$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f53632ec-dc14-3b60-9feb-31f030ab8423.roa File: f53632ec-dc14-3b60-9feb-31f030ab8423.roa (raw, json) Hash identifier: 1wbJWPtQ/5kmpPwDpmo5FTqHMPHixetH8iZFdf3c9cQ= Subject key identifier: 2C:43:1F:FF:16:CA:64:F3:28:34:C2:85:B8:34:51:E5:DF:39:C3:CA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BB0846FB76C990E1F080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f53632ec-dc14-3b60-9feb-31f030ab8423.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.212.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:bb:08:46:fb:76:c9:90:e1:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=4d11bec0-f4e2-445f-98d1-61906ca3302d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:14:ff:8e:13:6f:ca:ad:5c:b5:01:cd:55: b9:c5:4a:ce:38:b6:f5:d7:2c:a8:32:7d:3e:ad:77: 36:ab:ab:1f:74:0f:46:95:32:a1:b2:8d:1d:6e:54: f9:a9:5d:09:95:87:f2:b7:05:c2:63:ed:b1:de:ec: 78:0f:c9:b9:5a:29:69:db:80:8d:33:f1:7c:d9:3a: 9f:50:57:8c:ed:16:36:11:b8:61:2e:69:28:f8:5b: b3:c9:4a:36:2d:ac:c2:da:b8:f5:fa:a9:be:02:e5: 4e:70:d7:cf:57:46:be:60:ea:26:1a:79:7b:6a:e6: 6d:d7:d8:71:a5:c5:7f:51:43:f7:e7:d8:67:11:89: 41:d4:4f:6c:7e:18:63:a4:ef:8d:79:b2:2e:e0:70: e4:3d:62:eb:80:b2:6b:02:03:10:d1:2e:5c:13:6a: c7:0c:d4:0e:f3:eb:b1:a9:95:1c:65:80:88:f0:a9: 47:95:c7:c8:09:65:67:c4:92:86:95:73:7b:14:13: 04:35:32:82:cb:6f:fa:bc:28:43:ad:66:12:8b:ba: 72:69:19:eb:c9:42:6d:9e:a3:63:80:3b:58:52:76: 35:ce:18:cd:12:94:a0:1d:e2:8b:d1:c4:05:75:10: 5f:0a:59:92:f2:7d:08:6b:d5:06:a6:d3:ca:64:54: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:43:1F:FF:16:CA:64:F3:28:34:C2:85:B8:34:51:E5:DF:39:C3:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f53632ec-dc14-3b60-9feb-31f030ab8423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f8:64:19:3f:55:4f:df:68:11:5f:20:b2:d3:05:ed:c5:52: c2:63:a8:70:87:56:5f:13:fd:83:90:81:87:8d:f7:99:19:71: 2e:98:b7:07:8d:65:35:48:0c:8f:e2:66:b5:df:62:94:5b:4a: 09:54:5a:5b:88:f3:14:8d:a9:3b:5d:5d:ac:fa:32:68:f1:5b: 21:c1:55:bf:37:99:df:d8:a2:c6:88:6d:28:52:52:f8:2a:be: 48:3c:ad:cc:5a:40:7c:c6:61:02:06:92:92:c4:2e:6a:63:11: 13:ce:a0:f4:3d:9a:c3:b7:ae:00:ec:01:67:6a:05:9f:95:6d: 4a:75:0a:bd:cc:a0:5e:73:c8:fc:3d:15:d9:28:a2:b6:51:29: 4f:ac:3b:89:d2:df:be:a1:e1:87:8c:80:9a:61:86:9b:a2:0d: a3:5a:10:8e:4f:45:f3:f6:25:e0:23:cf:01:16:eb:2e:3a:3d: 8b:d3:12:0a:29:37:24:96:e0:61:a5:79:e0:1e:9d:d6:17:16: bb:0b:73:97:1f:18:7b:51:26:5a:d5:27:6e:a7:45:6d:64:8b: 6b:48:3a:62:81:84:ad:d9:a5:05:1e:12:50:e4:15:77:31:45: b4:fb:02:86:b1:79:fe:17:10:4c:4e:c7:bd:ae:92:09:06:16: 55:33:23:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbsIRvt2yZDh8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NGQxMWJlYzAtZjRlMi00NDVmLTk4ZDEtNjE5MDZjYTMzMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTwU/44Tb8qtXLUBzVW5xUrOOLb11yyoMn0+ rXc2q6sfdA9GlTKhso0dblT5qV0JlYfytwXCY+2x3ux4D8m5Wilp24CNM/F82Tqf UFeM7RY2EbhhLmko+FuzyUo2LazC2rj1+qm+AuVOcNfPV0a+YOomGnl7auZt19hx pcV/UUP359hnEYlB1E9sfhhjpO+NebIu4HDkPWLrgLJrAgMQ0S5cE2rHDNQO8+ux qZUcZYCI8KlHlcfICWVnxJKGlXN7FBMENTKCy2/6vChDrWYSi7pyaRnryUJtnqNj gDtYUnY1zhjNEpSgHeKL0cQFdRBfClmS8n0Ia9UGptPKZFTX/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxDH/8WymTzKDTChbg0UeXfOcPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjUzNjMyZWMtZGMxNC0z YjYwLTlmZWItMzFmMDMwYWI4NDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNRxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH4ZBk/VU/faBFfILLTBe3FUsJjqHCHVl8T/YOQgYeN95kZcS6YtweN ZTVIDI/iZrXfYpRbSglUWluI8xSNqTtdXaz6MmjxWyHBVb83md/YosaIbShSUvgq vkg8rcxaQHzGYQIGkpLELmpjERPOoPQ9msO3rgDsAWdqBZ+VbUp1Cr3MoF5zyPw9 FdkoorZRKU+sO4nS376h4YeMgJphhpuiDaNaEI5PRfP2JeAjzwEW6y46PYvTEgop NySW4GGleeAendYXFrsLc5cfGHtRJlrVJ26nRW1ki2tIOmKBhK3ZpQUeElDkFXcx RbT7Aoaxef4XEExOx72ukgkGFlUzIxA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:15 2025 by rpki-client