$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2e47c2c-b750-375d-8493-78cd03008264.roa File: d2e47c2c-b750-375d-8493-78cd03008264.roa (raw, json) Hash identifier: 7Jnrb5o9TNsRt3BA6F1C5BD4RF327dmC/sLW6l+Ro2k= Subject key identifier: 75:BC:F5:14:3D:55:FE:33:EC:8F:DB:88:24:47:1F:13:D1:13:02:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2067272CF46A6A11C534F600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2e47c2c-b750-375d-8493-78cd03008264.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.207.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:27:2c:f4:6a:6a:11:c5:34:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=ba6551c8-bb4e-48ef-baef-d073daab849f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:55:5c:18:e5:fb:86:5d:e2:31:62:01:6c:fd: c3:d5:71:54:21:c7:e8:4c:8b:c3:f5:3c:5f:95:bf: d8:b5:c6:fb:9a:af:c6:5b:52:56:1f:f4:45:f4:a0: 5d:e1:c8:45:90:6e:75:1b:6a:44:c0:b2:8e:97:18: 12:2b:81:d4:52:f3:8c:4a:ed:77:45:3a:21:72:8a: 28:0c:d3:2c:2b:98:ed:da:a1:17:ef:aa:d3:48:43: 6f:d1:f4:74:36:50:d6:b2:71:f6:07:c3:d3:03:45: af:58:97:09:f2:93:e8:9b:0e:95:d3:1b:55:88:b7: e3:53:24:a8:f3:51:99:94:ec:85:e2:a4:82:56:60: 53:c5:2f:8f:1d:42:29:f0:05:e3:52:e6:d8:ac:15: df:d2:d7:7e:cd:91:69:34:aa:e0:fd:ab:7e:a4:03: e0:fa:80:2d:c2:05:a9:da:f3:53:45:c4:f3:6c:22: d0:23:41:6c:e0:93:e6:ea:6d:a4:20:a3:35:ab:d6: 3e:94:c9:85:8b:05:8a:80:d5:ba:da:ca:12:5a:67: 5f:75:6f:31:e2:14:86:64:ba:56:82:1b:dd:f7:ba: 9f:f6:d9:19:00:f0:7a:89:53:3a:60:fc:3d:78:66: de:0f:17:80:b1:a5:3d:2b:1e:3b:10:35:36:6a:68: 6c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BC:F5:14:3D:55:FE:33:EC:8F:DB:88:24:47:1F:13:D1:13:02:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2e47c2c-b750-375d-8493-78cd03008264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.207.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c9:a7:1b:d7:f6:de:df:a0:b6:ce:c4:93:87:66:2f:ad:13: fe:dc:d2:a1:24:ca:1f:5d:de:90:f8:69:6a:84:00:02:ff:ff: b5:06:15:fa:aa:d3:40:54:e0:2f:2e:17:fe:49:bc:3c:8d:ec: 99:eb:81:5c:40:32:e0:c2:0d:41:7b:02:2b:50:4b:75:66:6d: 3d:15:c4:62:ec:79:55:63:45:34:c1:70:d2:60:7d:03:53:26: a9:95:22:3d:54:6e:98:8b:17:40:5b:50:66:30:5e:33:55:12: b5:ef:47:80:33:57:70:f2:c7:05:76:ae:88:26:3b:ff:4c:13: 4e:9e:2a:e8:b8:aa:e0:20:89:60:e3:f8:9a:1e:7e:6f:6a:30: 61:12:01:b9:2e:0b:9e:ed:63:f7:b0:aa:c6:37:58:f2:d8:58: 18:07:67:e0:24:9e:41:79:fd:86:b3:c1:51:fc:e3:ea:c6:fe: 49:fa:65:b6:17:5c:98:a8:ba:4b:47:cc:61:0f:5c:fa:ab:cc: 83:08:9d:3c:57:ca:b7:c0:7e:b7:fa:bd:db:b1:a2:72:aa:34: 62:79:d1:1a:dd:c2:12:c0:a5:a3:86:56:12:db:6f:30:84:93: 30:a3:9c:28:fb:46:5b:51:fb:a1:55:fa:9b:09:df:32:f7:47: c7:fc:50:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZycs9GpqEcU09gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YmE2NTUxYzgtYmI0ZS00OGVmLWJhZWYtZDA3M2RhYWI4NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVVcGOX7hl3iMWIBbP3D1XFUIcfoTIvD9Txf lb/Ytcb7mq/GW1JWH/RF9KBd4chFkG51G2pEwLKOlxgSK4HUUvOMSu13RTohcooo DNMsK5jt2qEX76rTSENv0fR0NlDWsnH2B8PTA0WvWJcJ8pPomw6V0xtViLfjUySo 81GZlOyF4qSCVmBTxS+PHUIp8AXjUubYrBXf0td+zZFpNKrg/at+pAPg+oAtwgWp 2vNTRcTzbCLQI0Fs4JPm6m2kIKM1q9Y+lMmFiwWKgNW62soSWmdfdW8x4hSGZLpW ghvd97qf9tkZAPB6iVM6YPw9eGbeDxeAsaU9Kx47EDU2amhs7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW89RQ9Vf4z7I/biCRHHxPREwLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDJlNDdjMmMtYjc1MC0z NzVkLTg0OTMtNzhjZDAzMDA4MjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSM+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDJpxvX9t7foLbOxJOHZi+tE/7c0qEkyh9d3pD4aWqEAAL//7UGFfqq 00BU4C8uF/5JvDyN7JnrgVxAMuDCDUF7AitQS3VmbT0VxGLseVVjRTTBcNJgfQNT JqmVIj1UbpiLF0BbUGYwXjNVErXvR4AzV3DyxwV2rogmO/9ME06eKui4quAgiWDj +Joefm9qMGESAbkuC57tY/ewqsY3WPLYWBgHZ+AknkF5/YazwVH84+rG/kn6ZbYX XJiouktHzGEPXPqrzIMInTxXyrfAfrf6vduxonKqNGJ50RrdwhLApaOGVhLbbzCE kzCjnCj7RltR+6FV+psJ3zL3R8f8UJU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:38:50 2025 by rpki-client