$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f7fd37c7-6ee9-31f9-9d0d-c07405b5dbe6.roa File: f7fd37c7-6ee9-31f9-9d0d-c07405b5dbe6.roa (raw, json) Hash identifier: yk8AZOO8CUNZlwG6lRUpi3v2D4uYxOcvUFVs5eDRxcI= Subject key identifier: D0:67:F9:40:ED:AC:7B:71:74:75:31:BA:CC:E6:D3:9C:8E:43:B9:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B666200A1AD52FC00F60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f7fd37c7-6ee9-31f9-9d0d-c07405b5dbe6.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.211.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b6:66:20:0a:1a:d5:2f:c0:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=48b7ef44-7826-4fa7-b629-c5bd2ccea5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:82:13:a8:a5:7d:1b:87:c1:fb:e1:e4:e2: 6b:7f:a2:97:e5:e2:44:5b:15:52:c0:61:97:03:f1: b2:4c:e1:78:70:99:3c:88:8f:09:df:2e:07:b3:b9: 3f:8c:62:2f:d2:f2:60:b5:e1:66:22:90:98:c8:7c: dd:20:aa:df:a5:74:54:f1:61:5a:73:12:b5:bc:39: d4:ac:73:74:4c:a8:0e:30:45:8b:ed:8e:62:aa:28: 02:ac:ed:6d:cc:05:50:28:c5:7d:9b:f2:c0:dc:81: 71:48:35:a9:08:3e:75:6f:df:b7:d5:d0:15:49:4d: e2:6a:0d:73:33:90:7a:8a:46:d8:4a:d6:b1:62:32: 4c:8e:db:2a:85:56:54:2e:18:13:76:c7:e8:ae:c5: ca:fa:7c:84:5e:96:bf:e7:fb:cb:05:b9:3b:a6:3d: c7:52:ca:c1:43:cc:a6:ce:fe:92:27:57:ad:ee:3f: 85:a4:f8:d4:7e:4f:d8:a2:10:42:ec:fb:c1:bb:90: 93:47:59:7a:ab:59:5b:60:fa:53:4f:b0:13:22:c1: ea:f1:30:75:10:73:88:2f:d0:38:80:60:82:e6:32: 75:ae:48:df:f0:7d:1f:b9:29:99:11:ed:31:95:00: c4:74:19:a0:53:7e:ae:48:a7:ae:e9:0e:4b:49:de: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:67:F9:40:ED:AC:7B:71:74:75:31:BA:CC:E6:D3:9C:8E:43:B9:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f7fd37c7-6ee9-31f9-9d0d-c07405b5dbe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:86:3e:0c:66:21:de:10:e8:5e:bc:43:7c:93:29:5d:de:b6: 6d:21:4c:3c:98:fe:da:11:1d:64:87:e9:bf:54:ed:c7:c6:09: 4e:6d:7d:4f:0c:a7:0a:b2:71:38:c7:4a:f1:42:fc:da:81:df: 82:54:33:07:e0:8e:c0:25:60:e3:79:17:d9:75:ce:34:89:32: b9:7b:1f:5f:d4:ec:5f:64:56:26:fd:03:2d:b7:56:bc:a1:41: 8f:2a:0d:66:81:14:7a:97:81:2a:d6:52:17:94:09:38:b7:c9: 17:46:f4:01:ea:f8:ce:0b:df:40:27:82:46:0f:be:20:be:77: 19:78:a6:0b:8c:77:5a:0d:19:46:d5:85:ac:14:6b:c8:8a:bb: ad:37:f0:2a:f0:04:20:4f:fe:ed:a4:29:ee:5b:7b:b6:b4:99: c8:5f:b0:dd:07:4f:67:6d:88:62:7a:99:29:ed:02:b3:05:68: c8:ca:e0:08:fc:c9:27:5a:53:96:b2:a8:86:65:38:78:6b:f2: 8f:d9:5e:53:83:33:8b:ce:6d:4c:02:6d:be:12:17:5b:af:76: 7b:b4:16:28:65:84:a4:43:5a:92:29:70:5f:cc:c6:ec:c7:26: dd:03:44:c6:02:df:59:3b:47:6f:44:6a:67:89:81:c3:7e:e3: 70:a4:88:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbZmIAoa1S/AD2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDhiN2VmNDQtNzgyNi00ZmE3LWI2MjktYzViZDJjY2VhNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QuCE6ilfRuHwfvh5OJrf6KX5eJEWxVSwGGX A/GyTOF4cJk8iI8J3y4Hs7k/jGIv0vJgteFmIpCYyHzdIKrfpXRU8WFacxK1vDnU rHN0TKgOMEWL7Y5iqigCrO1tzAVQKMV9m/LA3IFxSDWpCD51b9+31dAVSU3iag1z M5B6ikbYStaxYjJMjtsqhVZULhgTdsforsXK+nyEXpa/5/vLBbk7pj3HUsrBQ8ym zv6SJ1et7j+FpPjUfk/YohBC7PvBu5CTR1l6q1lbYPpTT7ATIsHq8TB1EHOIL9A4 gGCC5jJ1rkjf8H0fuSmZEe0xlQDEdBmgU36uSKeu6Q5LSd4QCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBn+UDtrHtxdHUxuszm05yOQ7khMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjdmZDM3YzctNmVlOS0z MWY5LTlkMGQtYzA3NDA1YjVkYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWGPgxmId4Q6F68Q3yTKV3etm0hTDyY/toRHWSH6b9U7cfGCU5tfU8M pwqycTjHSvFC/NqB34JUMwfgjsAlYON5F9l1zjSJMrl7H1/U7F9kVib9Ay23Vryh QY8qDWaBFHqXgSrWUheUCTi3yRdG9AHq+M4L30AngkYPviC+dxl4pguMd1oNGUbV hawUa8iKu6038CrwBCBP/u2kKe5be7a0mchfsN0HT2dtiGJ6mSntArMFaMjK4Aj8 ySdaU5ayqIZlOHhr8o/ZXlODM4vObUwCbb4SF1uvdnu0FihlhKRDWpIpcF/MxuzH Jt0DRMYC31k7R29EameJgcN+43CkiO8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:33:33 2025 by rpki-client