$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dc71400-8123-3aac-94e0-6f5515aa4e41.roa File: 1dc71400-8123-3aac-94e0-6f5515aa4e41.roa (raw, json) Hash identifier: L17UGaumYxtnvYRvrye2dD3yEPUt7F8hdSEXSkO4gfs= Subject key identifier: 0C:28:D5:6F:C5:45:B7:D6:7D:E6:64:43:AC:3A:EE:11:A3:49:27:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C50A42406AD3E556E280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dc71400-8123-3aac-94e0-6f5515aa4e41.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.217.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c5:0a:42:40:6a:d3:e5:56:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=5a1ededd-178a-4c7f-8ef3-6de438d818e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:4e:88:dc:24:f7:60:44:42:25:de:72:95: f8:b3:ca:aa:ba:dc:12:45:a1:45:72:64:7e:2d:f5: 44:cc:5b:c7:00:ae:8c:46:57:d3:09:2a:d5:df:cf: 29:02:57:f4:63:ca:1f:9c:7a:72:32:73:87:1b:ec: 1f:10:ac:04:8d:dc:ab:b0:32:7f:12:9e:82:10:b1: c2:0f:1a:fd:f3:f9:f6:72:d9:b8:a8:8b:31:eb:f3: 63:bd:d2:6a:11:68:aa:17:01:de:10:23:d5:e3:d4: ae:ea:42:20:e6:a5:92:e5:87:fe:c9:aa:68:22:a3: ce:43:04:1b:c1:31:a7:8e:05:32:59:1f:bc:2f:1f: 7d:52:a6:3f:a2:47:b3:9d:a9:3b:f6:3a:82:90:fb: af:4c:b5:6a:7f:ef:d4:00:23:4e:36:79:35:32:bc: cc:d9:2f:ea:4b:51:dc:ed:3f:19:85:31:3f:3a:bc: c3:e2:2f:5a:df:e1:6f:b6:3b:9d:c7:93:fe:dc:99: 78:85:0e:86:dd:7d:93:e0:5a:b8:53:a4:f5:f7:f4: aa:d8:48:b9:1a:11:9e:d6:25:55:4b:2a:50:e9:51: 16:34:97:6e:12:d0:f1:fe:eb:01:a0:02:6b:b7:dc: 1c:cd:f6:84:90:f3:93:73:56:82:04:f7:58:19:c9: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:28:D5:6F:C5:45:B7:D6:7D:E6:64:43:AC:3A:EE:11:A3:49:27:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dc71400-8123-3aac-94e0-6f5515aa4e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e5:09:0d:b1:9c:a6:4f:30:52:f4:ab:97:64:0c:6b:7b:20: 14:95:d4:33:9b:54:67:7b:33:40:38:71:78:6a:1f:78:94:f0: ba:70:62:55:bf:2d:b4:8b:d9:c6:3b:05:48:8e:64:32:37:68: 36:bb:67:51:be:ef:30:dd:43:c7:31:96:5c:6c:61:72:ab:0d: 48:9d:2b:fd:ee:4b:c0:cb:6a:90:7b:3a:b2:d2:57:10:91:18: 67:6b:a5:a1:b0:25:63:1b:58:05:38:64:79:d9:36:fa:55:a1: 74:63:6f:d4:3f:92:c5:b4:69:d3:c6:13:99:b6:da:f6:47:ea: 82:4f:40:03:ba:ae:e8:10:5f:a0:1d:54:5f:50:a5:65:27:d7: 53:19:35:38:6a:1e:09:b1:37:5c:08:81:07:8d:b1:37:06:80: 69:96:ba:64:1f:23:2f:30:fa:a4:6c:77:f0:ba:de:0a:e4:b2: 2b:4b:24:c2:15:95:ec:b6:e9:53:83:33:d9:95:06:6a:9e:b5: a6:75:7f:5c:f8:04:d6:cc:f5:28:da:53:c3:73:f8:e0:95:31: f8:56:bb:13:20:27:e4:8b:03:c6:81:2d:71:7c:7a:81:2f:f2: cc:d9:ba:23:51:06:ee:93:06:eb:c6:35:6d:c4:a0:4d:11:ae: d4:53:9c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcUKQkBq0+VW4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NWExZWRlZGQtMTc4YS00YzdmLThlZjMtNmRlNDM4ZDgxOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvROiNwk92BEQiXecpX4s8qqutwSRaFFcmR+ LfVEzFvHAK6MRlfTCSrV388pAlf0Y8ofnHpyMnOHG+wfEKwEjdyrsDJ/Ep6CELHC Dxr98/n2ctm4qIsx6/NjvdJqEWiqFwHeECPV49Su6kIg5qWS5Yf+yapoIqPOQwQb wTGnjgUyWR+8Lx99UqY/okeznak79jqCkPuvTLVqf+/UACNONnk1MrzM2S/qS1Hc 7T8ZhTE/OrzD4i9a3+Fvtjudx5P+3Jl4hQ6G3X2T4Fq4U6T19/Sq2Ei5GhGe1iVV SypQ6VEWNJduEtDx/usBoAJrt9wczfaEkPOTc1aCBPdYGcm67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwo1W/FRbfWfeZkQ6w67hGjSScWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWRjNzE0MDAtODEyMy0z YWFjLTk0ZTAtNmY1NTE1YWE0ZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvlCQ2xnKZPMFL0q5dkDGt7IBSV1DObVGd7M0A4cXhqH3iU8LpwYlW/ LbSL2cY7BUiOZDI3aDa7Z1G+7zDdQ8cxllxsYXKrDUidK/3uS8DLapB7OrLSVxCR GGdrpaGwJWMbWAU4ZHnZNvpVoXRjb9Q/ksW0adPGE5m22vZH6oJPQAO6rugQX6Ad VF9QpWUn11MZNThqHgmxN1wIgQeNsTcGgGmWumQfIy8w+qRsd/C63grksitLJMIV ley26VODM9mVBmqetaZ1f1z4BNbM9SjaU8Nz+OCVMfhWuxMgJ+SLA8aBLXF8eoEv 8szZuiNRBu6TBuvGNW3EoE0RrtRTnCs= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:09 2025 by rpki-client