$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00fdd7e0-3b55-369e-8d0f-9317dced837e.roa File: 00fdd7e0-3b55-369e-8d0f-9317dced837e.roa (raw, json) Hash identifier: 3SlW4gSInMpcSmTHXBdIyuiTdlFLwK6MN84TIBDCj+c= Subject key identifier: 85:9E:AE:23:1E:A6:1C:3D:45:A2:DD:61:4D:FB:2C:87:3C:D4:DC:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C0AB59B1EEF3BF0E6F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00fdd7e0-3b55-369e-8d0f-9317dced837e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.217.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c0:ab:59:b1:ee:f3:bf:0e:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=c31beb2a-7b87-4d36-bd51-73a07e27b9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:99:d7:48:ef:21:2b:9e:de:b2:2f:bc:5f:e8: f2:c6:81:92:80:af:1f:1b:8e:b4:92:f0:3d:20:9e: 1b:0b:1e:e3:06:69:9d:20:87:7d:4b:05:9c:17:9e: 62:c3:c2:93:dc:cb:00:cb:22:31:67:14:2b:d2:95: e4:e8:82:ed:02:46:5d:de:24:d1:ca:38:0c:f6:e0: 4d:dd:d6:ae:43:71:88:d0:5f:aa:32:9e:7a:01:b6: 83:ab:2d:37:48:b1:d2:68:50:29:c4:05:43:96:78: d2:1f:3b:8f:c5:1f:44:10:89:52:52:6b:0e:e1:f6: 94:ad:01:c0:6c:87:8f:d7:8b:0d:86:43:40:bb:a3: 3a:ff:0e:8e:57:32:f6:39:b3:9a:2d:ed:48:67:e0: bf:94:e4:e8:bf:f8:5a:03:4a:71:d8:38:14:72:09: d0:8a:0f:b0:27:69:f2:68:6b:aa:0d:82:27:b7:d3: 6a:9d:6d:01:59:1e:51:b0:e3:d3:ae:17:43:7c:9c: 3d:af:61:83:d8:20:3c:f5:95:f5:0a:15:5b:9c:0a: 70:74:66:a5:10:c4:c3:cb:ef:02:e5:b9:bc:43:e0: 71:41:7b:48:8c:dc:0b:3b:40:4f:95:63:11:2a:b7: e1:5a:25:50:88:be:4a:fc:43:01:33:83:65:bd:14: 60:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:AE:23:1E:A6:1C:3D:45:A2:DD:61:4D:FB:2C:87:3C:D4:DC:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00fdd7e0-3b55-369e-8d0f-9317dced837e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d1:a5:26:b8:c1:fc:cb:44:ce:98:55:70:9c:6b:a1:81:00: 59:b5:8f:da:21:e2:57:33:41:f8:9b:4a:9f:37:9b:38:dc:ac: 95:2e:16:79:17:a1:bd:e6:e0:19:fe:31:c6:f5:31:9c:1a:83: 28:dd:d4:e0:fb:f6:e4:60:a8:ff:45:92:c7:5f:d1:b9:54:d6: b7:43:37:1e:3c:16:a9:68:74:f1:44:08:d3:42:6b:c8:f5:ab: 4b:d7:e1:40:aa:5f:ad:48:cc:24:eb:dd:30:98:48:ff:30:13: 63:0d:ae:ed:d8:7a:8a:c6:8a:d8:c9:dc:09:69:5f:cd:c1:95: 13:f5:ed:1c:1f:05:70:c5:53:16:45:73:87:f9:e5:cc:9e:3d: d0:b1:01:af:aa:3e:38:bd:26:64:57:aa:bf:e0:a6:a0:03:04: 8f:3f:98:31:c8:33:29:62:d6:3b:66:b6:b1:56:d3:6f:ba:ab: 96:c3:50:c5:5b:66:66:fd:b2:44:6b:5a:20:ce:d2:33:87:9d: 81:7c:5d:0f:35:ac:6f:af:d8:29:d1:ee:d7:49:af:3b:24:7d: 6e:88:c3:1a:c4:b3:4c:64:c4:13:14:8c:c0:25:c9:bd:70:bc: 4c:52:ac:7a:93:ab:97:05:a3:40:d8:24:88:08:c2:82:ec:ef: e8:c0:dc:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcCrWbHu878ObwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzMxYmViMmEtN2I4Ny00ZDM2LWJkNTEtNzNhMDdlMjdiOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5nXSO8hK57esi+8X+jyxoGSgK8fG460kvA9 IJ4bCx7jBmmdIId9SwWcF55iw8KT3MsAyyIxZxQr0pXk6ILtAkZd3iTRyjgM9uBN 3dauQ3GI0F+qMp56AbaDqy03SLHSaFApxAVDlnjSHzuPxR9EEIlSUmsO4faUrQHA bIeP14sNhkNAu6M6/w6OVzL2ObOaLe1IZ+C/lOTov/haA0px2DgUcgnQig+wJ2ny aGuqDYInt9NqnW0BWR5RsOPTrhdDfJw9r2GD2CA89ZX1ChVbnApwdGalEMTDy+8C 5bm8Q+BxQXtIjNwLO0BPlWMRKrfhWiVQiL5K/EMBM4NlvRRgTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWeriMephw9RaLdYU37LIc81NztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDBmZGQ3ZTAtM2I1NS0z NjllLThkMGYtOTMxN2RjZWQ4MzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrRpSa4wfzLRM6YVXCca6GBAFm1j9oh4lczQfibSp83mzjcrJUuFnkX ob3m4Bn+Mcb1MZwagyjd1OD79uRgqP9Fksdf0blU1rdDNx48FqlodPFECNNCa8j1 q0vX4UCqX61IzCTr3TCYSP8wE2MNru3YeorGitjJ3AlpX83BlRP17RwfBXDFUxZF c4f55cyePdCxAa+qPji9JmRXqr/gpqADBI8/mDHIMyli1jtmtrFW02+6q5bDUMVb Zmb9skRrWiDO0jOHnYF8XQ81rG+v2CnR7tdJrzskfW6IwxrEs0xkxBMUjMAlyb1w vExSrHqTq5cFo0DYJIgIwoLs7+jA3P0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:51 2025 by rpki-client