$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17ffbe0d-27bc-3745-9584-628ee5778ae6.roa File: 17ffbe0d-27bc-3745-9584-628ee5778ae6.roa (raw, json) Hash identifier: OvtDyb3ETX2NdLMfEhiSP/V/VWppiUy0YoudEUPbVQM= Subject key identifier: 30:57:43:45:D8:8E:D2:F0:E7:0C:40:D6:41:7E:FD:2A:63:60:58:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9CA42DCB63C38B2B325B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17ffbe0d-27bc-3745-9584-628ee5778ae6.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 174.72.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:a4:2d:cb:63:c3:8b:2b:32:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=0455ea89-278b-4f39-a5a6-ce8ef5e2ade5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:9f:f6:69:d0:52:ac:a4:7c:a7:ef:d7:af: 22:fd:1d:7b:1b:62:55:24:40:e8:3f:1e:8b:77:88: bf:da:a3:16:cb:54:14:b4:38:ae:c6:ed:87:33:ee: 0c:da:9c:8d:06:0b:ac:b1:1d:e7:a1:f5:f7:e1:25: 38:05:70:ae:e5:a9:ed:34:e1:d1:c3:3d:81:29:f3: 97:0b:0c:09:83:05:04:64:b1:f0:51:8a:7e:1c:15: 29:38:9f:62:4f:35:06:c2:13:65:57:5f:4e:74:1f: 00:6a:33:2c:0f:61:59:b6:bd:ec:9f:6c:3c:7d:8c: 2a:e8:e4:f0:80:08:63:70:83:d5:47:77:07:6d:9b: 5b:24:cf:b1:e0:71:8d:86:38:b5:d5:c8:42:8a:84: 6f:90:31:09:4b:8f:dd:c3:0d:1d:a6:88:84:87:14: 55:f9:89:9d:0e:fa:c9:dc:4f:67:01:0c:4f:c5:75: ea:70:ac:2a:c8:7d:df:5d:ab:b8:78:26:38:80:5b: 3e:49:19:75:66:2a:a3:f3:cc:97:03:8a:db:7d:02: 54:a5:a1:ef:77:ef:d5:18:5f:e1:f8:d4:87:b0:91: 75:50:1a:f1:34:e0:6e:4b:31:a0:66:27:fd:48:e4: a2:97:cd:4c:0f:8b:85:72:71:ac:19:f8:38:d7:bc: 00:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:57:43:45:D8:8E:D2:F0:E7:0C:40:D6:41:7E:FD:2A:63:60:58:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17ffbe0d-27bc-3745-9584-628ee5778ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8f:b5:81:44:82:fc:2f:fe:f8:d7:dc:a7:7b:5d:bd:10:50: e2:6f:96:e9:3c:72:fc:cd:39:57:76:67:b7:0d:f8:5b:ea:33: 09:be:92:b5:3c:ef:c5:78:39:60:db:8b:40:d3:6b:49:dc:28: 11:7b:af:85:a1:ca:03:60:2d:81:31:d6:d5:85:ea:e1:33:b2: 81:3e:cc:e7:4b:fd:78:b2:73:29:f4:4d:8c:8f:2a:d0:55:69: 27:31:21:b4:ad:76:59:ac:eb:1e:44:df:76:26:15:5e:ba:4f: ca:d3:9f:02:11:33:a4:8d:00:e3:24:45:2f:b0:7d:20:e1:9a: 5f:57:5a:48:62:c8:1d:7c:2a:43:48:5f:eb:e1:57:22:d0:d6: 48:6f:0a:c6:68:92:3f:e3:7b:8d:fc:f3:64:aa:88:1d:9e:a5: 8f:b3:dc:28:68:6c:73:b0:e4:9b:41:c4:4f:ca:b9:b5:3d:f3: 96:f2:d0:a9:98:04:39:68:21:c4:30:5d:cf:a5:f7:0f:10:21: ff:b1:8c:64:86:93:b1:5e:70:04:2e:7c:b5:31:cd:58:88:3d: 2e:90:f2:8a:80:86:b3:70:8b:e1:b4:53:23:cf:d8:95:94:c7: 63:e0:13:22:3e:b2:f1:65:09:97:e9:28:ec:ab:27:b3:88:cd: 26:46:de:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnKQty2PDiysyWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MDQ1NWVhODktMjc4Yi00ZjM5LWE1YTYtY2U4ZWY1ZTJhZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsCf9mnQUqykfKfv168i/R17G2JVJEDoPx6L d4i/2qMWy1QUtDiuxu2HM+4M2pyNBgussR3nofX34SU4BXCu5antNOHRwz2BKfOX CwwJgwUEZLHwUYp+HBUpOJ9iTzUGwhNlV19OdB8AajMsD2FZtr3sn2w8fYwq6OTw gAhjcIPVR3cHbZtbJM+x4HGNhji11chCioRvkDEJS4/dww0dpoiEhxRV+YmdDvrJ 3E9nAQxPxXXqcKwqyH3fXau4eCY4gFs+SRl1Ziqj88yXA4rbfQJUpaHvd+/VGF/h +NSHsJF1UBrxNOBuSzGgZif9SOSil81MD4uFcnGsGfg417wAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBXQ0XYjtLw5wxA1kF+/SpjYFhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTdmZmJlMGQtMjdiYy0z NzQ1LTk1ODQtNjI4ZWU1Nzc4YWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKPtYFEgvwv/vjX3Kd7Xb0QUOJvluk8cvzNOVd2Z7cN+FvqMwm+krU8 78V4OWDbi0DTa0ncKBF7r4WhygNgLYEx1tWF6uEzsoE+zOdL/Xiycyn0TYyPKtBV aScxIbStdlms6x5E33YmFV66T8rTnwIRM6SNAOMkRS+wfSDhml9XWkhiyB18KkNI X+vhVyLQ1khvCsZokj/je43882SqiB2epY+z3ChobHOw5JtBxE/KubU985by0KmY BDloIcQwXc+l9w8QIf+xjGSGk7FecAQufLUxzViIPS6Q8oqAhrNwi+G0UyPP2JWU x2PgEyI+svFlCZfpKOyrJ7OIzSZG3ps= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:00 2025 by rpki-client