$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6248084-b68e-37e7-a536-2d3812df93f8.roa File: d6248084-b68e-37e7-a536-2d3812df93f8.roa (raw, json) Hash identifier: JPFSgUbEiHtDBxUf1kASkSK6FFVJi8JOhstJfrHSfo0= Subject key identifier: F1:0A:06:9A:A2:F1:F9:14:64:A5:C2:15:98:15:FD:3E:56:8B:BB:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BA31080B857AAC6291F0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6248084-b68e-37e7-a536-2d3812df93f8.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.212.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ba:31:08:0b:85:7a:ac:62:91:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=fde6717d-1253-41b7-8172-43cafe02e7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:61:da:25:31:5a:0c:4f:07:f9:9b:41:1c: b9:10:12:01:37:98:e3:ff:cc:a7:e0:ea:26:62:3a: 75:55:da:38:f1:d4:8b:27:fb:40:d3:93:42:3a:55: 9f:2d:e7:3c:f5:50:61:e0:20:2f:bb:29:f8:76:77: 2f:ad:ae:02:5b:0f:a2:82:46:a8:5a:32:ab:cf:b6: 2c:a8:43:52:a4:a2:c9:69:56:8b:d7:63:03:01:67: 23:47:ff:33:24:8b:d0:72:d1:7e:dd:95:31:87:82: 33:3c:ce:70:7d:9f:a0:9e:57:7b:b8:48:de:bd:f7: 5f:1d:4a:56:5d:13:94:09:23:b5:e2:6e:57:2b:62: c6:c8:9c:48:29:cd:29:0c:6f:6c:e9:96:8e:02:5d: da:7d:bb:69:ed:a4:92:63:52:60:f0:c5:9a:cd:5b: 35:97:d2:ac:36:45:4b:d3:fc:f7:55:0b:58:e6:0e: 80:b6:19:72:0f:1f:6d:d7:f6:87:72:5d:23:d8:69: 4e:48:28:80:d7:97:7e:ff:a4:f5:5d:07:bb:bd:c3: 31:41:f8:84:dc:cd:cc:e4:fd:36:f1:5f:9e:a1:65: 73:78:ea:82:2a:3c:58:c4:28:65:7c:82:59:cf:e2: 23:15:f9:f7:06:06:6a:09:8f:80:22:ea:a9:a9:d7: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0A:06:9A:A2:F1:F9:14:64:A5:C2:15:98:15:FD:3E:56:8B:BB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6248084-b68e-37e7-a536-2d3812df93f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:91:68:58:9b:26:97:ce:1b:73:b5:7f:7c:79:f6:6f:4c:68: c9:dd:15:78:37:2e:66:fa:9d:dd:c0:c5:57:64:5f:c2:ae:5b: b9:e8:8a:bd:24:8b:4a:41:fb:7c:e2:de:ea:3a:74:33:54:d6: a7:79:bd:23:4c:fe:02:00:27:d1:8a:d4:7f:aa:2b:c0:b7:5f: 44:17:81:fa:40:ba:64:d9:58:87:29:8e:3b:43:b3:2f:5e:ed: e2:5d:e3:af:c1:9d:a3:3f:14:84:c1:37:43:b9:de:77:d1:af: 98:f1:16:de:6d:6b:90:88:85:49:fe:7b:a7:cf:8d:c7:40:d0: 5d:17:fc:78:03:84:a0:2d:c6:65:83:4d:a8:22:75:0b:8e:b7: ad:ae:25:ce:d7:96:d2:45:40:9e:a7:45:20:f3:50:cb:ed:b1: c9:f3:a4:85:15:e5:1c:72:12:1c:f5:e9:c5:bb:18:5e:7f:da: d3:6a:e9:e7:f8:2f:31:ae:1b:9b:47:ca:ce:b3:bc:47:f9:f7: 33:42:c7:62:f8:9a:11:71:35:db:dd:73:1d:2a:e2:7b:b7:14: d0:34:fb:d6:b7:23:4a:ce:77:c5:e5:5a:0d:f1:ee:c7:c2:8d: 82:ff:c7:16:61:ce:a5:8a:ed:7d:4d:bc:e1:e9:09:99:58:36: d0:2e:bc:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAboxCAuFeqxikfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZmRlNjcxN2QtMTI1My00MWI3LTgxNzItNDNjYWZlMDJlN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Nh2iUxWgxPB/mbQRy5EBIBN5jj/8yn4Oom Yjp1Vdo48dSLJ/tA05NCOlWfLec89VBh4CAvuyn4dncvra4CWw+igkaoWjKrz7Ys qENSpKLJaVaL12MDAWcjR/8zJIvQctF+3ZUxh4IzPM5wfZ+gnld7uEjevfdfHUpW XROUCSO14m5XK2LGyJxIKc0pDG9s6ZaOAl3afbtp7aSSY1Jg8MWazVs1l9KsNkVL 0/z3VQtY5g6AthlyDx9t1/aHcl0j2GlOSCiA15d+/6T1XQe7vcMxQfiE3M3M5P02 8V+eoWVzeOqCKjxYxChlfIJZz+IjFfn3BgZqCY+AIuqpqdenewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEKBpqi8fkUZKXCFZgV/T5Wi7sjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDYyNDgwODQtYjY4ZS0z N2U3LWE1MzYtMmQzODEyZGY5M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaRaFibJpfOG3O1f3x59m9MaMndFXg3Lmb6nd3AxVdkX8KuW7noir0k i0pB+3zi3uo6dDNU1qd5vSNM/gIAJ9GK1H+qK8C3X0QXgfpAumTZWIcpjjtDsy9e 7eJd46/BnaM/FITBN0O53nfRr5jxFt5ta5CIhUn+e6fPjcdA0F0X/HgDhKAtxmWD TagidQuOt62uJc7XltJFQJ6nRSDzUMvtscnzpIUV5RxyEhz16cW7GF5/2tNq6ef4 LzGuG5tHys6zvEf59zNCx2L4mhFxNdvdcx0q4nu3FNA0+9a3I0rOd8XlWg3x7sfC jYL/xxZhzqWK7X1NvOHpCZlYNtAuvII= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:34 2025 by rpki-client