$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1db2645-1cf0-39e4-b86a-cf39885694ff.roa File: d1db2645-1cf0-39e4-b86a-cf39885694ff.roa (raw, json) Hash identifier: jkpTSj7RZxRIX0w0YQAPez5E9X6G2/KdadL7Jh87iq4= Subject key identifier: A2:00:D8:37:0C:53:54:CF:AB:12:94:76:B9:F4:F7:61:0F:3C:B5:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B9490CAF8ECE10E1B680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1db2645-1cf0-39e4-b86a-cf39885694ff.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.212.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b9:49:0c:af:8e:ce:10:e1:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=aaeb2981-565b-49c2-93bd-bafd5b3755c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:f3:8d:f5:68:7f:fc:04:64:a7:72:08:52: 00:c3:b5:9c:d8:9b:dd:c3:d0:64:07:76:6d:3a:ca: 36:a8:1e:18:cb:42:a3:06:4d:39:94:12:71:1e:d7: 2d:df:c6:d1:9d:05:77:d7:7f:a8:df:de:42:c1:f2: 5f:d7:39:7d:6b:b6:41:3b:95:86:d8:ad:dd:26:11: 39:29:4a:23:42:b4:de:ea:cc:78:b7:f1:36:1f:f5: 4d:c9:50:b2:1a:26:b4:4f:67:c8:16:7b:74:08:49: 87:a4:c5:79:31:6d:58:41:61:c3:db:aa:78:e5:6d: 12:e5:c8:cd:2d:fb:2e:50:1e:45:bf:9c:fc:a3:a9: 3c:bf:70:2d:13:36:30:98:18:b3:45:58:87:af:dc: 50:3d:61:cd:d9:cd:14:d4:df:85:e9:bf:3f:8a:18: bd:96:8c:c6:f2:00:97:cc:74:aa:80:36:af:36:c6: 35:8b:3d:8a:ee:f2:28:55:0a:dc:83:cd:2a:c0:10: 64:b3:8f:d4:60:66:a4:26:28:91:5f:60:a2:af:be: bb:87:02:1a:41:fb:0d:3d:aa:27:15:05:0e:a0:f2: fd:4a:71:8b:31:81:55:08:9a:dd:de:7c:6b:98:c8: a4:38:33:7b:7b:bc:75:11:92:44:bf:cc:7a:95:bb: bd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:D8:37:0C:53:54:CF:AB:12:94:76:B9:F4:F7:61:0F:3C:B5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1db2645-1cf0-39e4-b86a-cf39885694ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:46:b8:8e:90:c5:bc:e4:4f:47:34:00:e4:f8:17:7a:8e:18: 63:66:0d:38:33:0c:82:b2:70:00:10:ad:e6:d5:f2:29:80:16: fe:62:6b:c9:0e:a9:be:fe:fb:d2:6e:e9:c1:cb:3c:e2:9b:99: 82:18:78:38:7a:43:4d:4e:d6:a7:15:26:28:b4:61:f1:81:1e: 5a:48:74:9a:e4:db:83:d6:dc:fe:dd:de:da:30:b1:77:ec:77: 8e:36:d3:32:2b:19:7a:9e:66:7e:e1:2f:ca:8e:a1:40:f7:e0: f5:79:3f:d0:b8:cc:15:1a:cf:e9:7e:27:41:9e:cd:eb:4d:ea: 17:5a:0a:12:3b:8f:5a:fd:89:93:89:f0:c6:e0:19:4f:1f:db: 7b:2e:63:64:53:32:48:91:30:77:19:1f:01:d0:3e:8b:ee:1f: 10:2f:49:7c:2d:1e:a8:90:f0:16:56:ba:6a:7b:2f:cd:27:8a: ee:0d:90:18:a7:3d:72:27:82:f8:09:a0:fb:ab:5a:66:aa:03: 35:2c:f1:08:6b:72:fa:fb:5b:63:f5:27:61:f4:82:22:01:bf: 9a:15:d4:97:7c:10:2e:cd:21:eb:f6:5e:2c:45:ba:02:b7:00: e5:b4:f0:dc:94:d9:e1:aa:b0:51:db:48:54:5d:d0:e0:e7:14: 8c:91:d8:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAblJDK+OzhDhtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWFlYjI5ODEtNTY1Yi00OWMyLTkzYmQtYmFmZDViMzc1NWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijjzjfVof/wEZKdyCFIAw7Wc2Jvdw9BkB3Zt Oso2qB4Yy0KjBk05lBJxHtct38bRnQV313+o395CwfJf1zl9a7ZBO5WG2K3dJhE5 KUojQrTe6sx4t/E2H/VNyVCyGia0T2fIFnt0CEmHpMV5MW1YQWHD26p45W0S5cjN LfsuUB5Fv5z8o6k8v3AtEzYwmBizRViHr9xQPWHN2c0U1N+F6b8/ihi9lozG8gCX zHSqgDavNsY1iz2K7vIoVQrcg80qwBBks4/UYGakJiiRX2Cir767hwIaQfsNPaon FQUOoPL9SnGLMYFVCJrd3nxrmMikODN7e7x1EZJEv8x6lbu9iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIA2DcMU1TPqxKUdrn092EPPLUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDFkYjI2NDUtMWNmMC0z OWU0LWI4NmEtY2YzOTg4NTY5NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApGuI6QxbzkT0c0AOT4F3qOGGNmDTgzDIKycAAQrebV8imAFv5ia8kO qb7++9Ju6cHLPOKbmYIYeDh6Q01O1qcVJii0YfGBHlpIdJrk24PW3P7d3towsXfs d4420zIrGXqeZn7hL8qOoUD34PV5P9C4zBUaz+l+J0GezetN6hdaChI7j1r9iZOJ 8MbgGU8f23suY2RTMkiRMHcZHwHQPovuHxAvSXwtHqiQ8BZWump7L80niu4NkBin PXIngvgJoPurWmaqAzUs8Qhrcvr7W2P1J2H0giIBv5oV1Jd8EC7NIev2XixFugK3 AOW08NyU2eGqsFHbSFRd0ODnFIyR2Aw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:13 2025 by rpki-client