$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d521ea23-5bc5-3666-be9a-4384500e3328.roa File: d521ea23-5bc5-3666-be9a-4384500e3328.roa (raw, json) Hash identifier: LyccmQRsiGJFxcIusDt42tuBwe/qjNE6U1dIksSahk4= Subject key identifier: 08:5E:B3:76:4B:6C:AA:1E:9B:50:27:2C:F0:26:BB:6A:7F:FC:29:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01AA55CCAEF606088D9880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d521ea23-5bc5-3666-be9a-4384500e3328.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:aa:55:cc:ae:f6:06:08:8d:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f08ddb20-d368-48cc-a084-7ad25670a637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e5:26:38:12:fc:f8:93:85:de:64:04:16:2f: 9c:03:89:57:43:b3:cf:fe:6f:00:37:25:92:d6:d0: 0d:2e:ad:11:b5:b2:66:58:bb:04:b2:8f:cc:d3:4a: d3:58:66:34:78:0b:47:39:eb:0b:c1:41:fb:75:57: de:56:e3:f3:0f:e7:72:ff:40:f1:e6:ea:f6:8d:d4: 57:0d:89:9b:29:59:49:39:8a:7b:99:c8:a0:fc:5b: 1a:cd:f4:c1:0d:84:b7:61:d2:a9:b7:6e:6b:40:3e: ae:55:3a:de:72:70:d3:df:c1:94:9a:a0:d0:53:5f: 55:f7:2f:15:2f:75:f8:f4:3f:c6:de:25:da:ff:f8: 2f:39:c5:7e:1e:85:b6:f1:9a:67:cd:a2:08:a9:34: a4:af:1c:1b:17:70:65:b8:57:fa:61:f0:dd:f4:1f: b1:ae:90:6c:a7:db:c0:f3:f2:df:b6:ee:35:6b:db: f0:c3:8b:ff:64:f7:a1:b1:8e:71:ce:69:4f:5e:b2: e0:d3:58:df:29:55:31:03:20:61:04:8a:19:c0:a7: fe:a0:3f:0f:78:28:f6:6c:85:98:0e:8d:fb:87:e7: 9c:b5:d2:71:b0:6c:71:9f:7c:90:37:66:a5:9d:2b: 2d:c4:44:8b:9e:b7:03:b4:ec:7b:75:e9:a7:24:33: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5E:B3:76:4B:6C:AA:1E:9B:50:27:2C:F0:26:BB:6A:7F:FC:29:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d521ea23-5bc5-3666-be9a-4384500e3328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:72:d8:4e:6a:13:af:9a:7a:b6:0a:c9:37:df:a3:3e:bc:05: 25:68:e1:71:86:e2:e7:67:8f:71:0d:78:cf:c4:0e:d4:df:b4: fd:0e:7f:f8:3b:6b:fb:62:51:d3:3c:7c:54:9c:3a:6e:78:82: 7e:d3:7e:f9:cf:a7:1c:1c:6e:88:c4:42:93:00:a0:17:39:72: db:8f:25:89:97:e5:78:32:1b:3d:03:e6:a7:34:01:c2:14:d8: 93:31:64:80:d3:a9:84:20:5f:5c:fa:44:57:f1:10:ca:ef:6c: 1b:d8:58:91:3d:be:04:77:1e:eb:2f:37:39:7b:af:e5:1f:ad: 45:48:54:a9:ca:02:4e:fc:7d:d7:0f:32:93:11:1d:95:70:09: b4:a4:07:3f:a6:8c:c8:61:17:df:b8:62:02:42:05:2a:dd:97: 41:ac:6b:5a:93:82:e8:af:20:1b:d9:18:fc:84:1a:cc:40:f3: ba:5f:b4:6a:2f:64:47:ff:90:39:39:d7:ca:79:38:0b:05:24: 9d:45:dc:bb:0a:81:5a:87:0b:76:b6:66:b8:d9:71:6f:f1:72: 51:8d:f6:84:79:b1:f1:00:53:e4:36:cd:e3:1e:c2:e7:49:09: 1a:5e:d5:d9:f0:81:06:2e:66:8a:ff:06:9e:6e:93:dd:62:b9: 8b:5e:8a:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAapVzK72BgiNmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjA4ZGRiMjAtZDM2OC00OGNjLWEwODQtN2FkMjU2NzBhNjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieUmOBL8+JOF3mQEFi+cA4lXQ7PP/m8ANyWS 1tANLq0RtbJmWLsEso/M00rTWGY0eAtHOesLwUH7dVfeVuPzD+dy/0Dx5ur2jdRX DYmbKVlJOYp7mcig/FsazfTBDYS3YdKpt25rQD6uVTrecnDT38GUmqDQU19V9y8V L3X49D/G3iXa//gvOcV+HoW28ZpnzaIIqTSkrxwbF3BluFf6YfDd9B+xrpBsp9vA 8/Lftu41a9vww4v/ZPehsY5xzmlPXrLg01jfKVUxAyBhBIoZwKf+oD8PeCj2bIWY Do37h+ectdJxsGxxn3yQN2alnSstxESLnrcDtOx7demnJDPA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhes3ZLbKoem1AnLPAmu2p//CmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDUyMWVhMjMtNWJjNS0z NjY2LWJlOWEtNDM4NDUwMGUzMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIly2E5qE6+aerYKyTffoz68BSVo4XGG4udnj3ENeM/EDtTftP0Of/g7 a/tiUdM8fFScOm54gn7TfvnPpxwcbojEQpMAoBc5ctuPJYmX5XgyGz0D5qc0AcIU 2JMxZIDTqYQgX1z6RFfxEMrvbBvYWJE9vgR3HusvNzl7r+UfrUVIVKnKAk78fdcP MpMRHZVwCbSkBz+mjMhhF9+4YgJCBSrdl0Gsa1qTguivIBvZGPyEGsxA87pftGov ZEf/kDk518p5OAsFJJ1F3LsKgVqHC3a2ZrjZcW/xclGN9oR5sfEAU+Q2zeMewudJ CRpe1dnwgQYuZor/Bp5uk91iuYteio0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:31:15 2025 by rpki-client