$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1b247dd-751c-329a-9d52-ef1d20dd0868.roa File: c1b247dd-751c-329a-9d52-ef1d20dd0868.roa (raw, json) Hash identifier: uZcdprK7Ogr89vaOpNolA8Fe3MNXqCXwcLbs4UPjAXI= Subject key identifier: 43:E8:EC:05:3A:14:A2:A9:84:F9:84:A8:32:2A:C2:6D:85:E5:B0:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A05E1AE27EE197D3A1C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1b247dd-751c-329a-9d52-ef1d20dd0868.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a0:5e:1a:e2:7e:e1:97:d3:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=1dfdd2ef-aedd-4249-ae79-a46e592c7fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:5c:03:93:ae:c8:e7:b5:f1:fe:14:19:ee: de:9a:91:d3:af:29:9a:78:d2:98:ec:89:a8:c3:ce: 2d:8a:9b:29:b9:c5:e8:24:fe:e5:be:63:63:64:0a: f0:0b:2b:d6:0f:21:00:c1:c0:5b:e1:30:0c:ac:bd: cc:3f:89:9d:4c:0a:62:cb:41:3b:06:6f:7b:c2:7a: 37:88:40:2f:1b:61:ba:4c:ad:8e:80:2b:55:69:3e: d9:6b:8e:22:b0:dd:2b:95:9d:2b:6f:1c:61:02:16: 5f:ac:5b:3d:f9:94:b6:8d:6c:e6:14:69:2c:62:fd: b5:dd:ac:fa:31:40:10:16:76:f8:9d:55:0d:a0:37: 84:c8:8b:bb:24:85:df:fa:b6:37:21:ee:d7:5f:0e: cc:57:af:68:1c:fa:47:ec:96:01:77:60:5c:47:44: bd:89:42:19:ff:5c:0f:30:15:34:30:15:12:f6:40: 50:be:fc:8d:7c:a7:6c:8b:1a:a0:13:de:ec:ea:30: e9:9b:df:2e:f5:ec:e7:d2:71:05:8c:71:d9:6b:9c: 91:75:93:9f:23:1f:59:b6:d3:fc:a3:29:d6:06:dc: 8d:ca:3d:6a:20:d7:d9:f3:20:34:92:4f:f9:ee:6f: c8:eb:22:57:86:ad:a6:34:9a:be:62:aa:c5:29:93: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E8:EC:05:3A:14:A2:A9:84:F9:84:A8:32:2A:C2:6D:85:E5:B0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1b247dd-751c-329a-9d52-ef1d20dd0868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:43:d4:5b:04:1c:83:3a:b2:e9:4b:23:1d:b2:3e:23:9e:22: 26:5f:93:e7:d7:10:10:a5:1f:5a:85:20:84:4f:44:22:13:90: 96:ab:82:03:34:79:aa:f4:f2:42:55:01:d3:d1:b2:74:8f:9d: 7c:ae:98:0c:9a:42:e8:e2:15:26:44:8b:e0:69:2b:3f:72:03: 2a:6e:15:f1:9a:ad:ff:ed:5e:6d:28:1a:5d:ae:5b:af:e8:24: e1:c5:99:4f:1b:a7:bb:72:ab:c7:86:55:e3:f5:61:f6:56:96: f5:7f:d6:72:9d:a8:79:a1:80:4e:80:a4:0e:18:29:9a:12:70: 4c:59:2b:69:7a:b7:9a:d9:78:9b:e0:1f:5b:df:e3:66:51:77: ad:47:7a:b2:ed:fb:6d:98:75:68:c2:b1:10:6a:ae:07:f2:7c: 43:4e:40:75:60:07:54:e4:1f:87:83:55:46:d3:b7:cb:93:c6: 56:80:12:32:42:bf:af:69:37:34:a7:e2:83:7a:75:bb:f7:9c: 1a:21:47:de:9d:d2:20:90:1d:1f:f4:6c:2d:65:27:88:dd:f6: bd:ff:46:7a:5a:ef:4e:4f:d3:ee:53:1d:07:e3:f5:9d:08:4d: 3e:1d:45:f6:a2:25:95:18:6a:59:3d:e3:40:a4:ad:84:d1:6a: 7a:31:8d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaBeGuJ+4ZfTocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MWRmZGQyZWYtYWVkZC00MjQ5LWFlNzktYTQ2ZTU5MmM3ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp1cA5OuyOe18f4UGe7empHTrymaeNKY7Imo w84tipspucXoJP7lvmNjZArwCyvWDyEAwcBb4TAMrL3MP4mdTApiy0E7Bm97wno3 iEAvG2G6TK2OgCtVaT7Za44isN0rlZ0rbxxhAhZfrFs9+ZS2jWzmFGksYv213az6 MUAQFnb4nVUNoDeEyIu7JIXf+rY3Ie7XXw7MV69oHPpH7JYBd2BcR0S9iUIZ/1wP MBU0MBUS9kBQvvyNfKdsixqgE97s6jDpm98u9ezn0nEFjHHZa5yRdZOfIx9ZttP8 oynWBtyNyj1qINfZ8yA0kk/57m/I6yJXhq2mNJq+YqrFKZM6VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPo7AU6FKKphPmEqDIqwm2F5bDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzFiMjQ3ZGQtNzUxYy0z MjlhLTlkNTItZWYxZDIwZGQwODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMlxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9D1FsEHIM6sulLIx2yPiOeIiZfk+fXEBClH1qFIIRPRCITkJarggM0 ear08kJVAdPRsnSPnXyumAyaQujiFSZEi+BpKz9yAypuFfGarf/tXm0oGl2uW6/o JOHFmU8bp7tyq8eGVeP1YfZWlvV/1nKdqHmhgE6ApA4YKZoScExZK2l6t5rZeJvg H1vf42ZRd61HerLt+22YdWjCsRBqrgfyfENOQHVgB1TkH4eDVUbTt8uTxlaAEjJC v69pNzSn4oN6dbv3nBohR96d0iCQHR/0bC1lJ4jd9r3/Rnpa705P0+5THQfj9Z0I TT4dRfaiJZUYalk940CkrYTRanoxjTc= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:15 2025 by rpki-client