$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8af50eb-6a84-3da0-a9f4-84c388d0c2d8.roa File: e8af50eb-6a84-3da0-a9f4-84c388d0c2d8.roa (raw, json) Hash identifier: RDMj+95N//q6CyfZmem7EcsSgbK+1e2QuCeaZ9dwt1g= Subject key identifier: 17:D5:23:92:77:22:9A:EE:84:63:35:6A:B4:27:8D:11:E6:7E:E4:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B0CA1ABA509B505FF4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8af50eb-6a84-3da0-a9f4-84c388d0c2d8.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b0:ca:1a:ba:50:9b:50:5f:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=daa91f63-09fe-4136-aab5-52bca2209f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:12:2e:1d:44:1d:fa:98:f9:51:00:00:f7: 23:cf:97:0f:e0:70:8b:54:d8:5b:87:3e:0b:63:23: d6:cd:cd:b2:c2:d0:cc:81:32:73:1b:da:66:e1:ed: 42:d2:52:67:bf:9b:ca:d0:8a:41:3f:8b:49:b1:74: 90:8c:2d:fc:2a:88:99:6d:dc:14:37:4b:75:87:77: 53:7a:0a:58:8e:46:b2:93:1e:c2:14:6f:3d:a0:e7: 93:d4:1a:76:bd:c6:5a:c9:ab:88:e5:e6:5d:e0:41: e4:d3:98:79:a8:0e:67:7c:f6:67:d5:f4:dd:1e:66: 9b:24:b0:06:cc:f6:16:75:4c:f5:7b:02:c6:69:f1: c5:3e:5b:ce:75:b5:81:6f:2d:ca:9e:bd:46:85:f9: b8:7b:f7:21:9b:de:58:00:99:10:ff:8b:ca:93:d5: 5a:37:6c:7b:09:19:7f:9f:88:ac:2b:22:9f:d0:39: 1a:74:2b:6f:4c:f9:77:61:28:d6:ed:da:5d:70:8a: 37:76:90:77:87:c4:87:78:46:6e:5d:12:ed:e0:b0: e0:3c:78:d0:05:cb:df:5f:57:10:fb:4e:37:29:1b: 18:02:d1:09:0e:1f:2e:10:01:c9:3a:1a:e6:89:e6: e7:59:a2:3a:76:42:f2:c2:86:0b:24:9d:d7:e9:f8: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D5:23:92:77:22:9A:EE:84:63:35:6A:B4:27:8D:11:E6:7E:E4:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8af50eb-6a84-3da0-a9f4-84c388d0c2d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f1:e7:db:b4:7f:be:b4:d2:60:2e:c5:49:c7:17:3e:b4:dc: c5:37:15:a6:91:76:b4:22:4c:7d:9e:90:ba:ec:9f:17:7c:6b: 5c:d6:f0:c2:64:15:8a:bd:74:c9:cc:31:a1:1d:70:ba:86:08: fe:bf:82:9c:d8:dc:83:a7:5e:9a:6b:4e:1a:b7:9f:34:57:1f: 66:43:6a:f7:32:71:ea:d6:51:a3:15:cc:e8:aa:8f:8f:6f:59: cb:8c:91:c9:5d:d2:e1:57:a8:26:0f:af:17:ae:67:73:c5:dc: fd:74:91:0c:cf:83:5c:40:8d:7a:8c:57:7b:cf:9a:4e:29:3f: d8:61:55:86:f3:bd:29:fe:a9:f3:8f:d9:de:6a:f5:39:86:79: e7:68:b8:9c:f1:d5:04:86:28:21:a5:ad:17:22:b9:e5:e1:ed: 7d:86:ef:15:67:93:d5:6e:0d:94:96:4d:67:a2:fe:ad:f2:d3: e4:59:d3:3e:e9:ee:28:a2:9d:9f:25:ae:16:c7:82:a4:2d:b2: e4:d5:8d:ce:81:09:ed:6a:44:42:25:a5:26:f2:18:c9:c5:f5: 02:eb:c1:ac:54:f8:44:2e:5b:2f:1d:94:b4:0c:8b:91:56:71: 35:83:ea:36:24:b8:29:e0:32:05:ae:df:b3:33:9a:66:29:f3: 43:a7:0d:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbDKGrpQm1Bf9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGFhOTFmNjMtMDlmZS00MTM2LWFhYjUtNTJiY2EyMjA5ZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2oSLh1EHfqY+VEAAPcjz5cP4HCLVNhbhz4L YyPWzc2ywtDMgTJzG9pm4e1C0lJnv5vK0IpBP4tJsXSQjC38KoiZbdwUN0t1h3dT egpYjkaykx7CFG89oOeT1Bp2vcZayauI5eZd4EHk05h5qA5nfPZn1fTdHmabJLAG zPYWdUz1ewLGafHFPlvOdbWBby3Knr1Ghfm4e/chm95YAJkQ/4vKk9VaN2x7CRl/ n4isKyKf0DkadCtvTPl3YSjW7dpdcIo3dpB3h8SHeEZuXRLt4LDgPHjQBcvfX1cQ +043KRsYAtEJDh8uEAHJOhrmiebnWaI6dkLywoYLJJ3X6fgqZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfVI5J3IpruhGM1arQnjRHmfuRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZThhZjUwZWItNmE4NC0z ZGEwLWE5ZjQtODRjMzg4ZDBjMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXx59u0f7600mAuxUnHFz603MU3FaaRdrQiTH2ekLrsnxd8a1zW8MJk FYq9dMnMMaEdcLqGCP6/gpzY3IOnXpprThq3nzRXH2ZDavcycerWUaMVzOiqj49v WcuMkcld0uFXqCYPrxeuZ3PF3P10kQzPg1xAjXqMV3vPmk4pP9hhVYbzvSn+qfOP 2d5q9TmGeedouJzx1QSGKCGlrRciueXh7X2G7xVnk9VuDZSWTWei/q3y0+RZ0z7p 7iiinZ8lrhbHgqQtsuTVjc6BCe1qREIlpSbyGMnF9QLrwaxU+EQuWy8dlLQMi5FW cTWD6jYkuCngMgWu37MzmmYp80OnDeo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:10 2025 by rpki-client