$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee044d0a-29ba-3855-9885-e2b953f2f014.roa File: ee044d0a-29ba-3855-9885-e2b953f2f014.roa (raw, json) Hash identifier: urBx/CnN3g51bZ5/o0lhXEA2ZtXIiNy4XRRumlTgsYw= Subject key identifier: 8A:D0:3E:B5:B0:4C:89:49:FA:8F:2D:5B:A5:38:69:37:E5:65:AD:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F019F3A7A3D055A51B273C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee044d0a-29ba-3855-9885-e2b953f2f014.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:9f:3a:7a:3d:05:5a:51:b2:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=6c9040c4-3278-4552-a25c-3372eeb57cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a4:fa:53:44:68:d6:ed:b3:53:b0:cd:89:33: d5:3b:a3:25:ee:e1:fc:23:c9:e1:72:44:75:96:c1: 35:23:cc:34:3a:1f:cd:55:cd:1f:97:70:2b:7f:72: ec:ef:c4:11:dd:96:41:90:99:19:3b:4d:64:3d:39: 50:c7:0d:a9:c9:2b:34:62:17:f5:14:c2:f6:ec:cb: 5a:4a:03:37:b9:2c:94:68:46:d8:0e:6d:be:b0:5c: 3c:e5:71:1e:b4:bb:3b:28:c9:0f:78:ce:93:05:ad: 57:19:2e:b5:ff:bd:e7:de:22:cb:e3:07:d8:04:0c: d3:16:83:1e:8b:19:48:4f:88:5b:95:ec:0e:d7:9f: 08:c6:79:9a:cc:84:cc:fc:1f:a5:0b:69:fa:cb:8a: ab:ea:4b:36:96:de:ae:dd:b4:84:72:5a:ce:0d:5e: 1f:dd:03:4e:3c:00:fe:c1:77:c9:98:47:2f:26:f5: 46:7f:02:9c:2d:2c:5e:69:48:5b:fa:c0:f1:5e:07: b3:7d:f5:23:16:c5:eb:87:ff:6d:d8:14:b9:f4:d5: 05:4c:35:c2:f3:46:cc:1e:dd:ad:fa:c6:5f:09:f1: e2:55:6b:53:e2:78:98:30:06:8c:29:4f:8b:6d:22: 76:03:fb:1b:9b:3d:5e:9c:db:a4:90:0b:23:d6:55: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D0:3E:B5:B0:4C:89:49:FA:8F:2D:5B:A5:38:69:37:E5:65:AD:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee044d0a-29ba-3855-9885-e2b953f2f014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3a:3c:bc:13:09:a7:38:c4:cc:9d:06:66:dd:95:47:80:41: de:ac:6b:c0:7b:59:ca:83:1b:ef:bd:81:3b:55:94:65:fc:0c: d4:b8:61:7a:43:9c:a8:82:33:d5:8f:21:c9:ee:8a:b6:d1:ba: ab:2d:e1:93:cf:ba:7a:1b:d0:c6:2e:ec:fd:9b:4d:7c:29:c6: c1:8f:c6:f2:29:c9:c6:03:9c:be:f2:16:27:1f:13:60:49:32: 9a:ae:a6:35:ec:fe:e4:b6:36:9e:8c:4d:0a:35:96:c4:1d:d7: 6a:e3:c2:a2:9b:60:09:08:15:8b:f0:bd:2f:38:5f:c5:97:49: 6f:35:0e:03:7a:76:f4:23:45:16:64:d9:5a:f5:2e:6b:18:25: 35:62:e0:9c:fd:51:86:5f:33:17:8f:a4:e9:38:a5:a8:87:c3: 65:ac:f3:d5:b6:ea:e5:18:ae:9e:1a:60:59:41:ad:94:9d:e7: 3c:02:87:f4:d7:a7:d0:b6:66:45:2e:36:e6:34:ef:14:b2:f8: 79:f5:1f:49:d5:3b:57:07:16:60:58:da:87:2b:ba:d9:b6:7d: 8a:54:b5:10:04:1d:cb:85:76:49:80:a2:67:8e:b2:e3:cd:3f: 51:33:e8:1a:50:71:ad:c9:c6:2a:af:af:f1:b2:08:b0:3e:b8: d6:76:c4:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZ86ej0FWlGyc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NmM5MDQwYzQtMzI3OC00NTUyLWEyNWMtMzM3MmVlYjU3Y2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaT6U0Ro1u2zU7DNiTPVO6Ml7uH8I8nhckR1 lsE1I8w0Oh/NVc0fl3Arf3Ls78QR3ZZBkJkZO01kPTlQxw2pySs0Yhf1FML27Mta SgM3uSyUaEbYDm2+sFw85XEetLs7KMkPeM6TBa1XGS61/73n3iLL4wfYBAzTFoMe ixlIT4hblewO158IxnmazITM/B+lC2n6y4qr6ks2lt6u3bSEclrODV4f3QNOPAD+ wXfJmEcvJvVGfwKcLSxeaUhb+sDxXgezffUjFsXrh/9t2BS59NUFTDXC80bMHt2t +sZfCfHiVWtT4niYMAaMKU+LbSJ2A/sbmz1enNukkAsj1lVUawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrQPrWwTIlJ+o8tW6U4aTflZa0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWUwNDRkMGEtMjliYS0z ODU1LTk4ODUtZTJiOTUzZjJmMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA86PLwTCac4xMydBmbdlUeAQd6sa8B7WcqDG++9gTtVlGX8DNS4YXpD nKiCM9WPIcnuirbRuqst4ZPPunob0MYu7P2bTXwpxsGPxvIpycYDnL7yFicfE2BJ MpqupjXs/uS2Np6MTQo1lsQd12rjwqKbYAkIFYvwvS84X8WXSW81DgN6dvQjRRZk 2Vr1LmsYJTVi4Jz9UYZfMxePpOk4paiHw2Ws89W26uUYrp4aYFlBrZSd5zwCh/TX p9C2ZkUuNuY07xSy+Hn1H0nVO1cHFmBY2ocrutm2fYpUtRAEHcuFdkmAomeOsuPN P1Ez6BpQca3Jxiqvr/GyCLA+uNZ2xO4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:18 2025 by rpki-client