$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a61a37-1119-37ad-897f-7001a97fe242.roa File: e9a61a37-1119-37ad-897f-7001a97fe242.roa (raw, json) Hash identifier: npWZ/ScHt/4kvndqOGqpTolQW2zkgp5f4foTDthzlwI= Subject key identifier: AC:34:CD:4F:B3:73:99:83:B0:D6:3D:78:64:D6:67:41:30:00:AC:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BAE61BDCEFBF38AEC600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a61a37-1119-37ad-897f-7001a97fe242.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.212.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ba:e6:1b:dc:ef:bf:38:ae:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=94f144f8-9067-44b7-aaf7-7c3996dcfb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:1d:51:f0:8c:6b:ce:4a:17:0c:2d:43:86: 40:80:1e:7d:b9:2b:3a:0b:c1:fa:5d:09:ba:49:1e: 76:e8:fa:d5:a4:a5:36:02:a7:4b:ff:cc:f8:76:14: 5b:9b:2c:6c:5f:2a:16:b2:a5:f6:35:e9:5e:c9:f1: 9f:ac:32:9b:73:45:43:06:f1:da:34:0a:56:23:e8: c5:e7:ad:e3:2b:7e:74:66:fc:68:d6:6e:20:b7:da: af:ee:80:22:56:bf:05:bf:91:5e:3b:88:70:7e:87: f7:43:b2:50:ab:f7:34:b6:85:7e:0c:68:af:c6:75: e8:87:24:f6:f6:0e:ee:5d:64:9a:1e:cf:11:81:76: c4:15:0e:c3:cd:e9:ac:c6:b4:bb:41:fb:88:62:ba: 1a:43:08:32:bc:26:fc:02:72:f6:66:92:68:b8:5f: 7b:f2:d2:3b:f3:b4:97:91:0b:f0:90:89:74:a1:97: 01:f5:51:ba:31:d5:3f:a0:f5:41:f1:26:ed:9f:28: 67:82:68:56:af:46:58:b7:6d:61:b0:12:fd:f2:41: b1:66:b4:13:37:e8:14:8d:1e:98:0d:5b:8e:06:b2: 99:c8:c4:33:19:16:f7:f1:02:0b:83:da:45:be:4b: 88:f0:72:9f:1a:73:26:6f:26:03:00:41:89:0e:58: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:34:CD:4F:B3:73:99:83:B0:D6:3D:78:64:D6:67:41:30:00:AC:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a61a37-1119-37ad-897f-7001a97fe242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:52:fa:04:f5:ec:26:e1:4f:a4:6b:e9:39:e4:5a:f9:4f:69: f4:80:01:1e:b5:66:ef:97:f9:46:ef:6e:da:2b:c5:27:d8:86: 51:3d:97:14:be:7d:dd:f2:5a:64:8e:c8:c0:87:a5:b8:c3:48: c0:33:64:0a:c7:41:ae:24:53:b0:e6:7d:e6:f0:66:d3:15:da: 18:02:7e:2d:1c:b3:c0:93:a3:4c:e2:b9:20:84:15:35:50:1b: 01:ef:03:07:08:7c:a8:f3:c6:99:44:10:05:14:04:17:12:f7: ee:e0:01:1e:8d:4a:2d:40:ee:b9:21:3d:3c:27:3f:3c:b8:d9: 2d:20:1a:85:1c:2b:9c:0c:8c:9d:65:bf:45:9a:5f:3b:4a:ad: 9e:4e:d1:61:d9:f9:5e:b4:9f:05:0e:97:4e:57:d3:af:43:a0: 47:55:29:f7:31:a9:4b:12:28:b4:3f:13:6d:00:df:a3:ad:8d: ac:70:eb:9a:7a:43:8a:60:48:80:eb:85:60:9b:58:10:59:d8: f1:ab:94:05:92:60:4a:ab:d9:15:0a:0a:c6:ef:cc:3c:1c:31: e7:cb:a6:d1:fe:13:eb:30:bc:b8:11:57:0c:f9:48:12:51:96: bd:89:37:21:74:c7:78:77:ab:58:98:46:ae:c8:e4:3b:69:68: d6:25:7e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbrmG9zvvziuxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTRmMTQ0ZjgtOTA2Ny00NGI3LWFhZjctN2MzOTk2ZGNmYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOIdUfCMa85KFwwtQ4ZAgB59uSs6C8H6XQm6 SR526PrVpKU2AqdL/8z4dhRbmyxsXyoWsqX2NeleyfGfrDKbc0VDBvHaNApWI+jF 563jK350Zvxo1m4gt9qv7oAiVr8Fv5FeO4hwfof3Q7JQq/c0toV+DGivxnXohyT2 9g7uXWSaHs8RgXbEFQ7DzemsxrS7QfuIYroaQwgyvCb8AnL2ZpJouF978tI787SX kQvwkIl0oZcB9VG6MdU/oPVB8SbtnyhngmhWr0ZYt21hsBL98kGxZrQTN+gUjR6Y DVuOBrKZyMQzGRb38QILg9pFvkuI8HKfGnMmbyYDAEGJDljeKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw0zU+zc5mDsNY9eGTWZ0EwAKzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTlhNjFhMzctMTExOS0z N2FkLTg5N2YtNzAwMWE5N2ZlMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVS+gT17CbhT6Rr6TnkWvlPafSAAR61Zu+X+UbvbtorxSfYhlE9lxS+ fd3yWmSOyMCHpbjDSMAzZArHQa4kU7DmfebwZtMV2hgCfi0cs8CTo0ziuSCEFTVQ GwHvAwcIfKjzxplEEAUUBBcS9+7gAR6NSi1A7rkhPTwnPzy42S0gGoUcK5wMjJ1l v0WaXztKrZ5O0WHZ+V60nwUOl05X069DoEdVKfcxqUsSKLQ/E20A36Otjaxw65p6 Q4pgSIDrhWCbWBBZ2PGrlAWSYEqr2RUKCsbvzDwcMefLptH+E+swvLgRVwz5SBJR lr2JNyF0x3h3q1iYRq7I5DtpaNYlfl0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:38:55 2025 by rpki-client