$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba5355af-d4c7-38e8-8986-7a27224e1b8c.roa File: ba5355af-d4c7-38e8-8986-7a27224e1b8c.roa (raw, json) Hash identifier: jvgr7rmn76MTA/RsUxWlF1gnSx6GFewBmaG3PZiw57w= Subject key identifier: 19:83:FF:8D:E7:E4:67:C4:22:74:12:F9:F7:6C:3A:11:03:37:99:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01D13CBABE38DD0A46B300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba5355af-d4c7-38e8-8986-7a27224e1b8c.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.223.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:d1:3c:ba:be:38:dd:0a:46:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ed329908-6772-4a44-a101-f388cc5b625b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:8e:0a:de:b1:74:af:f3:ed:60:83:36:da: 51:bf:1e:86:ff:b5:4c:85:e5:a2:20:0e:ea:40:0f: 2a:7f:10:6e:c2:b5:b7:25:14:71:25:41:51:63:07: 74:c1:03:ac:d5:51:b4:cc:62:15:68:35:0c:5c:a5: dd:25:25:5e:1f:59:8c:04:a3:a7:5e:68:e1:00:ec: 4b:80:b1:ef:ee:19:c1:54:01:f0:a1:4b:55:e1:07: da:bf:6b:ba:d7:fb:a3:3d:c8:29:0b:73:e2:b4:91: d4:05:d4:f9:06:ac:54:9e:49:4a:07:49:8e:66:8b: f2:9e:a8:43:ee:8d:44:39:3c:08:e0:0f:e5:f1:93: ee:11:e1:25:37:19:28:07:37:1e:9c:e5:8e:6c:5e: 2c:fc:70:19:3f:40:6d:8b:53:bc:29:09:87:6e:b4: 69:9a:74:4e:8c:a8:a9:62:0f:87:2e:b7:94:2d:b8: b9:85:c5:f4:00:e8:3e:c9:2d:35:6d:1d:c5:0b:0f: 8e:9b:3c:c7:c8:2b:1d:29:6c:15:b1:7b:a0:e7:fd: 34:97:be:10:dc:2d:13:50:66:0a:93:89:64:98:bb: 63:61:28:b4:74:ce:77:1d:aa:55:18:f4:6a:ad:8f: a8:8b:65:dc:3d:b8:b1:dd:83:d9:2f:15:83:9f:98: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:FF:8D:E7:E4:67:C4:22:74:12:F9:F7:6C:3A:11:03:37:99:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba5355af-d4c7-38e8-8986-7a27224e1b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:63:32:e0:e4:a6:40:a9:01:18:0b:e1:b3:92:4b:e8:8f:48: 9c:fd:1a:af:9c:39:25:0e:69:35:4c:24:30:33:2b:4a:da:97: 54:f0:9f:22:7c:89:42:fe:aa:cc:de:1b:da:e6:df:1a:71:a2: 6b:99:9c:fd:d2:2b:db:60:81:d8:f4:af:6d:24:65:6d:91:87: ea:17:be:a6:0d:d0:3a:4c:d4:81:0e:ee:3e:9c:4c:cf:86:df: 14:15:c8:a8:a1:b5:72:da:18:11:0f:ca:c0:30:a4:a2:f8:61: 9a:7b:d8:fa:96:58:31:e0:dd:df:fc:38:95:16:d3:18:a5:20: e4:80:48:ae:66:70:ac:83:bd:80:35:14:cd:35:00:87:98:86: 87:72:e0:5a:ba:ff:ae:8e:c8:26:7f:ff:72:74:00:c8:10:ad: 3a:ad:61:c1:5c:93:37:f7:5d:74:0f:49:04:de:97:31:8a:b3: 56:70:33:eb:36:ce:b0:a2:fc:8d:7c:7e:5d:99:fc:56:a8:fc: 6a:7b:f6:8a:64:9a:27:b5:68:31:16:d4:43:0b:5d:ea:4b:69: a6:14:10:8f:96:a4:f9:a7:08:bb:f2:0e:90:85:a1:46:68:af: 05:03:ce:2b:25:ae:9a:32:35:da:13:02:10:76:ae:18:aa:e9: 6b:45:2f:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAdE8ur443QpGswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWQzMjk5MDgtNjc3Mi00YTQ0LWExMDEtZjM4OGNjNWI2MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmOOCt6xdK/z7WCDNtpRvx6G/7VMheWiIA7q QA8qfxBuwrW3JRRxJUFRYwd0wQOs1VG0zGIVaDUMXKXdJSVeH1mMBKOnXmjhAOxL gLHv7hnBVAHwoUtV4Qfav2u61/ujPcgpC3PitJHUBdT5BqxUnklKB0mOZovynqhD 7o1EOTwI4A/l8ZPuEeElNxkoBzcenOWObF4s/HAZP0Bti1O8KQmHbrRpmnROjKip Yg+HLreULbi5hcX0AOg+yS01bR3FCw+OmzzHyCsdKWwVsXug5/00l74Q3C0TUGYK k4lkmLtjYSi0dM53HapVGPRqrY+oi2XcPbix3YPZLxWDn5iwSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmD/43n5GfEInQS+fdsOhEDN5noMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE1MzU1YWYtZDRjNy0z OGU4LTg5ODYtN2EyNzIyNGUxYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBjMuDkpkCpARgL4bOSS+iPSJz9Gq+cOSUOaTVMJDAzK0ral1TwnyJ8 iUL+qszeG9rm3xpxomuZnP3SK9tggdj0r20kZW2Rh+oXvqYN0DpM1IEO7j6cTM+G 3xQVyKihtXLaGBEPysAwpKL4YZp72PqWWDHg3d/8OJUW0xilIOSASK5mcKyDvYA1 FM01AIeYhody4Fq6/66OyCZ//3J0AMgQrTqtYcFckzf3XXQPSQTelzGKs1ZwM+s2 zrCi/I18fl2Z/Fao/Gp79opkmie1aDEW1EMLXepLaaYUEI+WpPmnCLvyDpCFoUZo rwUDzislrpoyNdoTAhB2rhiq6WtFL4g= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:09 2025 by rpki-client