$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8962e0a-3ef4-3a94-92a8-8c638ce19bc6.roa File: c8962e0a-3ef4-3a94-92a8-8c638ce19bc6.roa (raw, json) Hash identifier: TBa2GAthmnUZjcdrETTxtbuzLP+d6T55pjc1lrYKE2s= Subject key identifier: 88:FB:93:8B:66:1C:3F:46:26:D3:9E:0A:DC:28:0F:DD:DD:AA:02:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A4534C364E49DA31DB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8962e0a-3ef4-3a94-92a8-8c638ce19bc6.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a4:53:4c:36:4e:49:da:31:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f0e71c70-6f80-4530-9ffd-8f72cd67a107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:d8:69:66:0f:65:64:cf:4f:92:e2:36:63: d0:9c:65:a8:5a:46:94:a8:70:66:f9:9c:02:b8:b1: 92:0c:ca:53:34:f2:1d:a0:1c:f0:20:8e:df:58:fe: 6d:ba:4f:d3:33:0a:40:4d:95:4d:04:28:a0:26:0d: bf:d3:14:be:49:90:b5:21:07:35:7f:0e:62:7d:c6: e3:e0:0d:3e:f8:d6:20:e7:80:44:08:01:aa:c1:f6: 6d:cc:81:93:37:dc:d7:59:9f:75:59:bc:0b:50:2e: 00:eb:01:38:fe:c6:61:c1:03:c9:8b:c2:f5:cc:a2: a9:de:93:2f:8e:d4:c9:9f:fb:f2:40:15:35:01:7b: 26:7f:c5:fe:db:d6:7c:89:52:37:63:f8:fe:85:49: 33:9a:17:77:c4:2c:76:04:02:d8:d3:aa:e9:e9:20: 79:c3:71:ba:d5:cd:c6:18:50:4b:65:77:c3:85:eb: 53:57:09:e0:8f:df:f7:b1:72:32:83:d6:f7:4e:67: 3f:f2:06:e9:88:74:0c:f2:01:2c:bb:b0:31:dc:e8: 1e:16:ea:8e:1c:92:54:3c:ea:20:67:08:89:64:1b: f6:a2:88:27:9c:e7:c3:3e:38:d9:a4:a9:5c:34:97: b3:e2:1d:16:d3:08:45:ed:b5:52:fb:4a:e1:f4:ed: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FB:93:8B:66:1C:3F:46:26:D3:9E:0A:DC:28:0F:DD:DD:AA:02:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8962e0a-3ef4-3a94-92a8-8c638ce19bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ce:2f:d5:29:70:b9:3c:57:0d:af:11:60:27:da:40:97:9e: ec:da:11:f2:99:95:90:8d:36:74:38:7d:2e:d9:88:0d:78:4c: 2d:b9:e6:eb:ef:34:fc:43:7e:d3:63:50:d6:2b:d5:81:71:1d: 92:dd:01:92:5e:04:4b:f1:81:e7:35:97:73:a0:f2:cd:44:1d: 76:c9:a8:39:31:84:3e:b2:f6:82:8f:5e:5c:25:ba:50:3b:e1: 22:9b:f7:8a:ec:54:cb:78:e9:09:a0:b2:3b:52:2e:ca:ce:b3: 90:4a:45:7b:f7:b7:a7:07:99:2c:c3:df:b8:31:be:22:2d:b6: 32:87:9c:03:fd:96:7c:5f:72:58:01:73:2b:07:bd:d6:41:f6: ff:06:1b:ce:57:c8:77:d0:9f:d6:6b:ae:f1:df:fe:bc:2f:22: 97:6f:48:70:35:22:6e:85:5c:b4:80:c3:79:a7:62:ad:48:b1: 28:43:6f:b7:57:be:48:75:67:b2:e4:68:70:54:7d:f4:7f:d7: e8:17:ed:ef:53:f8:b9:44:f6:7c:80:18:fb:c7:8b:40:16:bf: a8:20:c7:88:c0:0c:4d:9f:23:4e:35:35:c8:98:51:1d:8d:08: 64:5b:48:ce:cd:d2:fd:a3:c8:5d:b9:7a:2d:c3:42:7f:0d:21: 52:4c:29:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaRTTDZOSdox24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjBlNzFjNzAtNmY4MC00NTMwLTlmZmQtOGY3MmNkNjdhMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln3YaWYPZWTPT5LiNmPQnGWoWkaUqHBm+ZwC uLGSDMpTNPIdoBzwII7fWP5tuk/TMwpATZVNBCigJg2/0xS+SZC1IQc1fw5ifcbj 4A0++NYg54BECAGqwfZtzIGTN9zXWZ91WbwLUC4A6wE4/sZhwQPJi8L1zKKp3pMv jtTJn/vyQBU1AXsmf8X+29Z8iVI3Y/j+hUkzmhd3xCx2BALY06rp6SB5w3G61c3G GFBLZXfDhetTVwngj9/3sXIyg9b3Tmc/8gbpiHQM8gEsu7Ax3OgeFuqOHJJUPOog ZwiJZBv2oognnOfDPjjZpKlcNJez4h0W0whF7bVS+0rh9O1HywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj7k4tmHD9GJtOeCtwoD93dqgJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzg5NjJlMGEtM2VmNC0z YTk0LTkyYTgtOGM2MzhjZTE5YmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjOL9UpcLk8Vw2vEWAn2kCXnuzaEfKZlZCNNnQ4fS7ZiA14TC255uvv NPxDftNjUNYr1YFxHZLdAZJeBEvxgec1l3Og8s1EHXbJqDkxhD6y9oKPXlwlulA7 4SKb94rsVMt46QmgsjtSLsrOs5BKRXv3t6cHmSzD37gxviIttjKHnAP9lnxfclgB cysHvdZB9v8GG85XyHfQn9ZrrvHf/rwvIpdvSHA1Im6FXLSAw3mnYq1IsShDb7dX vkh1Z7LkaHBUffR/1+gX7e9T+LlE9nyAGPvHi0AWv6ggx4jADE2fI041NciYUR2N CGRbSM7N0v2jyF25ei3DQn8NIVJMKe4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:27:11 2025 by rpki-client