$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e0f0a945-7a36-38a4-a22f-137590e33218.roa File: e0f0a945-7a36-38a4-a22f-137590e33218.roa (raw, json) Hash identifier: ue9zCQwrt2alCXQvc3leGRPX9OEyomNErrtnrkPjbOY= Subject key identifier: 96:04:9B:36:5A:83:57:9C:83:9F:B3:94:5D:E8:3F:73:32:8B:B0:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C9D0A797D3FAA30474E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e0f0a945-7a36-38a4-a22f-137590e33218.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.222.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c9:d0:a7:97:d3:fa:a3:04:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=a85597c2-a01c-4a7b-9e20-a20317a31297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:e5:61:24:68:19:b4:29:10:51:6c:e5:27: 03:f8:02:27:1f:ed:e2:f7:cc:be:a8:58:d8:2a:65: 16:a9:ea:54:ab:69:23:ab:b7:9d:3e:97:46:34:4c: f4:74:e1:d9:75:39:64:8e:d8:6e:c8:c6:59:a4:fd: 84:f2:8e:08:45:25:0f:d1:90:36:2e:ba:05:d5:f2: 51:aa:69:88:4b:e8:82:30:5a:df:01:bc:98:a3:b6: 0f:0d:18:27:d3:28:b3:66:af:75:60:07:7c:dd:24: ec:f7:03:3e:01:38:79:d3:64:e3:6d:b0:e2:fa:f7: 18:68:e1:17:ae:6d:a6:06:f0:8d:47:99:ea:c6:a8: ee:f7:fe:86:e1:2c:cb:1e:4e:48:42:75:e0:49:71: 85:51:d0:47:9e:d2:61:5d:cc:e0:63:0f:00:59:9f: a0:08:c5:a2:f1:c1:ed:e1:b6:ad:f4:88:1a:63:5e: ba:fb:af:b7:0c:ba:15:4e:8a:e4:fa:59:95:b8:fd: e7:cd:fc:f6:5d:f7:df:9e:be:8a:da:2f:67:c8:3e: b3:94:bf:0e:61:08:91:8b:4e:c9:a9:1e:9d:90:50: cc:f4:70:b9:93:20:23:61:dd:9b:2a:d8:39:67:60: 0c:4d:00:76:79:fd:8a:bb:d5:36:ec:92:1a:c8:78: ec:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:9B:36:5A:83:57:9C:83:9F:B3:94:5D:E8:3F:73:32:8B:B0:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e0f0a945-7a36-38a4-a22f-137590e33218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:8c:79:10:c9:a7:b3:6d:36:11:ec:1c:40:72:74:33:9f:a6: 59:51:51:4e:70:d0:a8:56:fa:45:2c:7d:b7:2c:58:91:b5:c3: 68:f6:65:f0:29:06:27:a3:ac:63:ad:40:a3:ec:25:40:ae:6d: a4:d0:d5:5b:a5:9a:4f:ba:26:f5:a6:a6:9e:42:bb:88:df:a8: 3c:a9:1c:75:6b:12:dd:39:32:b2:c4:c8:19:47:a8:2b:ef:94: de:3f:85:d2:11:80:a3:17:01:b9:e6:91:1a:56:e7:d9:14:04: ef:8f:a7:64:c7:e1:cc:ec:c1:b3:46:08:06:cb:65:1c:46:64: 9f:bb:fb:fc:f0:4e:06:63:9c:6b:0f:36:2e:ee:e3:15:45:50: 8a:ef:85:6c:d2:db:1f:ac:20:09:58:fa:6a:e6:3b:39:b7:98: 25:b9:e6:99:7a:ea:7e:0f:ed:24:54:b1:0d:c7:f8:2b:84:45: 77:0a:94:c7:d1:84:de:d4:23:3a:cf:c4:14:eb:36:19:1d:ac: 7a:f2:96:81:20:08:50:b7:73:1e:b3:28:93:69:9d:97:cc:1f: da:a1:e5:ed:2c:07:e5:f3:10:71:11:4b:ba:ef:34:2e:4d:c2: d7:e6:41:59:b1:9f:b1:c1:4e:fc:c7:35:c1:62:b9:90:e0:30: ed:42:ac:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcnQp5fT+qMEdOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTg1NTk3YzItYTAxYy00YTdiLTllMjAtYTIwMzE3YTMxMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vjlYSRoGbQpEFFs5ScD+AInH+3i98y+qFjY KmUWqepUq2kjq7edPpdGNEz0dOHZdTlkjthuyMZZpP2E8o4IRSUP0ZA2LroF1fJR qmmIS+iCMFrfAbyYo7YPDRgn0yizZq91YAd83STs9wM+ATh502TjbbDi+vcYaOEX rm2mBvCNR5nqxqju9/6G4SzLHk5IQnXgSXGFUdBHntJhXczgYw8AWZ+gCMWi8cHt 4bat9IgaY166+6+3DLoVTork+lmVuP3nzfz2Xfffnr6K2i9nyD6zlL8OYQiRi07J qR6dkFDM9HC5kyAjYd2bKtg5Z2AMTQB2ef2Ku9U27JIayHjsIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYEmzZag1ecg5+zlF3oP3Myi7D/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTBmMGE5NDUtN2EzNi0z OGE0LWEyMmYtMTM3NTkwZTMzMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN6iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOMeRDJp7NtNhHsHEBydDOfpllRUU5w0KhW+kUsfbcsWJG1w2j2ZfAp BiejrGOtQKPsJUCubaTQ1Vulmk+6JvWmpp5Cu4jfqDypHHVrEt05MrLEyBlHqCvv lN4/hdIRgKMXAbnmkRpW59kUBO+Pp2TH4czswbNGCAbLZRxGZJ+7+/zwTgZjnGsP Ni7u4xVFUIrvhWzS2x+sIAlY+mrmOzm3mCW55pl66n4P7SRUsQ3H+CuERXcKlMfR hN7UIzrPxBTrNhkdrHryloEgCFC3cx6zKJNpnZfMH9qh5e0sB+XzEHERS7rvNC5N wtfmQVmxn7HBTvzHNcFiuZDgMO1CrMk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:05 2025 by rpki-client