$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa File: 1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa (raw, json) Hash identifier: /LEpd2ZpO92i/CzTBRelpUUsWVU5O/DrUZ7Mr2vHhRQ= Subject key identifier: 16:4F:84:25:57:C6:42:1B:69:15:C7:33:B2:38:81:22:58:CB:AC:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B6797F762AD891572055DC400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 22773 IP address blocks: 72.217.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f7:62:ad:89:15:72:05:5d:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5a76f965-1a3b-4556-aed3-2efb2e27d19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7b:db:7e:c7:22:32:95:66:70:5c:41:19:91: 6f:0f:be:6b:2f:e6:b9:b6:ad:6b:af:3f:29:bb:75: 76:77:93:a7:99:f0:3b:d4:d0:2e:74:cd:20:e6:cb: 12:db:ed:95:20:f9:50:54:5f:c9:e5:6b:89:b6:a6: dd:ee:66:f2:d2:d4:c1:31:8c:c3:11:21:1a:4f:b5: ec:43:24:03:23:2f:01:89:d4:cd:2e:0f:12:fd:ef: c1:de:7d:bd:69:8d:b2:6d:77:67:6c:1e:b2:3c:27: 63:04:82:20:65:b4:37:3a:29:21:d5:49:3d:78:30: 5c:f4:4f:72:49:67:26:e3:7f:cc:a4:ba:31:de:a5: bf:67:35:0c:26:f3:50:80:5f:28:3b:93:7f:e9:25: a4:16:2b:5d:58:19:8a:3b:b9:87:d5:2b:74:91:54: 26:1f:aa:15:7c:8f:70:8e:e5:e2:ce:e9:40:9e:9a: 03:5a:c5:bf:8a:30:5f:db:9b:82:d4:c4:3a:31:10: b7:e8:28:9b:17:33:ba:e5:dd:7d:ed:d5:7c:4e:64: 5b:b1:6b:49:17:88:af:de:12:ef:b3:4f:60:66:67: 03:d4:e6:e5:04:67:6c:9a:92:f2:8d:b0:87:39:de: af:a5:b5:fc:67:57:f8:be:04:52:59:86:0a:d3:22: 96:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4F:84:25:57:C6:42:1B:69:15:C7:33:B2:38:81:22:58:CB:AC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4d:63:31:dc:56:47:00:89:62:f9:08:b8:d2:4d:9c:11:40: 73:f1:73:66:88:09:ec:55:e7:45:21:dc:d9:2e:e1:2f:85:bb: ee:1f:24:18:29:0f:1a:bd:d0:65:2c:a2:75:86:94:79:e3:32: 3c:0d:f8:8a:27:6f:89:d6:24:bd:95:b0:9f:4e:d8:04:84:2a: 15:32:c9:f6:db:6f:ec:58:a4:34:e5:33:8b:15:e7:53:fa:44: be:06:c7:e1:22:ca:60:2a:54:12:aa:21:01:15:43:b5:a8:61: 60:6c:e8:89:99:f0:7a:9a:5e:bd:d2:88:60:73:8d:73:ac:4e: 69:3b:ba:08:df:ec:7f:83:3e:5a:eb:a7:ce:d9:9e:0a:04:49: 50:6e:99:04:e7:cb:ed:6d:a8:3c:73:51:4d:84:07:bb:3d:db: 21:bb:25:50:5a:5a:33:bc:ab:20:0f:af:4f:57:06:e2:aa:0b: a5:a9:3b:7b:75:21:a3:92:a4:cc:6f:48:37:a8:69:c4:80:f9: 0a:da:17:d5:6f:f7:c6:53:1c:d3:05:a8:b6:53:84:e1:17:1f: 6b:8b:f0:83:75:99:eb:b8:5e:3f:37:ea:ef:c7:f5:cd:dd:af: 5c:74:c8:44:10:61:62:ff:9c:8f:8a:15:6f:76:c0:bd:46:45: bf:fa:45:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/dirYkVcgVdxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWE3NmY5NjUtMWEzYi00NTU2LWFlZDMtMmVmYjJlMjdkMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XvbfsciMpVmcFxBGZFvD75rL+a5tq1rrz8p u3V2d5OnmfA71NAudM0g5ssS2+2VIPlQVF/J5WuJtqbd7mby0tTBMYzDESEaT7Xs QyQDIy8BidTNLg8S/e/B3n29aY2ybXdnbB6yPCdjBIIgZbQ3Oikh1Uk9eDBc9E9y SWcm43/MpLox3qW/ZzUMJvNQgF8oO5N/6SWkFitdWBmKO7mH1St0kVQmH6oVfI9w juXizulAnpoDWsW/ijBf25uC1MQ6MRC36CibFzO65d197dV8TmRbsWtJF4iv3hLv s09gZmcD1OblBGdsmpLyjbCHOd6vpbX8Z1f4vgRSWYYK0yKWywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZPhCVXxkIbaRXHM7I4gSJYy6yQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWFmZDI2OTYtOWE1ZC0z Y2YyLThiMmYtNWNiNjRlZDYzNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFNYzHcVkcAiWL5CLjSTZwRQHPxc2aICexV50Uh3Nku4S+Fu+4fJBgp Dxq90GUsonWGlHnjMjwN+Ionb4nWJL2VsJ9O2ASEKhUyyfbbb+xYpDTlM4sV51P6 RL4Gx+EiymAqVBKqIQEVQ7WoYWBs6ImZ8HqaXr3SiGBzjXOsTmk7ugjf7H+DPlrr p87ZngoESVBumQTny+1tqDxzUU2EB7s92yG7JVBaWjO8qyAPr09XBuKqC6WpO3t1 IaOSpMxvSDeoacSA+QraF9Vv98ZTHNMFqLZThOEXH2uL8IN1meu4Xj836u/H9c3d r1x0yEQQYWL/nI+KFW92wL1GRb/6RT0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:51:29 2025 by rpki-client