$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa File: 3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa (raw, json) Hash identifier: 6zv+q0UnksN9+GjrWxwj05IPK5UftOsZW4HX7XF8j+Q= Subject key identifier: 62:AC:47:C6:31:7F:47:88:64:16:19:85:DF:85:B9:03:E4:3B:83:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24488784D1A320E341000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.221.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:44:88:78:4d:1a:32:0e:34:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=f2649944-6fb4-4cdf-b61f-9b8e94469226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ba:ed:49:e9:d1:fa:60:8d:f9:fc:1e:5c:0f: f9:7e:05:6d:43:be:17:0d:68:a0:ed:5c:e6:62:2f: b4:78:00:42:8a:30:94:aa:80:fc:21:13:04:c3:b9: bd:4f:0d:0d:d0:c3:b9:e3:a5:ed:4f:6b:57:5c:e9: 08:0a:48:d6:85:71:98:20:cb:0c:25:ea:45:59:e9: 1d:90:e4:b0:7a:33:c8:d0:e5:a8:b8:1a:19:ed:b2: 82:e1:cd:a3:71:5c:a2:44:f3:ca:7c:50:d9:87:32: 5c:15:0a:eb:71:b2:03:3e:d2:96:f8:b5:93:6d:3b: 05:56:57:8a:4e:02:99:f4:1c:f5:18:18:bc:50:ff: 6d:2c:eb:41:28:e2:ed:f1:35:c2:c9:25:00:a5:38: 1b:d6:80:fa:4b:4e:31:22:94:c4:50:9a:1b:33:a5: 78:7c:9e:9a:ce:0a:fe:d9:63:0f:fb:00:53:b3:b1: b7:f3:b8:ec:d5:95:0e:a9:7d:1f:4b:7b:8e:2e:27: dd:f8:38:f0:b1:31:0f:19:34:95:9a:b3:b0:12:3c: ac:91:61:24:d2:f0:82:94:cf:d1:cb:e7:0f:0e:7a: cc:33:a6:9b:66:77:28:2c:8f:48:a2:1f:d0:13:50: ad:33:c7:cc:88:7e:8d:88:fd:82:eb:ff:54:5c:bc: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AC:47:C6:31:7F:47:88:64:16:19:85:DF:85:B9:03:E4:3B:83:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:2a:ff:44:c3:1f:2f:a7:94:05:75:3d:c1:62:e2:04:e1:f8: 48:d8:ea:ca:be:f6:f6:bc:55:27:c2:b7:51:dc:d6:6f:d6:59: 67:b0:59:12:a3:4c:0d:9a:f1:a0:de:e2:15:64:e0:41:d7:24: f6:89:37:f6:c8:f7:69:08:90:e6:4d:e1:cc:17:9c:a6:aa:57: ed:7d:1e:d0:58:31:72:d6:50:ad:6e:c0:df:a3:41:c6:78:d3: 16:15:98:44:2f:ed:43:7d:0f:55:aa:6f:7c:6d:f9:82:25:05: a2:24:0d:7c:fa:7a:25:18:06:14:a4:d4:5d:c6:2f:80:54:ee: ec:cf:e5:9a:21:aa:c8:64:75:e9:6b:74:f6:9a:fe:e3:cd:92: 14:c4:99:ed:45:fa:be:36:d6:d4:a7:f6:50:90:9c:4f:84:3e: 4e:52:2f:1f:ed:6e:1b:e8:33:cb:e6:76:21:1e:76:1e:8a:ee: de:9a:b1:6c:40:93:bc:36:58:66:ce:c7:f5:0b:c8:26:92:fb: bc:e4:7a:cc:fd:d1:04:ef:86:ea:d7:3a:5f:2d:51:92:d7:29: ee:bc:d3:33:4c:9e:c9:10:fd:a2:fe:c9:77:28:24:17:fe:e3: 1a:78:4b:e5:e8:92:e1:a9:ac:6a:97:f7:88:5e:fd:6e:b7:c4: 0b:ba:2e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kSIeE0aMg40EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZjI2NDk5NDQtNmZiNC00Y2RmLWI2MWYtOWI4ZTk0NDY5MjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7rtSenR+mCN+fweXA/5fgVtQ74XDWig7Vzm Yi+0eABCijCUqoD8IRMEw7m9Tw0N0MO546XtT2tXXOkICkjWhXGYIMsMJepFWekd kOSwejPI0OWouBoZ7bKC4c2jcVyiRPPKfFDZhzJcFQrrcbIDPtKW+LWTbTsFVleK TgKZ9Bz1GBi8UP9tLOtBKOLt8TXCySUApTgb1oD6S04xIpTEUJobM6V4fJ6azgr+ 2WMP+wBTs7G387js1ZUOqX0fS3uOLifd+DjwsTEPGTSVmrOwEjyskWEk0vCClM/R y+cPDnrMM6abZncoLI9Ioh/QE1CtM8fMiH6NiP2C6/9UXLz5EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKsR8Yxf0eIZBYZhd+FuQPkO4MxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZlZDMzYjctNmI1YS0z YzM1LWI1NmUtOGQwMWJmNTMxNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgq/0TDHy+nlAV1PcFi4gTh+EjY6sq+9va8VSfCt1Hc1m/WWWewWRKj TA2a8aDe4hVk4EHXJPaJN/bI92kIkOZN4cwXnKaqV+19HtBYMXLWUK1uwN+jQcZ4 0xYVmEQv7UN9D1Wqb3xt+YIlBaIkDXz6eiUYBhSk1F3GL4BU7uzP5Zohqshkdelr dPaa/uPNkhTEme1F+r421tSn9lCQnE+EPk5SLx/tbhvoM8vmdiEedh6K7t6asWxA k7w2WGbOx/ULyCaS+7zkesz90QTvhurXOl8tUZLXKe680zNMnskQ/aL+yXcoJBf+ 4xp4S+XokuGprGqX94he/W63xAu6LpI= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:11 2025 by rpki-client