$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2bed6696-8872-3356-a45a-3f62bdf208c7.roa File: 2bed6696-8872-3356-a45a-3f62bdf208c7.roa (raw, json) Hash identifier: skRIrS5Y5bb0UJDA3cWr5HhF5V32EIW5qxu6vmI46Ao= Subject key identifier: 98:C0:62:44:50:BF:C8:BB:5C:75:79:4E:D5:56:5C:64:A4:A8:0D:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F240770DAD127853D091F0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2bed6696-8872-3356-a45a-3f62bdf208c7.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:40:77:0d:ad:12:78:53:d0:91:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c81eb530-b644-4add-9352-adc0533c3120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:36:bb:05:58:7f:88:e4:dd:26:ae:ef:09:87: 4f:f6:75:d7:b6:2c:91:3b:a1:e1:77:c1:52:4c:0f: 61:83:d2:43:8b:8a:72:b1:53:36:86:dd:2b:59:d3: b9:01:14:a9:7a:62:62:ae:c0:90:8c:46:be:50:ea: 5c:89:cf:5f:49:82:85:8a:d2:83:b9:86:33:db:2c: ab:f7:cd:86:98:c8:43:ee:33:bf:dc:47:52:e5:97: da:10:75:a2:25:3d:27:de:73:4a:a9:2c:0b:5e:ed: 99:ad:ca:ea:e4:16:1d:b8:23:09:e2:e6:f4:2a:23: 04:02:22:8b:aa:78:8b:02:be:4a:4d:e3:2a:50:ba: 4f:71:1c:a8:91:eb:ed:58:2c:de:31:fd:07:a3:9c: 10:07:d9:e7:57:70:48:6b:2b:97:d3:df:2b:bf:bc: 1e:e7:c0:5d:80:94:28:f7:ef:8c:f2:e2:c3:40:8e: 07:7d:69:4a:d2:e4:80:1b:a7:66:56:aa:2e:99:78: 64:f9:75:e9:24:49:d4:09:d1:36:9a:5f:73:98:04: e3:08:79:b9:10:d3:b9:fd:98:4c:70:ec:e2:b1:36: f2:a4:fb:80:5a:dc:35:de:85:b2:ae:1e:ac:f0:d8: 77:69:b9:57:99:3c:d1:cc:26:f6:09:c4:b7:df:70: 55:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C0:62:44:50:BF:C8:BB:5C:75:79:4E:D5:56:5C:64:A4:A8:0D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2bed6696-8872-3356-a45a-3f62bdf208c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:00:2e:db:4e:2a:ce:2a:11:52:f9:78:5a:59:b9:98:2b:b4: 56:9d:cd:75:0b:7f:1b:d3:be:0b:66:a1:81:7b:ae:7f:91:a4: 2d:ed:b7:1c:63:09:4c:d6:f8:05:a3:98:c2:76:50:18:45:2f: 6b:6d:41:3f:f2:01:87:e2:c7:6a:62:71:b9:8c:2a:f3:f7:25: 8e:d6:e6:58:39:32:99:7b:26:c7:3f:9b:ad:36:40:03:7d:1c: 4a:d4:cb:da:69:f2:91:28:0e:64:24:9a:74:05:e0:c5:34:b9: f8:81:ed:31:2f:d2:6c:49:2a:8e:d8:d7:b6:ec:79:a8:8b:de: 84:c9:7d:97:d0:75:94:63:69:a0:ac:3d:17:59:c0:49:a7:b3: 49:e7:2f:d1:8b:c1:9d:33:2b:9d:04:b6:3c:aa:17:56:3c:c2: 93:c6:f9:ca:4d:52:64:7e:cd:5a:09:ae:4f:61:43:91:75:06: c4:24:9d:29:53:39:1a:23:a8:79:2a:0c:2e:85:6b:97:39:11: 52:6c:fd:fc:6e:7d:51:0f:58:31:1b:04:50:55:81:d4:25:84: 3f:72:4a:73:2f:37:11:f2:5d:1d:74:98:f2:d6:22:35:20:99: c3:48:d5:10:e8:6c:35:45:90:2e:c6:be:8f:68:3a:79:c6:79: ff:7e:4e:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kB3Da0SeFPQkfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzgxZWI1MzAtYjY0NC00YWRkLTkzNTItYWRjMDUzM2MzMTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDa7BVh/iOTdJq7vCYdP9nXXtiyRO6Hhd8FS TA9hg9JDi4pysVM2ht0rWdO5ARSpemJirsCQjEa+UOpcic9fSYKFitKDuYYz2yyr 982GmMhD7jO/3EdS5ZfaEHWiJT0n3nNKqSwLXu2Zrcrq5BYduCMJ4ub0KiMEAiKL qniLAr5KTeMqULpPcRyokevtWCzeMf0Ho5wQB9nnV3BIayuX098rv7we58BdgJQo 9++M8uLDQI4HfWlK0uSAG6dmVqoumXhk+XXpJEnUCdE2ml9zmATjCHm5ENO5/ZhM cOzisTbypPuAWtw13oWyrh6s8Nh3ablXmTzRzCb2CcS333BVsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjAYkRQv8i7XHV5TtVWXGSkqA3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmJlZDY2OTYtODg3Mi0z MzU2LWE0NWEtM2Y2MmJkZjIwOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgALttOKs4qEVL5eFpZuZgrtFadzXULfxvTvgtmoYF7rn+RpC3ttxxj CUzW+AWjmMJ2UBhFL2ttQT/yAYfix2picbmMKvP3JY7W5lg5Mpl7Jsc/m602QAN9 HErUy9pp8pEoDmQkmnQF4MU0ufiB7TEv0mxJKo7Y17bseaiL3oTJfZfQdZRjaaCs PRdZwEmns0nnL9GLwZ0zK50EtjyqF1Y8wpPG+cpNUmR+zVoJrk9hQ5F1BsQknSlT ORojqHkqDC6Fa5c5EVJs/fxufVEPWDEbBFBVgdQlhD9ySnMvNxHyXR10mPLWIjUg mcNI1RDobDVFkC7Gvo9oOnnGef9+TpQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:49 2025 by rpki-client