$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41886d4c-b41c-3d6e-997b-10cfd1cba2e9.roa File: 41886d4c-b41c-3d6e-997b-10cfd1cba2e9.roa (raw, json) Hash identifier: +jSdtVMxRXGrRsDFTJbQOMVN8jtt/CBROIxOlPEiFH0= Subject key identifier: 51:9F:5B:10:F7:A6:8E:8E:77:32:B5:71:96:11:C7:84:E4:E2:DB:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BC56C101FA6F69AC8180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41886d4c-b41c-3d6e-997b-10cfd1cba2e9.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.216.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:bc:56:c1:01:fa:6f:69:ac:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=2bd5a725-8871-4f48-9c52-5f46d3a305ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:8a:e3:b5:0f:4b:34:59:31:9a:f0:62:41: 58:b6:1d:8f:b8:72:ef:95:07:de:c2:a5:7e:f8:f4: 2e:68:80:23:1d:42:49:40:4a:36:35:82:c9:91:78: 54:6a:bf:1e:ee:bc:b2:8e:9a:b1:a6:59:fc:5a:a6: 07:51:2a:45:56:3a:6d:2f:d5:d9:50:7f:25:82:db: da:15:5b:e9:16:6f:c3:ac:c8:65:7f:fd:13:f8:90: bc:b7:b8:43:6b:b5:bb:89:da:c2:86:d8:04:2f:96: 98:0d:17:56:30:26:5a:70:e3:28:70:21:91:13:10: b9:70:91:cc:8e:03:e5:b5:5f:53:af:bc:cd:62:85: 03:ee:b3:ee:1d:49:3e:e4:e2:cb:2d:0a:6f:cd:63: 0a:1f:f4:0d:85:12:db:72:07:07:51:0c:7e:bc:a8: ae:38:71:68:ba:d2:42:f8:35:0e:6c:60:00:2a:d7: fa:cc:9b:cb:b7:8b:ff:1a:fc:73:87:68:1e:4b:0f: 9f:28:05:e3:c2:b9:cb:f1:b6:12:9d:0d:50:f6:fa: 8b:d1:f6:4d:13:b0:eb:4c:26:e2:5f:bb:ef:50:63: ab:bb:05:e0:03:1f:95:40:0a:6a:ba:76:3f:fb:fb: e8:05:75:fc:e7:ab:cc:12:0e:c9:b8:e6:51:fb:bc: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9F:5B:10:F7:A6:8E:8E:77:32:B5:71:96:11:C7:84:E4:E2:DB:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41886d4c-b41c-3d6e-997b-10cfd1cba2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d1:4e:4f:09:c2:b3:d9:7d:0c:79:66:0a:9a:9f:09:e0:cb: a3:3c:a8:03:7e:99:99:96:c2:e5:32:85:71:60:49:e7:38:fd: 8f:66:d8:61:dc:e2:c4:ff:f4:d5:87:09:b1:41:46:0e:8a:1a: 28:61:99:98:26:77:c5:d7:6c:f4:23:0e:df:5a:40:96:d8:33: 11:64:62:78:88:81:ff:e7:94:c3:37:2f:8d:c7:03:84:99:d0: 84:51:20:47:83:8b:3a:23:51:f0:61:51:d8:86:84:6d:83:1e: 9a:2e:16:5c:8f:4d:a2:89:0f:9c:d5:60:2d:45:fd:94:be:6e: 84:fe:00:64:37:9c:fa:e8:ba:3e:c2:2e:3d:9c:bf:35:c7:2e: 47:f3:b4:d3:f9:f2:ae:8f:f3:52:84:2a:92:d8:c4:4f:3e:5d: 80:af:ed:50:1f:34:b2:28:ce:dd:c8:72:39:80:55:f3:34:6b: 82:29:ce:6f:f3:6c:59:fe:b3:00:32:7c:07:56:72:15:68:90: d0:f1:cc:31:3d:fd:3a:64:b7:7a:cc:e6:d2:ca:bc:bc:62:9f: 0e:59:34:c4:78:45:99:3d:a0:e3:e0:11:b1:41:4f:98:a9:61: ec:23:e8:7b:92:e3:7b:d1:6d:c0:f4:33:f9:0b:5f:ee:c0:4e: 8b:e7:8f:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbxWwQH6b2msgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MmJkNWE3MjUtODg3MS00ZjQ4LTljNTItNWY0NmQzYTMwNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiamK47UPSzRZMZrwYkFYth2PuHLvlQfewqV+ +PQuaIAjHUJJQEo2NYLJkXhUar8e7ryyjpqxpln8WqYHUSpFVjptL9XZUH8lgtva FVvpFm/DrMhlf/0T+JC8t7hDa7W7idrChtgEL5aYDRdWMCZacOMocCGRExC5cJHM jgPltV9Tr7zNYoUD7rPuHUk+5OLLLQpvzWMKH/QNhRLbcgcHUQx+vKiuOHFoutJC +DUObGAAKtf6zJvLt4v/Gvxzh2geSw+fKAXjwrnL8bYSnQ1Q9vqL0fZNE7DrTCbi X7vvUGOruwXgAx+VQApqunY/+/voBXX856vMEg7JuOZR+7xVGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGfWxD3po6OdzK1cZYRx4Tk4ttgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDE4ODZkNGMtYjQxYy0z ZDZlLTk5N2ItMTBjZmQxY2JhMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfRTk8JwrPZfQx5Zgqanwngy6M8qAN+mZmWwuUyhXFgSec4/Y9m2GHc 4sT/9NWHCbFBRg6KGihhmZgmd8XXbPQjDt9aQJbYMxFkYniIgf/nlMM3L43HA4SZ 0IRRIEeDizojUfBhUdiGhG2DHpouFlyPTaKJD5zVYC1F/ZS+boT+AGQ3nProuj7C Lj2cvzXHLkfztNP58q6P81KEKpLYxE8+XYCv7VAfNLIozt3IcjmAVfM0a4Ipzm/z bFn+swAyfAdWchVokNDxzDE9/Tpkt3rM5tLKvLxinw5ZNMR4RZk9oOPgEbFBT5ip Yewj6HuS43vRbcD0M/kLX+7ATovnj5M= -----END CERTIFICATE-----Generated at Wed Nov 5 06:11:05 2025 by rpki-client