$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eaa7e4d5-0d6c-3fb5-8659-6a73509803e3.roa File: eaa7e4d5-0d6c-3fb5-8659-6a73509803e3.roa (raw, json) Hash identifier: z7kZCrxT7GPKMLnnXr+cnUGHWiQUAT0LJHFrXj72Mp0= Subject key identifier: 76:BC:59:67:E0:0F:71:E9:F6:47:94:61:F0:BE:02:78:0C:A8:86:40 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F019F5B009270D7E7B934C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eaa7e4d5-0d6c-3fb5-8659-6a73509803e3.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:9f:5b:00:92:70:d7:e7:b9:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=4abcb032-5107-401e-b5b6-fefd52a4904f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:34:10:15:ea:5e:ec:ab:1d:1b:69:e2:aa: 26:00:b1:24:e6:38:7b:50:c7:e2:7d:93:9d:49:dc: c7:07:40:ac:62:ae:6a:b1:a5:8c:91:78:31:f4:97: f9:53:94:77:b9:26:bc:87:70:74:f3:f6:f0:9b:c8: 0e:73:ba:94:83:db:ed:03:ae:02:b2:66:0a:bb:03: 5e:d8:81:25:1c:19:a5:ee:cb:7f:28:b7:6e:94:40: fe:a1:7f:a1:60:b8:ce:1a:3e:3e:0a:c7:47:8e:a7: ff:1d:f3:12:06:32:0b:4d:7c:89:ea:eb:92:18:49: f7:b5:06:da:3b:dc:55:3d:df:81:46:c5:9c:73:2e: cf:68:dc:84:ab:6b:45:73:e2:6a:cc:ec:32:dc:3e: 2a:a5:4f:c4:80:ad:5b:8d:86:44:73:40:14:2e:26: 0f:1d:4c:56:26:44:74:67:1d:49:72:21:b2:cc:f7: 30:98:a1:0e:f4:0e:57:f1:68:f1:c4:d0:ae:94:cd: a4:5a:9c:a9:05:0c:2c:09:fb:61:60:23:eb:8a:18: fb:30:4a:33:bc:5e:ae:ab:8e:6a:9d:5f:6a:a7:65: 23:5f:bb:67:d7:48:61:d7:ea:f3:c4:fc:1e:3e:1c: 3a:d1:3f:2c:e9:a2:18:42:ec:5a:5c:ed:27:37:2c: 48:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BC:59:67:E0:0F:71:E9:F6:47:94:61:F0:BE:02:78:0C:A8:86:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eaa7e4d5-0d6c-3fb5-8659-6a73509803e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e6:04:41:ff:a0:f4:47:06:6e:f5:fd:b0:2c:8f:57:b6:6f: 80:08:ee:0b:82:b6:d5:79:f4:ea:51:93:df:21:73:59:09:16: 31:e5:54:8b:37:5e:31:a4:4b:ca:4d:5e:39:db:eb:dd:78:81: 15:7a:fa:0f:58:1d:78:f9:ee:d2:1a:5e:14:97:0f:63:f6:b9: 29:28:4a:f0:37:e0:6a:bf:0e:6d:ed:d8:7e:82:a8:f3:07:64: 32:89:f9:4c:02:13:60:fa:20:ef:60:65:cd:0d:6c:c0:31:d4: ac:35:a7:b4:f0:4f:73:f3:91:0e:33:07:47:cc:e9:1e:b3:90: 02:81:ef:73:0b:d8:68:8e:ab:ca:26:a7:9e:ef:e5:ce:23:b3: f8:71:36:07:fb:6d:ed:b4:29:06:d0:55:2e:1f:37:6f:b5:92: 6a:df:bb:fa:7c:d9:f3:c1:90:c4:15:48:47:31:35:31:a2:52: 80:b6:cb:89:4f:cb:1e:b0:2d:2a:3e:c3:01:6d:43:dd:a5:0f: e7:b4:68:a9:6c:3f:a7:b9:dc:21:94:bd:88:e0:38:d2:f6:60: 33:a4:81:25:15:10:57:2f:8e:05:fb:92:0b:fb:66:09:33:d7: 27:6c:5d:0d:c5:75:22:a4:9a:4f:8a:4c:a1:07:7f:12:4f:4b: db:c9:68:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZ9bAJJw1+e5NMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NGFiY2IwMzItNTEwNy00MDFlLWI1YjYtZmVmZDUyYTQ5MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz40EBXqXuyrHRtp4qomALEk5jh7UMfifZOd SdzHB0CsYq5qsaWMkXgx9Jf5U5R3uSa8h3B08/bwm8gOc7qUg9vtA64CsmYKuwNe 2IElHBml7st/KLdulED+oX+hYLjOGj4+CsdHjqf/HfMSBjILTXyJ6uuSGEn3tQba O9xVPd+BRsWccy7PaNyEq2tFc+JqzOwy3D4qpU/EgK1bjYZEc0AULiYPHUxWJkR0 Zx1JciGyzPcwmKEO9A5X8WjxxNCulM2kWpypBQwsCfthYCPrihj7MEozvF6uq45q nV9qp2UjX7tn10hh1+rzxPwePhw60T8s6aIYQuxaXO0nNyxIywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa8WWfgD3Hp9keUYfC+AngMqIZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWFhN2U0ZDUtMGQ2Yy0z ZmI1LTg2NTktNmE3MzUwOTgwM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfmBEH/oPRHBm71/bAsj1e2b4AI7guCttV59OpRk98hc1kJFjHlVIs3 XjGkS8pNXjnb6914gRV6+g9YHXj57tIaXhSXD2P2uSkoSvA34Gq/Dm3t2H6CqPMH ZDKJ+UwCE2D6IO9gZc0NbMAx1Kw1p7TwT3PzkQ4zB0fM6R6zkAKB73ML2GiOq8om p57v5c4js/hxNgf7be20KQbQVS4fN2+1kmrfu/p82fPBkMQVSEcxNTGiUoC2y4lP yx6wLSo+wwFtQ92lD+e0aKlsP6e53CGUvYjgONL2YDOkgSUVEFcvjgX7kgv7Zgkz 1ydsXQ3FdSKkmk+KTKEHfxJPS9vJaIQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:34:58 2025 by rpki-client