$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f72fdafa-a375-3d40-b633-1fd95e583e75.roa File: f72fdafa-a375-3d40-b633-1fd95e583e75.roa (raw, json) Hash identifier: 4oblKB8Og6GQI2HADian9i3KqKB4q5h/aNpEkbx/Z1I= Subject key identifier: CA:D3:26:EF:51:15:9B:78:34:8D:44:A7:2B:22:E8:D8:B6:43:83:7E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A76E0CD53982125C1500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f72fdafa-a375-3d40-b633-1fd95e583e75.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.206.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a7:6e:0c:d5:39:82:12:5c:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=0f68415c-9304-453d-85ab-082efd94f205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:58:f8:26:f6:29:ce:20:f7:df:66:25:ec: 43:87:ef:d9:8b:38:c8:95:3f:a3:82:46:1b:15:f5: e6:c7:16:b4:69:9c:1e:69:db:8f:3f:9d:46:1e:5f: 98:ba:5b:ca:b9:23:92:41:a0:be:15:1f:93:0c:7e: f4:ac:ab:93:78:1d:53:03:8d:b2:f9:71:31:27:c7: bb:e7:81:2b:62:73:1f:51:94:66:77:e0:e1:06:ef: df:d0:9a:41:f1:17:ff:fb:68:2d:16:4d:bd:9a:5e: 58:47:c3:6f:5f:d0:73:86:93:0c:f6:8d:48:3a:e9: c4:10:aa:4c:eb:a0:2e:3d:7a:60:fb:22:83:7e:73: 9a:f5:26:93:f5:60:24:26:14:32:04:d2:93:aa:03: 96:1d:ec:40:a6:a2:69:4a:c0:b1:34:09:f7:0a:57: d4:a5:7c:92:78:f0:b4:a8:0c:f9:34:ee:d3:f4:74: bf:c6:d5:f7:d1:cc:9c:2b:70:6a:30:f4:e2:de:7c: 5a:49:da:5c:f7:55:65:2d:1d:15:4d:8c:1b:66:62: ef:7a:be:86:e1:b1:8e:c2:a4:03:a8:0c:c7:bd:1f: ad:77:b0:c7:19:50:53:78:c9:9a:5d:9d:13:e8:02: 92:2f:e9:01:e7:01:63:26:cd:ea:3b:55:48:f0:a3: a5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D3:26:EF:51:15:9B:78:34:8D:44:A7:2B:22:E8:D8:B6:43:83:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f72fdafa-a375-3d40-b633-1fd95e583e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:15:d4:28:83:6d:40:84:12:f0:c9:46:fb:21:2d:1d:37:5c: 50:e0:74:ed:38:89:38:3f:90:7e:9f:41:e5:ae:5e:bf:28:d4: 28:13:d1:ba:41:26:54:ae:7c:e5:85:c5:d0:d4:7d:84:8e:65: c7:78:86:32:49:ff:b4:f0:ec:f7:13:94:97:8b:d4:a6:59:31: 8e:92:7c:fc:e0:cf:7b:8b:4a:16:e8:a8:ec:78:90:0b:e3:8f: 0d:14:52:ab:e2:7c:51:58:dc:41:b4:68:ed:de:cb:d5:1e:bb: b3:a9:60:f6:b7:6c:8f:00:77:0b:49:4e:26:6e:bc:cc:f9:b2: 0b:2e:5f:24:01:24:42:00:1c:21:2b:e0:0b:7c:b6:43:81:ca: 8f:90:44:cd:a9:ea:ef:bb:6e:a1:1b:9f:67:15:60:a2:9d:f8: 74:c7:07:1e:15:30:84:7e:54:c5:12:eb:20:03:de:21:f0:24: 1c:dc:12:d1:58:4d:f3:47:6d:21:b5:a9:08:02:b2:47:49:61: 8c:c4:e0:43:36:76:60:13:10:fa:f9:f8:de:da:26:5d:28:19: 89:b3:fc:41:90:a5:4b:78:ef:d2:03:a3:63:59:1d:ed:63:6b: c8:85:f4:41:86:5b:79:86:d4:8f:f8:da:b6:13:fc:d6:e7:12: 69:78:41:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaduDNU5ghJcFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MGY2ODQxNWMtOTMwNC00NTNkLTg1YWItMDgyZWZkOTRmMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyhY+Cb2Kc4g999mJexDh+/ZizjIlT+jgkYb FfXmxxa0aZweaduPP51GHl+YulvKuSOSQaC+FR+TDH70rKuTeB1TA42y+XExJ8e7 54ErYnMfUZRmd+DhBu/f0JpB8Rf/+2gtFk29ml5YR8NvX9BzhpMM9o1IOunEEKpM 66AuPXpg+yKDfnOa9SaT9WAkJhQyBNKTqgOWHexApqJpSsCxNAn3ClfUpXySePC0 qAz5NO7T9HS/xtX30cycK3BqMPTi3nxaSdpc91VlLR0VTYwbZmLver6G4bGOwqQD qAzHvR+td7DHGVBTeMmaXZ0T6AKSL+kB5wFjJs3qO1VI8KOl3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrTJu9RFZt4NI1Epysi6Ni2Q4N+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjcyZmRhZmEtYTM3NS0z ZDQwLWI2MzMtMWZkOTVlNTgzZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEV1CiDbUCEEvDJRvshLR03XFDgdO04iTg/kH6fQeWuXr8o1CgT0bpB JlSufOWFxdDUfYSOZcd4hjJJ/7Tw7PcTlJeL1KZZMY6SfPzgz3uLShboqOx4kAvj jw0UUqvifFFY3EG0aO3ey9Ueu7OpYPa3bI8AdwtJTiZuvMz5sgsuXyQBJEIAHCEr 4At8tkOByo+QRM2p6u+7bqEbn2cVYKKd+HTHBx4VMIR+VMUS6yAD3iHwJBzcEtFY TfNHbSG1qQgCskdJYYzE4EM2dmATEPr5+N7aJl0oGYmz/EGQpUt479IDo2NZHe1j a8iF9EGGW3mG1I/42rYT/NbnEml4QYg= -----END CERTIFICATE-----Generated at Thu Oct 16 02:01:00 2025 by rpki-client