$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee8f9dde-39d4-3777-928b-04df9a571225.roa File: ee8f9dde-39d4-3777-928b-04df9a571225.roa (raw, json) Hash identifier: /XCMxxtNpzR7NgYv8uOE+jSuj3rfE6adGRMfSnCrIq4= Subject key identifier: 45:20:6B:BF:96:E6:AA:CF:5E:B3:31:BE:91:B1:87:61:8D:01:B9:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BE451E2FB3FFDBE706A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee8f9dde-39d4-3777-928b-04df9a571225.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.216.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:be:45:1e:2f:b3:ff:db:e7:06:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ea1ab9f6-c3e5-45b2-a3e1-55e035e47732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:fc:13:3c:7a:7e:9c:a1:3b:bd:69:bc:bd: cc:64:0f:b9:f4:a5:b5:72:30:40:b6:ab:fb:45:50: 4b:ca:4f:42:33:9d:f2:f5:75:ad:f7:fb:0b:b6:2e: 25:1f:dd:76:17:7a:6a:b7:00:57:9e:f7:a8:eb:fd: 14:d2:08:d9:1a:49:98:87:1d:0e:52:a1:a6:c5:a6: 24:2f:a3:dc:97:2d:5a:b7:b9:f3:0e:8c:4a:3d:d8: c4:17:48:48:bf:e9:22:9c:41:eb:8b:c7:9e:b0:dc: 45:ca:65:c0:7b:e8:ed:7b:f8:4d:29:67:83:46:72: 60:60:01:7d:17:4a:c9:12:81:2d:96:a9:7f:b3:0d: 73:ed:92:73:3e:f5:84:5e:f5:e7:5d:58:f6:0d:30: 3d:1d:5b:04:67:9a:75:35:a7:84:4d:7d:2e:9e:49: 96:5c:1e:0c:80:6f:72:a6:cd:7c:b8:51:02:ac:05: f6:d0:ea:fc:30:fb:85:c0:8a:3c:5f:73:3b:5b:9f: 71:1d:5a:06:63:2e:a6:dc:b1:67:a6:69:74:27:e4: 8b:35:d6:14:18:6b:54:51:0d:2f:6f:aa:28:12:4b: 1f:55:3b:89:94:72:c4:8f:67:af:0b:9e:0c:c0:5a: 6a:e6:eb:60:93:a9:a2:bc:ed:53:dc:78:ff:dd:5d: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:20:6B:BF:96:E6:AA:CF:5E:B3:31:BE:91:B1:87:61:8D:01:B9:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee8f9dde-39d4-3777-928b-04df9a571225.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ea:53:34:25:f5:c0:87:76:c1:3b:7c:46:c9:2a:b8:09:bc: 61:79:5f:43:c1:3a:9b:dc:7c:63:b0:88:4a:0b:0d:53:07:b0: de:0f:62:67:30:6b:15:16:2a:74:b3:66:10:6f:6c:f6:fe:40: 1a:99:81:5b:8c:84:7b:26:bb:75:f6:d5:58:15:5e:a2:30:9f: 84:46:1f:ed:cc:e2:b0:ef:63:b3:25:5d:a9:d3:fc:11:a5:aa: 6d:9c:d4:60:87:0a:37:dd:c5:ff:7a:03:c3:71:ab:a9:02:7c: 13:a1:16:bf:a2:98:44:c8:d6:7c:09:99:91:5b:cf:67:10:15: a6:e4:50:4b:23:87:a5:54:d5:57:fa:e7:d4:2f:b3:18:58:29: f6:c2:bf:2e:a6:9b:b9:cd:3f:b6:d1:ac:56:ff:e9:f6:67:97: 5d:b0:6b:62:2d:40:26:e0:21:2f:3d:6f:87:67:48:9b:43:e8: b6:79:09:23:91:72:fc:f7:66:c4:3c:b5:00:a1:2c:b1:9d:ee: 02:7b:1c:6d:93:4c:7e:06:b0:6e:a7:09:27:de:2c:be:30:4b: 6a:f6:47:38:93:aa:2f:e9:91:de:b6:61:7b:c5:22:42:c6:7e: 79:4e:4f:bf:63:30:44:fb:7a:75:81:f9:a4:6f:2f:98:9a:d5: f4:5e:5d:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAb5FHi+z/9vnBqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWExYWI5ZjYtYzNlNS00NWIyLWEzZTEtNTVlMDM1ZTQ3NzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6H8Ezx6fpyhO71pvL3MZA+59KW1cjBAtqv7 RVBLyk9CM53y9XWt9/sLti4lH912F3pqtwBXnveo6/0U0gjZGkmYhx0OUqGmxaYk L6Pcly1at7nzDoxKPdjEF0hIv+kinEHri8eesNxFymXAe+jte/hNKWeDRnJgYAF9 F0rJEoEtlql/sw1z7ZJzPvWEXvXnXVj2DTA9HVsEZ5p1NaeETX0unkmWXB4MgG9y ps18uFECrAX20Or8MPuFwIo8X3M7W59xHVoGYy6m3LFnpml0J+SLNdYUGGtUUQ0v b6ooEksfVTuJlHLEj2evC54MwFpq5utgk6mivO1T3Hj/3V10rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUga7+W5qrPXrMxvpGxh2GNAbk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWU4ZjlkZGUtMzlkNC0z Nzc3LTkyOGItMDRkZjlhNTcxMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7qUzQl9cCHdsE7fEbJKrgJvGF5X0PBOpvcfGOwiEoLDVMHsN4PYmcw axUWKnSzZhBvbPb+QBqZgVuMhHsmu3X21VgVXqIwn4RGH+3M4rDvY7MlXanT/BGl qm2c1GCHCjfdxf96A8Nxq6kCfBOhFr+imETI1nwJmZFbz2cQFabkUEsjh6VU1Vf6 59QvsxhYKfbCvy6mm7nNP7bRrFb/6fZnl12wa2ItQCbgIS89b4dnSJtD6LZ5CSOR cvz3ZsQ8tQChLLGd7gJ7HG2TTH4GsG6nCSfeLL4wS2r2RziTqi/pkd62YXvFIkLG fnlOT79jMET7enWB+aRvL5ia1fReXeo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:03 2025 by rpki-client