$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa File: a0badf70-4d82-368a-ada1-53f529a3b33b.roa (raw, json) Hash identifier: r7yrJpghg3E8eQ+O8ACEydx72l53iq+ZbSZs5AkUItw= Subject key identifier: 51:C9:98:77:9B:92:9E:DF:FE:C8:8F:E6:4F:D3:86:C8:A9:3F:3F:4F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA68EEDA0BE2080796EFC48 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.212.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:8e:ed:a0:be:20:80:79:6e:fc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=6f6d8630-7191-432c-9133-b534ae3d2552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:3b:bb:4a:e8:f5:10:e1:f3:d3:fc:0d:89: 3d:0a:66:c7:5a:e1:4d:db:f7:ec:d4:83:7f:c6:15: 82:d2:d2:76:9e:b3:b2:0f:fe:8b:27:d3:4e:e2:95: 0d:7e:82:ce:4f:1b:02:9d:a3:5e:9f:32:d5:c7:1d: 01:5b:b2:2e:25:65:5c:1f:c5:c9:b1:0a:f9:24:56: db:75:f3:93:57:de:a2:25:18:28:69:a6:25:fc:d3: 7d:60:72:24:f6:c5:ec:8c:89:36:b2:21:66:49:7d: d9:e1:cf:32:8b:c3:45:f8:ad:02:ff:82:34:9f:68: f5:6a:95:2e:65:c3:b1:37:72:ca:55:fe:f5:56:fd: 48:f7:66:0b:f4:e4:f9:f2:37:18:fc:6e:6a:b0:e6: 51:6a:f3:8b:54:b3:9a:3c:86:e2:6e:24:28:2b:8c: a1:67:0a:0b:aa:0c:cd:5b:6e:14:a5:09:e8:77:08: 12:f7:ac:5c:6e:bc:d0:e3:12:f0:b8:52:f0:e7:c7: b0:9d:48:1e:38:7a:f3:cc:21:dc:ef:ea:bf:46:dc: d7:ad:02:bd:ba:1f:f4:16:87:51:dc:99:bc:aa:08: 7b:16:18:ef:88:4e:ef:1e:5d:8c:65:19:6c:c4:e6: 2d:cf:17:21:eb:29:2e:f9:82:fd:dc:9c:e1:29:ac: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C9:98:77:9B:92:9E:DF:FE:C8:8F:E6:4F:D3:86:C8:A9:3F:3F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:96:98:d5:63:0a:c5:6b:1e:8a:66:f6:bd:36:2b:d7:f4:05: 79:8f:cb:cd:9c:e4:f9:19:43:84:19:9c:c8:47:8e:ab:f8:04: e9:73:4d:41:e1:be:a0:c6:fc:84:1a:47:55:ee:f4:09:12:86: 70:d7:fb:de:52:7b:f7:7b:a7:85:7a:35:9b:4d:9d:e5:5a:20: dc:e7:a0:e6:09:b3:6b:b6:aa:13:bb:8e:7f:ad:c3:04:91:ea: e6:70:b9:3a:b2:6e:6f:bd:51:db:a2:41:60:da:07:dc:08:f5: eb:04:9d:f4:91:22:f7:7b:a8:92:b0:36:f3:c7:62:2d:e4:ea: cf:d9:35:fc:8a:f1:e2:b6:aa:a1:d6:8f:29:8c:9d:cf:9a:f4: 0d:5c:fe:42:66:9a:84:c4:be:a2:89:13:be:43:9c:7f:38:20: 6c:b7:0c:e4:1f:a7:6a:ea:29:8f:06:04:6b:6d:9a:9a:e1:ca: 42:95:33:48:da:87:46:ff:99:2f:1c:1e:f3:c8:e1:6b:04:f1: 4c:a2:3d:3a:fd:4c:f1:62:0d:d4:41:9d:4b:f2:14:b4:9d:3a: 2f:90:b7:e6:1f:86:5f:ad:d1:81:64:ad:ec:f2:aa:65:15:60: a4:c1:7d:25:5b:6a:d2:5d:b7:c4:5d:01:84:87:22:b6:15:8b: 22:df:4c:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpo7toL4ggHlu/EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NmY2ZDg2MzAtNzE5MS00MzJjLTkxMzMtYjUzNGFlM2QyNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAids7u0ro9RDh89P8DYk9CmbHWuFN2/fs1IN/ xhWC0tJ2nrOyD/6LJ9NO4pUNfoLOTxsCnaNenzLVxx0BW7IuJWVcH8XJsQr5JFbb dfOTV96iJRgoaaYl/NN9YHIk9sXsjIk2siFmSX3Z4c8yi8NF+K0C/4I0n2j1apUu ZcOxN3LKVf71Vv1I92YL9OT58jcY/G5qsOZRavOLVLOaPIbibiQoK4yhZwoLqgzN W24UpQnodwgS96xcbrzQ4xLwuFLw58ewnUgeOHrzzCHc7+q/RtzXrQK9uh/0FodR 3Jm8qgh7FhjviE7vHl2MZRlsxOYtzxch6yku+YL93JzhKayJ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHJmHebkp7f/siP5k/ThsipPz9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTBiYWRmNzAtNGQ4Mi0z NjhhLWFkYTEtNTNmNTI5YTNiMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNS5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyWmNVjCsVrHopm9r02K9f0BXmPy82c5PkZQ4QZnMhHjqv4BOlzTUHh vqDG/IQaR1Xu9AkShnDX+95Se/d7p4V6NZtNneVaINznoOYJs2u2qhO7jn+twwSR 6uZwuTqybm+9UduiQWDaB9wI9esEnfSRIvd7qJKwNvPHYi3k6s/ZNfyK8eK2qqHW jymMnc+a9A1c/kJmmoTEvqKJE75DnH84IGy3DOQfp2rqKY8GBGttmprhykKVM0ja h0b/mS8cHvPI4WsE8UyiPTr9TPFiDdRBnUvyFLSdOi+Qt+Yfhl+t0YFkrezyqmUV YKTBfSVbatJdt8RdAYSHIrYViyLfTLk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:35 2025 by rpki-client