rmCvmOsrRPi31eG3nBkgZQQa78G1rjN7fLDeft8bp4kPBz6fJxftvc8zLRAdr/xv DNi+CzbvYJJzmOorylPnBs/y5dCyWzXR24d1us+xj4SnVGFgdEevSVgwl3VbwpVR f4AeobU85EhcGSxxAPRHTt/brOA/kj4AwhxUSwYLzxA+yuuNQdsmkKXak4dOj2Hi hGDbhWkITdXuSzVjvf0I93GfvaNtEwjyUhGt6+PxZcglsHR6OLxBBBOMcOSbISUH GKobyhL1pCz9zjQtJkmHeVDrkXvsbUJAuWH2K6TYNgCQmk343QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+Akikx3jInBXHUuC1jbYxk0xIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjk1NGIyMjEtYjE5ZC0z MDQ0LThjZWItN2M5ZjI3NTZmZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk9KydLimVOqSheTVvNe1cEv0KfTo0/MWoug9vozz8xB9nAAsV18fLQ E/F18c7Wv5AQBt5Nen/TfffXeknpoa1ROhouFMByDTcFi3xPziq8MatDZ2yii4l8 tLarTeLUGdaWKCMDwT3Ixv2ySt6oOeTsKy+rwITcANmZf4r6ttObUutRQfiSlmaT mjFK/Z1WA/JfFb+sHkAgG8moCsoKjgFD79A+QAhhCy3US2tYk5p++WwuK6P+O4Rz QVwfEHjjGOupkdDn1DEaNRNirZiaQ5RvEe+47Lg4q86vIj2Qjcw9bMHVbcjjB8VF 2HxwxjEYMI4Uh7mIHeqQislAkXWbzOU= -----END CERTIFICATE-----Generated at Thu Oct 16 01:46:55 2025 by rpki-client