$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef9e93e9-79e2-30c8-a0af-0a90f752789e.roa File: ef9e93e9-79e2-30c8-a0af-0a90f752789e.roa (raw, json) Hash identifier: +qt8vnCE+a0ON9fpQ2Z0ckq2Cggnyi0Ho59Q+DV3gpc= Subject key identifier: EB:B0:E4:06:9E:8C:D5:2C:9C:BA:58:B6:85:84:4C:93:49:04:2A:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206735F4CFED415664352400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef9e93e9-79e2-30c8-a0af-0a90f752789e.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 174.72.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:35:f4:cf:ed:41:56:64:35:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=3a27b36e-6001-4d43-90f3-043bb1b11c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:e3:24:0e:cd:db:2c:31:5d:45:5c:5e:14: 5a:71:eb:44:b6:4f:73:84:d3:2d:ad:7e:cf:13:52: cb:34:45:25:35:ad:6e:d1:c1:09:cf:c7:04:a3:59: d8:14:28:0c:11:aa:65:8a:9c:7b:2d:96:e5:ee:0c: 83:44:b6:07:41:20:a7:1e:11:ed:d0:23:8f:52:f7: 73:7d:dc:05:ec:95:07:7a:39:c2:b1:e8:29:e9:03: 1d:1a:7d:1e:c5:c4:56:b2:a7:8c:8c:a2:07:f2:f3: 63:cf:d2:f7:2c:dd:62:80:6b:be:bb:69:0b:53:d1: d8:ed:bb:36:0d:59:a5:93:72:4b:7f:ec:ea:11:fb: 8f:bd:bc:e3:61:54:72:d3:d8:20:31:14:d8:b1:fc: e1:b0:6a:63:54:dc:40:dc:9d:a0:f8:be:cf:32:61: 51:8d:0c:ea:d5:05:ba:ee:10:86:fc:57:c9:44:bd: 44:c9:a7:05:16:66:e1:5b:79:2c:af:90:8c:1c:3d: 66:81:23:74:fc:c0:c6:6d:14:bb:99:4d:a3:3a:16: 52:3f:6c:74:88:37:29:64:26:a9:cb:68:d4:f5:e7: ea:d0:10:09:f1:be:16:e4:21:e5:82:0e:f5:03:79: f7:dc:45:7a:e8:b9:ee:88:d7:02:20:04:76:14:22: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B0:E4:06:9E:8C:D5:2C:9C:BA:58:B6:85:84:4C:93:49:04:2A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef9e93e9-79e2-30c8-a0af-0a90f752789e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:98:90:f4:b1:bf:fa:de:13:a0:f7:31:bf:44:18:06:77:f6: 43:7c:d7:1b:42:dd:64:4b:41:2e:9c:0b:e2:0e:eb:e0:63:1b: f5:7f:54:4e:99:fe:67:6a:78:64:cd:b7:cb:2f:60:35:49:3b: 5d:e4:77:a0:0c:51:a4:ae:38:26:83:ba:c7:83:bb:1c:fe:e9: 07:12:ab:99:c8:ef:7d:13:a6:ba:aa:b5:a8:3a:7f:52:58:e7: ed:37:24:40:2e:64:cf:7b:90:71:77:83:56:d4:3b:61:18:53: a9:f4:e7:e7:00:7c:97:88:8b:15:10:7f:13:4b:f8:40:c9:53: 45:c2:8a:3b:49:c4:f7:a8:13:f6:0b:f3:92:85:4a:74:50:76: d5:93:3e:91:80:0b:15:79:3f:81:90:ef:66:04:31:e4:34:31: dd:27:8f:ed:00:75:d3:54:2c:fc:06:39:83:88:e2:99:10:e0: e2:ed:00:f2:45:0a:a5:84:3f:0a:fd:7e:67:82:86:07:78:9e: 8a:d9:b0:9d:41:05:d9:c3:d7:46:1c:97:55:4a:95:c9:8e:52: 63:36:4e:87:10:3c:91:53:18:a9:32:17:4a:66:47:d2:2c:8a: 26:e8:27:1c:1d:56:da:3a:a1:a0:4c:c8:1b:6d:93:a6:e8:fe: 62:0e:2e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzX0z+1BVmQ1JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk M2EyN2IzNmUtNjAwMS00ZDQzLTkwZjMtMDQzYmIxYjExYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEjjJA7N2ywxXUVcXhRacetEtk9zhNMtrX7P E1LLNEUlNa1u0cEJz8cEo1nYFCgMEaplipx7LZbl7gyDRLYHQSCnHhHt0COPUvdz fdwF7JUHejnCsegp6QMdGn0excRWsqeMjKIH8vNjz9L3LN1igGu+u2kLU9HY7bs2 DVmlk3JLf+zqEfuPvbzjYVRy09ggMRTYsfzhsGpjVNxA3J2g+L7PMmFRjQzq1QW6 7hCG/FfJRL1EyacFFmbhW3ksr5CMHD1mgSN0/MDGbRS7mU2jOhZSP2x0iDcpZCap y2jU9efq0BAJ8b4W5CHlgg71A3n33EV66LnuiNcCIAR2FCJHKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuw5AaejNUsnLpYtoWETJNJBCprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWY5ZTkzZTktNzllMi0z MGM4LWEwYWYtMGE5MGY3NTI3ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOYkPSxv/reE6D3Mb9EGAZ39kN81xtC3WRLQS6cC+IO6+BjG/V/VE6Z /mdqeGTNt8svYDVJO13kd6AMUaSuOCaDuseDuxz+6QcSq5nI730Tprqqtag6f1JY 5+03JEAuZM97kHF3g1bUO2EYU6n05+cAfJeIixUQfxNL+EDJU0XCijtJxPeoE/YL 85KFSnRQdtWTPpGACxV5P4GQ72YEMeQ0Md0nj+0AddNULPwGOYOI4pkQ4OLtAPJF CqWEPwr9fmeChgd4norZsJ1BBdnD10Ycl1VKlcmOUmM2TocQPJFTGKkyF0pmR9Is iiboJxwdVto6oaBMyBttk6bo/mIOLt4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:14 2025 by rpki-client