$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3dc4e09-6367-3353-a9af-cf5967128237.roa File: d3dc4e09-6367-3353-a9af-cf5967128237.roa (raw, json) Hash identifier: 2SDXOc7nHTmdAqdnwR1Dy7ev7QbGk49nr2fnrJ20GZQ= Subject key identifier: 4D:EE:F7:1E:DF:0C:92:B3:AA:C6:C9:DF:E8:DD:B8:23:B1:B0:B5:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206721BE7A74C9C3334ADD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3dc4e09-6367-3353-a9af-cf5967128237.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.193.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:21:be:7a:74:c9:c3:33:4a:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=143de88e-758b-4964-be5b-b2c0d8f02636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:34:72:52:a6:64:ac:1d:8e:84:1f:ad:0e:d5: f9:f5:ca:a5:98:c7:c7:c0:32:f7:eb:e4:b2:59:ae: 3b:89:f1:94:10:1f:d6:fa:5c:df:8d:0f:ff:d2:e1: 7e:eb:38:a6:62:9f:8e:ed:f3:a7:55:f7:df:c0:b8: 79:82:f8:42:40:37:69:4e:c5:74:f3:62:50:94:3e: 3a:f0:a8:b4:99:ca:bc:9c:fd:a7:c6:85:c1:2d:25: cd:04:d0:cc:dc:11:eb:09:28:49:67:a1:31:4c:a6: 40:a5:3a:84:3e:d6:06:78:75:fc:31:36:98:d7:7c: 3c:69:5a:83:47:af:14:eb:db:70:11:0f:93:4d:8e: 53:2a:97:c1:fa:82:2f:18:05:54:4b:f9:c9:c5:b5: 0c:31:9b:5c:7a:02:81:c3:91:69:32:df:1a:85:39: 28:5f:62:32:73:c6:ff:c2:03:15:e4:26:26:cc:10: 9d:e5:07:ae:2a:8b:ce:6c:49:be:60:e6:3d:73:95: 02:e4:5e:d6:5c:8e:76:a1:8c:a7:1b:6e:13:75:f4: 17:12:23:a1:7b:9b:54:69:57:69:4d:b5:9b:39:bc: f5:69:9c:83:a2:ce:dd:db:99:f0:4e:1b:64:dd:cf: 6b:33:f5:19:74:90:5d:72:cb:9f:2d:15:26:71:31: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EE:F7:1E:DF:0C:92:B3:AA:C6:C9:DF:E8:DD:B8:23:B1:B0:B5:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3dc4e09-6367-3353-a9af-cf5967128237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:cd:b7:aa:21:7f:a6:71:38:21:56:a5:74:47:73:39:1f:be: 14:ae:75:06:69:a9:46:0e:82:f5:8f:8b:ac:5a:e4:f5:80:ae: cc:07:11:b2:17:53:b7:7d:bd:06:80:37:6f:6f:cd:07:c9:8c: 3c:b2:84:1f:c0:38:92:97:f0:64:37:2d:fb:11:69:63:38:9b: c6:1d:29:d3:19:ed:df:59:aa:0b:0f:4e:b3:60:a0:bf:c4:d4: 5e:00:e0:a8:97:bb:18:91:27:f3:48:b8:a0:2e:cb:8a:55:69: 6b:a2:b1:7a:5b:3a:3d:36:57:bc:91:6a:b3:39:3a:80:51:fc: 3a:a3:48:3a:7b:0a:e7:1e:93:64:c8:93:49:39:cc:a0:ea:27: 70:71:e6:f5:df:f8:1e:bb:54:64:f0:85:8c:b2:11:ee:5d:67: aa:2b:0e:70:63:28:02:90:4c:60:d8:d2:12:2b:83:d2:dc:2a: 4d:12:8d:0c:52:a4:f4:78:bb:45:20:63:d1:0f:31:0b:73:22: c2:19:4a:86:cc:bd:e0:b8:c0:97:33:dc:a1:2b:db:93:8f:d1: 33:96:80:4e:db:34:7d:06:8d:9f:4f:e1:af:71:89:c3:48:80: b7:5e:9f:aa:83:b0:04:4c:1a:af:57:3d:00:ee:97:bc:2c:2d: 2b:fb:b4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZyG+enTJwzNK3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MTQzZGU4OGUtNzU4Yi00OTY0LWJlNWItYjJjMGQ4ZjAyNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizRyUqZkrB2OhB+tDtX59cqlmMfHwDL36+Sy Wa47ifGUEB/W+lzfjQ//0uF+6zimYp+O7fOnVfffwLh5gvhCQDdpTsV082JQlD46 8Ki0mcq8nP2nxoXBLSXNBNDM3BHrCShJZ6ExTKZApTqEPtYGeHX8MTaY13w8aVqD R68U69twEQ+TTY5TKpfB+oIvGAVUS/nJxbUMMZtcegKBw5FpMt8ahTkoX2Iyc8b/ wgMV5CYmzBCd5QeuKovObEm+YOY9c5UC5F7WXI52oYynG24TdfQXEiOhe5tUaVdp TbWbObz1aZyDos7d25nwThtk3c9rM/UZdJBdcsufLRUmcTFuhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3u9x7fDJKzqsbJ3+jduCOxsLWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNkYzRlMDktNjM2Ny0z MzUzLWE5YWYtY2Y1OTY3MTI4MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPNt6ohf6ZxOCFWpXRHczkfvhSudQZpqUYOgvWPi6xa5PWArswHEbIX U7d9vQaAN29vzQfJjDyyhB/AOJKX8GQ3LfsRaWM4m8YdKdMZ7d9ZqgsPTrNgoL/E 1F4A4KiXuxiRJ/NIuKAuy4pVaWuisXpbOj02V7yRarM5OoBR/DqjSDp7Cucek2TI k0k5zKDqJ3Bx5vXf+B67VGTwhYyyEe5dZ6orDnBjKAKQTGDY0hIrg9LcKk0SjQxS pPR4u0UgY9EPMQtzIsIZSobMveC4wJcz3KEr25OP0TOWgE7bNH0GjZ9P4a9xicNI gLden6qDsARMGq9XPQDul7wsLSv7tGQ= -----END CERTIFICATE-----Generated at Thu Oct 16 01:58:01 2025 by rpki-client