$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d41cb383-b1ca-394a-ba89-11cc62445a14.roa File: d41cb383-b1ca-394a-ba89-11cc62445a14.roa (raw, json) Hash identifier: zI3HZNy4JjIHwvCUsnzAzGNiOxoclxZBJfw9Od9tix8= Subject key identifier: 0A:97:F3:F9:29:40:A5:75:05:62:15:FB:2D:DB:41:48:70:B9:AD:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B7EFB94424D5B247FD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d41cb383-b1ca-394a-ba89-11cc62445a14.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.211.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b7:ef:b9:44:24:d5:b2:47:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f8fa8c4f-ab97-44af-9f98-45749f0024d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:20:35:77:2c:be:97:3c:74:bf:cc:7e:c9: 35:dd:02:1e:dc:68:24:86:b8:e4:ce:7b:2c:ea:cf: 22:64:43:fd:86:1f:34:c0:d6:12:21:b8:9d:76:91: d4:1d:e8:0f:d7:2c:43:6b:66:4b:81:cc:dc:a9:77: 73:43:a6:0a:66:40:b0:49:ee:99:a2:68:0d:17:35: f6:40:cf:80:35:c4:41:37:12:77:f7:84:b7:15:d8: ce:e6:47:5f:d6:a9:53:5f:0c:78:54:b7:12:cf:0c: 30:1f:7a:06:d7:ad:9e:01:aa:98:79:69:f9:1a:6f: b9:54:26:19:34:85:ce:f2:b9:48:c2:ed:9d:69:1e: 44:a7:dd:3e:42:30:12:47:ba:fe:17:4b:9a:66:e7: 1a:ba:5f:35:b6:23:b9:7a:2f:8d:bb:1c:53:89:93: 14:ce:48:d5:22:00:01:2f:97:e5:46:2f:5d:4a:af: e1:07:a1:8d:68:b7:9c:dc:6e:b8:02:0a:2d:c1:11: 20:69:69:1a:8e:37:2d:73:64:60:47:a5:3b:8e:d3: 83:9a:e8:f9:fd:10:24:57:93:39:55:65:47:2f:6a: 9e:c9:fd:5a:04:b4:38:32:5d:99:04:7a:40:e1:6d: dc:f9:3f:f5:f6:09:b8:f2:88:69:77:b8:cc:39:0e: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:97:F3:F9:29:40:A5:75:05:62:15:FB:2D:DB:41:48:70:B9:AD:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d41cb383-b1ca-394a-ba89-11cc62445a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:41:24:fe:35:3d:fa:b9:42:e7:48:bb:10:9a:05:4e:e7:4d: 75:00:c4:9c:8f:c6:76:77:07:03:7f:c1:37:cb:b9:c9:ae:5f: 71:20:f7:66:c2:cd:1f:d2:43:3e:09:fd:5f:52:5e:a3:09:29: 4f:a6:e7:ec:45:6a:30:80:c9:54:2b:a2:64:2d:41:e2:6e:26: d5:d0:9c:26:0d:13:1a:74:f6:52:10:fa:40:db:c9:1f:eb:b7: 73:ef:c0:29:dd:4c:78:b2:60:2a:e6:20:b6:4d:a8:32:d0:4f: fc:52:1d:86:2c:f3:e0:35:41:b5:22:77:a6:61:23:a8:3e:a9: d6:a8:b1:21:14:d0:0a:57:92:0a:64:10:fe:6e:30:7f:59:e6: ba:dc:d0:f2:a6:b8:a2:d3:47:d6:ee:db:d7:27:3d:9a:2f:5c: 69:25:bf:e0:78:aa:96:cf:ba:74:0b:1a:36:ab:27:d8:3c:e6: d6:4b:fa:01:55:f7:4b:0d:9e:0e:6e:b8:f7:f2:7f:62:1f:27: 06:5d:5c:00:3d:fe:87:f3:f2:df:c6:47:35:b7:5f:15:dc:3b: 21:4f:da:be:d6:22:3d:c9:16:17:27:39:81:ea:73:73:94:fc: e5:98:9b:d4:75:1e:03:2c:c0:cb:f5:28:f2:40:82:8e:76:9a: 4f:32:74:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbfvuUQk1bJH/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjhmYThjNGYtYWI5Ny00NGFmLTlmOTgtNDU3NDlmMDAyNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcwgNXcsvpc8dL/Mfsk13QIe3Ggkhrjkznss 6s8iZEP9hh80wNYSIbiddpHUHegP1yxDa2ZLgczcqXdzQ6YKZkCwSe6ZomgNFzX2 QM+ANcRBNxJ394S3FdjO5kdf1qlTXwx4VLcSzwwwH3oG162eAaqYeWn5Gm+5VCYZ NIXO8rlIwu2daR5Ep90+QjASR7r+F0uaZucaul81tiO5ei+NuxxTiZMUzkjVIgAB L5flRi9dSq/hB6GNaLec3G64AgotwREgaWkajjctc2RgR6U7jtODmuj5/RAkV5M5 VWVHL2qeyf1aBLQ4Ml2ZBHpA4W3c+T/19gm48ohpd7jMOQ5rcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqX8/kpQKV1BWIV+y3bQUhwua0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDQxY2IzODMtYjFjYS0z OTRhLWJhODktMTFjYzYyNDQ1YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1BJP41Pfq5QudIuxCaBU7nTXUAxJyPxnZ3BwN/wTfLucmuX3Eg92bC zR/SQz4J/V9SXqMJKU+m5+xFajCAyVQromQtQeJuJtXQnCYNExp09lIQ+kDbyR/r t3PvwCndTHiyYCrmILZNqDLQT/xSHYYs8+A1QbUid6ZhI6g+qdaosSEU0ApXkgpk EP5uMH9Z5rrc0PKmuKLTR9bu29cnPZovXGklv+B4qpbPunQLGjarJ9g85tZL+gFV 90sNng5uuPfyf2IfJwZdXAA9/ofz8t/GRzW3XxXcOyFP2r7WIj3JFhcnOYHqc3OU /OWYm9R1HgMswMv1KPJAgo52mk8ydMY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:02:58 2025 by rpki-client