$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8f07685-0067-3a1e-9787-54daae0b7a84.roa File: a8f07685-0067-3a1e-9787-54daae0b7a84.roa (raw, json) Hash identifier: NfjKYhPfBYJSNmBwdT2o9KEgtWk4Qci0y9uQVurDJtA= Subject key identifier: 67:47:87:F9:05:43:9C:5B:EF:33:C8:43:CA:0C:19:D9:63:1E:EC:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B16F70FDDF64AE577350 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8f07685-0067-3a1e-9787-54daae0b7a84.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b1:6f:70:fd:df:64:ae:57:73:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=979b830c-8cfd-4b84-a2b0-7b8f158314a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:d6:e1:a4:63:d3:1b:6b:e8:24:78:33:a0: c1:9f:28:38:5c:47:a7:47:92:a7:fc:03:3e:2d:58: 9b:5c:2d:be:bd:13:9d:7c:48:42:75:6e:30:90:bd: f4:f8:8d:0e:a0:4e:6e:77:ec:0e:45:0a:25:42:79: 02:38:03:43:3e:62:c6:a7:ff:bf:d0:2c:34:83:c7: 6c:cf:6f:82:b6:f0:99:57:56:fc:14:ea:66:28:c9: fb:0f:89:f8:ee:4b:8b:e3:5f:69:f7:f8:ca:fc:a0: cb:79:6e:09:8b:3e:92:28:4f:21:07:2a:10:12:f4: 03:4a:23:f5:8a:91:0f:eb:29:a2:98:26:80:3a:30: ea:1e:94:a8:e8:62:ae:78:58:61:15:67:2d:7d:cc: cb:0a:86:ea:30:f1:64:18:87:35:20:69:6f:f0:65: 4c:bf:18:03:3d:2a:79:ec:a0:f6:f6:f7:19:d0:21: 55:48:84:a9:c4:c9:d3:56:d1:11:73:70:03:8e:8b: 52:98:17:4c:a2:a9:50:b4:1b:b9:de:77:47:3a:75: aa:a1:21:72:f7:a3:7f:e3:3f:f8:97:0a:20:46:d4: 5a:09:1d:c6:f7:ca:1f:1c:f3:d6:64:12:cb:bc:07: 5e:71:61:e5:43:48:37:75:27:6d:e0:03:62:5e:e9: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:47:87:F9:05:43:9C:5B:EF:33:C8:43:CA:0C:19:D9:63:1E:EC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8f07685-0067-3a1e-9787-54daae0b7a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9b:10:a5:4e:5e:34:e8:ce:df:ce:dc:70:93:1a:30:31:be: 6f:72:52:04:10:87:bd:12:83:95:6a:44:75:95:82:25:c2:16: 80:02:74:b1:b3:cd:5f:61:e4:6b:1f:9b:ff:b3:a5:7e:94:56: b5:34:73:d1:2f:9b:ff:a6:76:0d:4e:9c:c0:ec:d5:8c:6d:06: 66:03:ff:24:05:5e:d5:99:24:8b:05:89:35:dc:be:17:b0:a6: f2:67:91:38:a3:69:2d:a8:3a:4d:a7:9d:43:21:4f:ef:46:71: 06:ad:8e:6b:b5:22:9d:82:ae:fe:8c:40:9b:a3:e1:11:cd:15: d3:18:5b:6a:af:88:32:0d:be:6e:92:dd:1b:89:27:aa:c8:03: 36:1b:90:1f:08:aa:c9:c6:d5:1e:7c:3a:8d:b3:11:33:6d:fd: 56:91:d4:1b:fb:7e:d3:75:d0:44:8e:ce:07:b1:3e:25:86:88: 5f:d5:66:a7:a3:e7:89:72:0e:0f:02:13:20:97:51:f9:03:dd: c6:18:fc:50:be:b3:2d:49:56:54:32:0d:3a:a2:2c:66:33:3a: bd:46:c1:af:b4:ea:5e:dc:6b:8f:35:d8:8a:cf:c5:d1:50:ad: b8:4d:6c:c8:be:1e:bc:f9:2e:2d:f8:d0:2e:d6:13:e7:61:93: 89:59:43:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbFvcP3fZK5Xc1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTc5YjgzMGMtOGNmZC00Yjg0LWEyYjAtN2I4ZjE1ODMxNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfLW4aRj0xtr6CR4M6DBnyg4XEenR5Kn/AM+ LVibXC2+vROdfEhCdW4wkL30+I0OoE5ud+wORQolQnkCOANDPmLGp/+/0Cw0g8ds z2+CtvCZV1b8FOpmKMn7D4n47kuL419p9/jK/KDLeW4Jiz6SKE8hByoQEvQDSiP1 ipEP6ymimCaAOjDqHpSo6GKueFhhFWctfczLCobqMPFkGIc1IGlv8GVMvxgDPSp5 7KD29vcZ0CFVSISpxMnTVtERc3ADjotSmBdMoqlQtBu53ndHOnWqoSFy96N/4z/4 lwogRtRaCR3G98ofHPPWZBLLvAdecWHlQ0g3dSdt4ANiXunu+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdHh/kFQ5xb7zPIQ8oMGdljHuxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYThmMDc2ODUtMDA2Ny0z YTFlLTk3ODctNTRkYWFlMGI3YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGbEKVOXjTozt/O3HCTGjAxvm9yUgQQh70Sg5VqRHWVgiXCFoACdLGz zV9h5Gsfm/+zpX6UVrU0c9Evm/+mdg1OnMDs1YxtBmYD/yQFXtWZJIsFiTXcvhew pvJnkTijaS2oOk2nnUMhT+9GcQatjmu1Ip2Crv6MQJuj4RHNFdMYW2qviDINvm6S 3RuJJ6rIAzYbkB8IqsnG1R58Oo2zETNt/VaR1Bv7ftN10ESOzgexPiWGiF/VZqej 54lyDg8CEyCXUfkD3cYY/FC+sy1JVlQyDTqiLGYzOr1Gwa+06l7ca4812IrPxdFQ rbhNbMi+Hrz5Li340C7WE+dhk4lZQwY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:24:15 2025 by rpki-client