$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5757d04-a9fd-3758-a76e-d91524a2f846.roa File: d5757d04-a9fd-3758-a76e-d91524a2f846.roa (raw, json) Hash identifier: 9ZKtnwrIr4O8SXK3quIse8y6E3nriUkLpmBXQbvJnD4= Subject key identifier: 3B:07:CE:34:8C:17:6D:73:E8:79:E1:EC:71:C8:3C:F0:37:48:05:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B8D7C203C0EE24FB2080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5757d04-a9fd-3758-a76e-d91524a2f846.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.212.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b8:d7:c2:03:c0:ee:24:fb:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=2082ff4a-6653-41ea-9b48-1c04a430242c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:36:e0:0a:4a:8b:96:33:78:73:b6:da:d9:1a: 64:5e:33:0b:a4:b2:8b:20:6e:92:8b:2b:0c:cf:be: 23:7c:8c:6c:d9:58:43:d7:0e:2d:41:b0:c2:40:88: 3d:45:a3:36:8d:c8:9c:82:92:ca:64:6c:58:14:2d: 15:dd:fb:37:bb:72:2f:8f:0f:55:f5:a2:05:81:ca: a2:66:a6:e3:4f:c1:be:87:ec:60:c9:e1:ca:ce:71: 35:c6:5a:1a:75:d5:81:a5:1e:6a:a1:c8:ff:b6:fa: 43:5f:23:02:da:ec:0f:28:16:d8:1f:e3:72:d1:2d: 23:d9:13:9c:b1:7b:0c:bd:3b:2c:f1:1b:85:e1:29: 3c:6c:49:ef:c6:5a:84:0c:d0:35:b6:f1:26:f0:a4: 6c:f5:8f:0d:09:11:3e:cd:85:8e:48:b6:e7:b9:71: 82:d5:71:8c:be:12:0a:3d:c1:fe:cf:1c:0b:e0:10: 6a:a9:da:9d:71:cd:50:7b:d0:de:03:2a:93:e6:0c: c4:a2:ea:71:eb:6b:e5:8d:15:10:cd:9e:05:b8:e4: a7:d9:f8:c6:30:79:21:74:d2:2c:e7:cf:f1:5c:9d: f6:6e:04:c1:5e:97:14:2b:2d:fc:bb:b2:06:3d:0d: 28:6c:db:7a:be:33:61:71:3f:5e:5b:b0:d1:51:a7: 01:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:07:CE:34:8C:17:6D:73:E8:79:E1:EC:71:C8:3C:F0:37:48:05:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5757d04-a9fd-3758-a76e-d91524a2f846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:14:34:98:10:3f:f9:97:8e:de:79:b8:bb:70:b0:3e:ad:f7: 39:8d:fc:1e:63:09:7e:c6:70:86:95:86:13:6a:3d:05:98:36: 75:53:ee:6e:54:b1:78:ab:94:23:b3:20:ba:9c:4b:4b:21:96: 2f:4e:8f:ec:5b:d2:73:f3:4f:1a:86:7e:c5:87:0c:52:7e:16: 59:52:a5:a9:aa:22:fb:c4:69:de:84:0a:32:5a:e5:89:f6:6e: 2c:d4:b5:e2:c8:14:e8:c1:37:ed:1a:76:c3:8e:51:55:60:df: b4:7e:e8:a8:e8:4f:f6:f0:3c:0f:93:f0:4d:d8:79:b9:8d:cc: bd:da:40:64:02:58:de:fd:60:9f:c3:93:1d:71:6a:00:70:dd: ac:f7:21:44:62:11:30:bb:d3:e6:bb:64:6a:fe:ac:f8:37:c3: 46:c7:15:e9:4f:e7:3f:75:2f:1a:9d:37:50:04:16:ae:f4:4f: 54:c1:d3:83:72:77:82:68:3a:11:04:78:d2:90:5e:65:54:36: ed:cd:dc:24:03:5c:e2:f6:aa:a3:03:86:49:33:07:66:26:1c: 6d:da:3f:a0:1a:bc:4c:04:97:3e:b0:5f:52:39:5d:b5:4b:e5: 54:46:36:77:29:0e:a9:d7:b7:39:2a:14:8d:e5:ab:cf:7a:7d: 3b:57:9e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbjXwgPA7iT7IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MjA4MmZmNGEtNjY1My00MWVhLTliNDgtMWMwNGE0MzAyNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijbgCkqLljN4c7ba2RpkXjMLpLKLIG6SiysM z74jfIxs2VhD1w4tQbDCQIg9RaM2jcicgpLKZGxYFC0V3fs3u3Ivjw9V9aIFgcqi ZqbjT8G+h+xgyeHKznE1xloaddWBpR5qocj/tvpDXyMC2uwPKBbYH+Ny0S0j2ROc sXsMvTss8RuF4Sk8bEnvxlqEDNA1tvEm8KRs9Y8NCRE+zYWOSLbnuXGC1XGMvhIK PcH+zxwL4BBqqdqdcc1Qe9DeAyqT5gzEoupx62vljRUQzZ4FuOSn2fjGMHkhdNIs 58/xXJ32bgTBXpcUKy38u7IGPQ0obNt6vjNhcT9eW7DRUacBxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsHzjSMF21z6Hnh7HHIPPA3SAVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDU3NTdkMDQtYTlmZC0z NzU4LWE3NmUtZDkxNTI0YTJmODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoUNJgQP/mXjt55uLtwsD6t9zmN/B5jCX7GcIaVhhNqPQWYNnVT7m5U sXirlCOzILqcS0shli9Oj+xb0nPzTxqGfsWHDFJ+FllSpamqIvvEad6ECjJa5Yn2 bizUteLIFOjBN+0adsOOUVVg37R+6KjoT/bwPA+T8E3YebmNzL3aQGQCWN79YJ/D kx1xagBw3az3IURiETC70+a7ZGr+rPg3w0bHFelP5z91LxqdN1AEFq70T1TB04Ny d4JoOhEEeNKQXmVUNu3N3CQDXOL2qqMDhkkzB2YmHG3aP6AavEwElz6wX1I5XbVL 5VRGNncpDqnXtzkqFI3lq896fTtXnms= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:11 2025 by rpki-client