$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f796da47-0612-3e4d-83f3-a4457a3bad78.roa File: f796da47-0612-3e4d-83f3-a4457a3bad78.roa (raw, json) Hash identifier: UJw9DFNDcIVH41iPCF+rvxSDImMLXZ78eMNiA5rKZ1I= Subject key identifier: F7:B7:0D:A6:07:97:24:56:68:78:41:48:C8:55:4C:D6:C8:23:92:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A688BB3DA8AD9FA07F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f796da47-0612-3e4d-83f3-a4457a3bad78.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.206.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a6:88:bb:3d:a8:ad:9f:a0:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=cfb583eb-456b-4a62-9fb3-92c8707d0997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:b8:f3:36:f3:57:99:ae:77:5a:fa:7a:d4: 87:64:ca:50:f8:1c:e8:39:71:17:80:1c:6b:0f:50: 3f:5a:3a:bc:52:7a:d0:63:c4:7c:ee:bd:7a:54:3c: 10:50:18:55:6e:45:43:b6:15:5a:ab:ee:c9:94:c6: 25:2e:4e:ea:e4:e6:45:e1:06:70:85:e1:6e:01:06: 31:b2:b2:6a:4a:8e:2f:06:e5:0b:d6:be:51:8d:e5: a5:c1:5a:ac:56:11:91:ed:7a:0e:cc:ed:3a:0e:d0: 4f:ae:62:11:e0:00:95:76:aa:e5:fe:61:fd:e0:81: b6:46:38:41:c4:6c:20:4a:60:c9:1f:01:fc:62:18: fa:00:b0:a7:9e:d2:79:a7:f2:c6:c3:ef:49:5e:ea: ac:c6:47:d5:a8:71:2e:2c:4a:96:c8:8a:58:58:1a: a7:85:95:a5:23:78:64:c7:a2:70:fe:93:7c:34:37: 32:36:fb:e1:e3:a0:5d:20:15:a7:a3:43:2f:2a:87: 1b:7d:f7:4c:38:3b:89:89:ae:b6:8e:99:89:85:15: 12:e7:fd:07:9f:a7:27:e3:14:4a:55:5f:00:5e:03: 25:14:4d:f9:d5:02:08:ab:34:21:0a:05:07:6e:b7: 0b:f9:60:60:9e:c6:5a:ab:72:7e:9d:08:5f:0d:e2: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:0D:A6:07:97:24:56:68:78:41:48:C8:55:4C:D6:C8:23:92:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f796da47-0612-3e4d-83f3-a4457a3bad78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0f:60:a0:15:c3:43:19:fa:6f:ac:fe:9b:b1:3e:7d:d7:8a: 17:4b:8f:a9:e4:4b:ba:b7:ab:04:de:43:ad:e8:be:b2:bd:7d: 26:32:eb:42:5e:b7:74:e4:6f:b0:0c:2b:14:6c:e7:b7:27:5d: 57:a1:da:77:cc:38:ba:18:06:37:99:32:6a:86:dc:ba:d9:ee: 60:67:ea:1f:7d:4c:81:1d:4b:16:74:f1:cc:a2:f8:b0:86:08: c8:89:ec:7c:41:f1:8b:7c:6b:09:d9:ec:64:d7:be:a7:a4:de: d1:7c:ce:f0:ab:f4:00:a3:d3:61:55:45:72:31:b7:b5:84:f5: 95:dc:1f:e0:4f:d8:09:81:ba:59:b2:5e:aa:4d:6c:d6:28:80: 3b:bf:6b:ca:56:b7:60:df:ed:f5:02:48:e0:f0:2f:20:67:c4: ff:dd:ac:39:e7:84:56:90:a5:36:36:fa:9a:f6:e2:94:ed:1c: a8:a1:3c:9e:80:63:c5:43:94:03:cb:fc:27:0b:91:63:f6:06: a5:99:a9:3d:66:c1:af:7d:c4:1e:82:fe:26:c3:14:f6:31:2e: 2e:fe:eb:e9:0f:45:a3:fd:5f:03:89:5f:aa:ec:3b:c7:7b:57: b5:fc:12:68:ab:0e:de:07:a6:3d:48:ee:b6:8c:a2:c9:03:5d: a9:ba:48:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaaIuz2orZ+gfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2ZiNTgzZWItNDU2Yi00YTYyLTlmYjMtOTJjODcwN2QwOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyS48zbzV5mud1r6etSHZMpQ+BzoOXEXgBxr D1A/Wjq8UnrQY8R87r16VDwQUBhVbkVDthVaq+7JlMYlLk7q5OZF4QZwheFuAQYx srJqSo4vBuUL1r5RjeWlwVqsVhGR7XoOzO06DtBPrmIR4ACVdqrl/mH94IG2RjhB xGwgSmDJHwH8Yhj6ALCnntJ5p/LGw+9JXuqsxkfVqHEuLEqWyIpYWBqnhZWlI3hk x6Jw/pN8NDcyNvvh46BdIBWno0MvKocbffdMODuJia62jpmJhRUS5/0Hn6cn4xRK VV8AXgMlFE351QIIqzQhCgUHbrcL+WBgnsZaq3J+nQhfDeLR9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe3DaYHlyRWaHhBSMhVTNbII5JqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjc5NmRhNDctMDYxMi0z ZTRkLTgzZjMtYTQ0NTdhM2JhZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkPYKAVw0MZ+m+s/puxPn3XihdLj6nkS7q3qwTeQ63ovrK9fSYy60Je t3Tkb7AMKxRs57cnXVeh2nfMOLoYBjeZMmqG3LrZ7mBn6h99TIEdSxZ08cyi+LCG CMiJ7HxB8Yt8awnZ7GTXvqek3tF8zvCr9ACj02FVRXIxt7WE9ZXcH+BP2AmBulmy XqpNbNYogDu/a8pWt2Df7fUCSODwLyBnxP/drDnnhFaQpTY2+pr24pTtHKihPJ6A Y8VDlAPL/CcLkWP2BqWZqT1mwa99xB6C/ibDFPYxLi7+6+kPRaP9XwOJX6rsO8d7 V7X8EmirDt4Hpj1I7raMoskDXam6SOk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:37 2025 by rpki-client