$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efb4f09d-a3c9-3f35-a6b9-2d20f6beb45d.roa File: efb4f09d-a3c9-3f35-a6b9-2d20f6beb45d.roa (raw, json) Hash identifier: 0Gpw7T2hAdhJPMMulLF6CMkBFxHPJYB04jP9qebEcD0= Subject key identifier: AC:B8:4B:BA:3D:2A:C1:D2:4A:FD:B5:82:80:BC:8E:FE:44:61:4B:73 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C9BEC64881973E94D280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efb4f09d-a3c9-3f35-a6b9-2d20f6beb45d.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.222.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c9:be:c6:48:81:97:3e:94:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=303f413c-9644-4069-ac6c-4e3268447735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:0d:3e:7b:83:72:82:4e:15:97:68:6e:99: b9:97:61:20:de:74:de:84:db:cd:a1:46:3e:d7:01: c2:0d:60:39:12:38:02:54:c7:9f:96:88:11:b8:2f: 85:53:f6:81:9c:bb:e5:ab:fd:85:b4:16:27:bb:ed: 67:e6:ff:43:c6:2f:18:d5:c7:7f:4d:fc:6e:e3:e2: 52:3d:da:e3:b5:d9:a2:04:31:64:6e:cb:5d:29:76: f7:f5:f8:54:11:a1:bd:1c:ae:6c:2e:16:8c:c3:be: 84:6c:27:ff:2d:3d:ba:de:67:22:c8:fa:03:9d:4a: 58:89:b2:0e:9b:17:03:fa:1a:5c:2b:a1:6c:71:98: d1:82:9d:a0:b1:e7:23:53:2d:3b:f3:fb:3e:e5:5d: ca:e1:4b:e3:09:bd:62:fe:d7:3e:89:92:18:84:ae: d7:75:4c:16:64:19:2c:06:cd:5d:1b:6f:2b:b2:ea: fc:f0:f0:cb:70:da:00:b8:41:f8:ca:ee:93:de:db: df:c6:72:50:d2:9f:ac:9d:fe:d3:d4:47:f5:55:b8: 02:68:be:c3:b4:0a:21:8e:5a:c1:d7:38:a9:f9:03: 21:b8:0e:98:04:71:53:f6:11:b0:9a:df:81:2d:54: e3:9d:a8:f8:e7:14:da:9b:22:9f:fd:ca:c6:97:09: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B8:4B:BA:3D:2A:C1:D2:4A:FD:B5:82:80:BC:8E:FE:44:61:4B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efb4f09d-a3c9-3f35-a6b9-2d20f6beb45d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cd:19:26:20:f1:49:02:5f:75:6d:81:a7:ae:b1:08:66:8a: 34:be:21:65:8d:58:50:d7:63:1b:db:c2:85:b9:d4:68:e6:34: 23:29:6e:90:16:d0:37:77:9b:a2:74:62:f9:e2:29:eb:1d:b4: 92:7f:89:43:cb:97:91:ea:fb:0f:d4:96:28:2a:b0:54:e0:bb: 3c:20:1a:96:7e:c8:9b:03:98:ce:c4:95:bc:96:13:20:71:31: 28:2b:18:e6:01:9b:52:7e:97:2d:da:2d:09:e4:60:ed:96:3d: 20:12:f5:35:0a:86:24:91:35:85:f5:07:67:14:d8:d1:63:cb: 19:46:79:fa:2c:95:9d:e5:81:32:c7:d9:06:fa:d9:94:6f:a5: c9:88:28:61:c8:d8:2e:26:98:bf:fc:70:b4:15:e3:91:63:26: 81:2e:cb:d0:3f:86:77:2f:eb:e7:81:d3:6b:36:3f:c5:4a:e7: 3c:17:be:84:e0:6a:95:d4:a2:72:f7:93:9e:ca:ee:ec:37:a9: 7e:7b:2f:a8:bf:e6:40:07:5b:fb:df:b9:a0:88:36:fd:6e:cd: 64:cb:69:3d:2c:79:ae:bf:90:a7:fd:e4:f6:79:a9:fa:b7:59: ab:3f:7d:25:b2:88:d4:84:0a:bf:81:c6:bd:81:cc:fb:1b:28: 9f:23:74:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcm+xkiBlz6U0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzAzZjQxM2MtOTY0NC00MDY5LWFjNmMtNGUzMjY4NDQ3NzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshcNPnuDcoJOFZdobpm5l2Eg3nTehNvNoUY+ 1wHCDWA5EjgCVMeflogRuC+FU/aBnLvlq/2FtBYnu+1n5v9Dxi8Y1cd/Tfxu4+JS PdrjtdmiBDFkbstdKXb39fhUEaG9HK5sLhaMw76EbCf/LT263mciyPoDnUpYibIO mxcD+hpcK6FscZjRgp2gsecjUy078/s+5V3K4UvjCb1i/tc+iZIYhK7XdUwWZBks Bs1dG28rsur88PDLcNoAuEH4yu6T3tvfxnJQ0p+snf7T1Ef1VbgCaL7DtAohjlrB 1zip+QMhuA6YBHFT9hGwmt+BLVTjnaj45xTamyKf/crGlwljlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy4S7o9KsHSSv21goC8jv5EYUtzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWZiNGYwOWQtYTNjOS0z ZjM1LWE2YjktMmQyMGY2YmViNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfNGSYg8UkCX3VtgaeusQhmijS+IWWNWFDXYxvbwoW51GjmNCMpbpAW 0Dd3m6J0YvniKesdtJJ/iUPLl5Hq+w/UligqsFTguzwgGpZ+yJsDmM7ElbyWEyBx MSgrGOYBm1J+ly3aLQnkYO2WPSAS9TUKhiSRNYX1B2cU2NFjyxlGefoslZ3lgTLH 2Qb62ZRvpcmIKGHI2C4mmL/8cLQV45FjJoEuy9A/hncv6+eB02s2P8VK5zwXvoTg apXUonL3k57K7uw3qX57L6i/5kAHW/vfuaCINv1uzWTLaT0sea6/kKf95PZ5qfq3 Was/fSWyiNSECr+Bxr2BzPsbKJ8jdEg= -----END CERTIFICATE-----Generated at Thu Oct 16 01:28:25 2025 by rpki-client