$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d570eaa9-976c-32a5-8869-be8c3cea6c36.roa File: d570eaa9-976c-32a5-8869-be8c3cea6c36.roa (raw, json) Hash identifier: hG8I2HrXbFupD5h13MRZAhbiA123OmJldGsZH6NrDpY= Subject key identifier: FD:1C:C5:DB:50:46:8E:31:5D:C5:8C:60:0F:A7:7B:2D:83:4C:1A:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C774CC034CB165818400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d570eaa9-976c-32a5-8869-be8c3cea6c36.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.221.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c7:74:cc:03:4c:b1:65:81:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=8b554178-ad90-48be-be68-0eec6ffc9522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5b:e0:f1:d4:25:83:4c:aa:e2:8c:de:f1:b2: 65:c2:f6:91:3b:cf:e8:33:85:b1:a4:bd:74:e9:fa: 19:22:78:3e:bd:dc:7c:4a:5a:a3:f9:15:2a:51:c6: 13:73:64:11:f1:01:73:af:57:e5:4c:bb:9c:f3:7b: 2c:79:ef:1b:c4:5f:80:d4:6a:28:9f:8f:ca:46:94: 63:03:6f:75:15:dc:7d:de:e9:d8:d4:fe:e9:be:0c: 5f:bb:78:cd:84:eb:1e:dd:35:ef:15:df:21:6d:b7: 63:1a:76:32:31:b3:71:56:25:11:96:39:2e:19:e0: d5:a3:54:ca:a5:56:a5:89:b3:4b:a9:ff:67:e6:74: 19:94:ea:2e:e3:8d:6d:1a:ed:94:ec:a4:ee:0a:7d: ab:f4:b5:25:2e:a9:84:18:94:73:72:8a:4e:55:2c: f0:65:65:b9:52:91:3c:f6:ab:7f:7d:cb:00:05:a0: 63:a3:71:bd:cd:9d:6e:53:a4:e8:09:af:15:dc:ee: 99:3a:01:d4:80:5e:32:a5:18:56:e4:07:21:69:f7: b9:4b:29:27:a2:ea:bd:cf:4d:5e:da:31:78:c4:fc: 9b:db:1d:c2:4e:54:86:89:48:27:ac:65:3e:b1:95: 60:35:5a:54:0f:10:73:f3:3f:06:7b:64:67:98:f2: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1C:C5:DB:50:46:8E:31:5D:C5:8C:60:0F:A7:7B:2D:83:4C:1A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d570eaa9-976c-32a5-8869-be8c3cea6c36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:86:08:70:2b:2a:44:44:ab:f4:ca:28:73:83:0a:45:96:9d: b0:49:93:36:7f:d1:a1:6e:b8:2e:e0:c2:da:39:59:6e:1f:21: de:d0:8c:a0:d2:4e:d9:ef:88:64:a9:6c:55:c3:1e:48:47:0b: a8:b0:bc:65:91:b6:d4:cb:ae:f1:84:b2:6a:11:f8:83:6d:f9: f0:16:26:95:aa:5f:e1:5b:1c:69:c5:ba:aa:01:e3:4f:d9:82: 46:1c:85:55:a3:38:60:a4:9a:da:93:45:36:48:04:f0:92:69: c5:05:2d:0d:4d:04:28:79:46:2d:a3:88:ba:3e:00:f7:91:4a: 30:6f:d2:3b:6a:ad:9b:39:d1:e9:4b:a0:8c:ba:03:7e:09:20: 95:f9:13:54:1f:1a:5c:53:bb:4f:4d:0d:65:90:f0:a2:a6:4f: 22:3c:38:0f:4e:9e:e8:85:cb:67:f9:2c:c4:8b:58:e6:96:a1: 5f:cd:5a:e9:e1:b7:bc:62:df:cc:33:91:6b:51:c3:76:25:5b: 9f:1b:93:e0:0b:e6:fc:7d:07:ef:c5:10:38:77:36:ec:42:c8: 2f:7a:97:e3:5c:1d:20:f4:11:29:c7:7e:8f:29:35:41:1a:bc: 3a:31:1e:8f:a8:4b:29:fe:c0:fe:48:02:60:55:6f:bc:81:af: f7:03:1b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcd0zANMsWWBhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OGI1NTQxNzgtYWQ5MC00OGJlLWJlNjgtMGVlYzZmZmM5NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1vg8dQlg0yq4oze8bJlwvaRO8/oM4WxpL10 6foZIng+vdx8Slqj+RUqUcYTc2QR8QFzr1flTLuc83ssee8bxF+A1Goon4/KRpRj A291Fdx93unY1P7pvgxfu3jNhOse3TXvFd8hbbdjGnYyMbNxViURljkuGeDVo1TK pValibNLqf9n5nQZlOou441tGu2U7KTuCn2r9LUlLqmEGJRzcopOVSzwZWW5UpE8 9qt/fcsABaBjo3G9zZ1uU6ToCa8V3O6ZOgHUgF4ypRhW5Achafe5Syknouq9z01e 2jF4xPyb2x3CTlSGiUgnrGU+sZVgNVpUDxBz8z8Ge2RnmPKkYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0cxdtQRo4xXcWMYA+ney2DTBrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDU3MGVhYTktOTc2Yy0z MmE1LTg4NjktYmU4YzNjZWE2YzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWGCHArKkREq/TKKHODCkWWnbBJkzZ/0aFuuC7gwto5WW4fId7QjKDS TtnviGSpbFXDHkhHC6iwvGWRttTLrvGEsmoR+INt+fAWJpWqX+FbHGnFuqoB40/Z gkYchVWjOGCkmtqTRTZIBPCSacUFLQ1NBCh5Ri2jiLo+APeRSjBv0jtqrZs50elL oIy6A34JIJX5E1QfGlxTu09NDWWQ8KKmTyI8OA9OnuiFy2f5LMSLWOaWoV/NWunh t7xi38wzkWtRw3YlW58bk+AL5vx9B+/FEDh3NuxCyC96l+NcHSD0ESnHfo8pNUEa vDoxHo+oSyn+wP5IAmBVb7yBr/cDG+Q= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:47 2025 by rpki-client