$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da44bc86-b733-3651-9472-d51eed9a1214.roa File: da44bc86-b733-3651-9472-d51eed9a1214.roa (raw, json) Hash identifier: AMREljh141hv2Z8usG0AgS/T+/PPVdUTQLTC+L9sKvU= Subject key identifier: 1D:77:3D:07:6E:8B:CF:59:09:6C:F3:C6:07:A2:78:22:23:84:46:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A5BD7428E6C6D40FF900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da44bc86-b733-3651-9472-d51eed9a1214.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.206.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a5:bd:74:28:e6:c6:d4:0f:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=09ea7d01-3ea6-45d8-8935-64221d90d168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:47:08:19:14:3c:6c:de:f3:9c:59:71:ac:b2: 65:56:0d:38:03:cf:4c:69:a7:d3:a2:68:81:c9:b4: 64:bb:ee:fb:aa:6a:6b:3a:fc:bf:c0:7b:1b:18:9e: 6b:85:60:b9:83:fc:fe:dd:ed:ce:f4:a8:fd:fd:51: c4:3f:aa:e0:2f:bb:d4:01:a1:54:d5:c6:a7:3a:8c: 83:92:67:de:49:5e:ee:40:a7:a4:c2:a4:dc:26:e7: 73:67:48:8d:2a:43:fd:63:c8:9f:f9:c6:32:e0:e2: 66:ca:97:73:ae:d8:df:f7:ba:18:5e:a5:7f:b0:02: 34:78:5b:04:f0:70:01:83:80:ac:28:5f:a8:33:ac: 90:30:9b:6c:c7:93:05:23:7f:38:75:13:95:97:cc: 8e:de:12:71:06:3e:a5:26:72:78:06:c3:6c:62:2e: b9:db:16:ba:9c:80:0b:4a:12:a9:89:39:23:d2:2f: 3e:fc:0b:83:fd:25:0d:3e:bf:42:21:84:f0:cc:aa: a1:98:9f:0e:3f:ca:25:14:de:e5:85:a3:0c:f0:96: 52:3a:9a:ed:4a:52:11:68:0e:b3:11:91:56:08:ed: b4:4d:26:95:f4:f2:4d:06:e5:25:77:51:1e:10:0d: ae:df:a6:e4:ab:d2:b2:d9:56:50:e2:c7:de:56:a8: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:77:3D:07:6E:8B:CF:59:09:6C:F3:C6:07:A2:78:22:23:84:46:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da44bc86-b733-3651-9472-d51eed9a1214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3f:7d:09:33:74:3c:54:c7:d9:42:53:c0:ca:0e:cf:b3:f1: 42:aa:b8:b2:d5:6e:dd:48:13:47:43:52:49:22:22:a1:4d:4d: 18:92:64:b3:0a:99:63:a5:10:d8:ad:35:cf:2f:7f:d1:fb:dc: ac:d3:46:98:f6:14:70:b1:e2:8b:b5:1f:03:00:3c:07:99:ae: 0b:ba:b1:47:4f:05:97:86:e0:d1:b8:84:26:ec:5d:08:93:89: 7f:37:89:be:f9:3e:86:db:d3:17:4d:56:8b:31:a4:50:12:12: 9d:a0:bc:30:d6:72:da:96:7f:21:d3:0d:aa:3b:5a:a3:91:93: a7:dd:88:e9:c4:05:7e:e9:61:bd:1d:d7:0a:7c:03:87:c3:c3: 7b:00:96:d8:ac:7b:2e:32:cc:fe:cc:1b:ad:56:d3:07:87:06: af:69:cc:a7:85:f8:4a:1f:bc:98:18:3c:cd:4d:8a:8b:cb:17: 24:72:d6:0d:5c:1c:95:4b:94:5f:52:d2:80:d1:6e:9e:f7:a6: 10:88:43:a9:13:86:aa:b4:5a:cc:0b:21:8f:e0:98:e4:79:96: e8:5a:1a:78:43:8a:a5:cf:0f:f3:bd:c0:fb:15:93:61:50:b6: cf:cd:df:9c:08:9e:5c:a0:0e:45:06:be:6d:77:42:b5:24:0d: d2:ba:bf:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaW9dCjmxtQP+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDllYTdkMDEtM2VhNi00NWQ4LTg5MzUtNjQyMjFkOTBkMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0cIGRQ8bN7znFlxrLJlVg04A89MaafTomiB ybRku+77qmprOvy/wHsbGJ5rhWC5g/z+3e3O9Kj9/VHEP6rgL7vUAaFU1canOoyD kmfeSV7uQKekwqTcJudzZ0iNKkP9Y8if+cYy4OJmypdzrtjf97oYXqV/sAI0eFsE 8HABg4CsKF+oM6yQMJtsx5MFI384dROVl8yO3hJxBj6lJnJ4BsNsYi652xa6nIAL ShKpiTkj0i8+/AuD/SUNPr9CIYTwzKqhmJ8OP8olFN7lhaMM8JZSOprtSlIRaA6z EZFWCO20TSaV9PJNBuUld1EeEA2u36bkq9Ky2VZQ4sfeVqi7swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB13PQdui89ZCWzzxgeieCIjhEaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGE0NGJjODYtYjczMy0z NjUxLTk0NzItZDUxZWVkOWExMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg/fQkzdDxUx9lCU8DKDs+z8UKquLLVbt1IE0dDUkkiIqFNTRiSZLMK mWOlENitNc8vf9H73KzTRpj2FHCx4ou1HwMAPAeZrgu6sUdPBZeG4NG4hCbsXQiT iX83ib75Pobb0xdNVosxpFASEp2gvDDWctqWfyHTDao7WqORk6fdiOnEBX7pYb0d 1wp8A4fDw3sAltisey4yzP7MG61W0weHBq9pzKeF+EofvJgYPM1NiovLFyRy1g1c HJVLlF9S0oDRbp73phCIQ6kThqq0WswLIY/gmOR5luhaGnhDiqXPD/O9wPsVk2FQ ts/N35wInlygDkUGvm13QrUkDdK6v6g= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:33 2025 by rpki-client