$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5170c702-5be5-3c7d-858f-d5f62d386f2a.roa File: 5170c702-5be5-3c7d-858f-d5f62d386f2a.roa (raw, json) Hash identifier: GM0bUWjP/7aqOrCVCct7qsqXAT1oKaeXp4pmDqA2aWI= Subject key identifier: D5:1E:88:5F:E0:22:0B:9D:0C:94:8D:33:39:83:55:8A:49:29:D2:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BEC401A8F1A485122E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5170c702-5be5-3c7d-858f-d5f62d386f2a.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.216.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:be:c4:01:a8:f1:a4:85:12:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=73c59dc6-d6e0-4b5f-ac32-da31462882af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:97:cc:4f:43:9e:62:d9:ee:7c:ac:46:c6:d0: 90:1c:24:ed:1a:87:fd:b4:35:ad:46:dd:45:e8:72: 8f:27:db:1d:f8:45:44:25:09:c5:c0:6c:ab:87:24: 5c:23:2c:a0:25:48:60:e7:71:50:33:25:6b:58:2f: a7:8c:bf:49:9f:dc:cc:b0:5c:4e:f1:95:c0:ab:fc: 0d:81:bd:bd:7d:6f:87:df:5a:f1:53:95:b3:bf:cf: d0:17:74:2f:a9:24:9f:e7:aa:9f:a2:db:66:0c:f1: e5:2b:07:e2:0b:da:af:3f:2a:78:06:38:01:3d:7c: e5:b7:8f:2c:36:15:04:b3:72:21:ea:41:e0:89:00: 6c:32:4c:73:5c:f2:b9:dd:8e:40:6a:50:4c:76:b1: 45:0a:da:f5:bc:49:87:d8:38:b6:d8:f5:6c:0d:8d: 63:a5:1a:fb:57:6c:a9:e4:03:4f:ed:74:39:4f:76: 99:35:e8:64:91:79:29:de:e3:39:7b:85:bb:48:78: 03:09:4f:77:f6:10:9e:ac:10:93:a8:aa:6b:75:2b: a1:38:16:c4:c7:56:fd:de:e5:60:f2:0a:01:51:38: ca:2e:48:12:b6:b5:e0:b8:fc:77:43:3b:01:59:3c: 51:8c:44:fb:1f:67:a6:9b:fa:5a:98:87:b0:44:8b: b5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1E:88:5F:E0:22:0B:9D:0C:94:8D:33:39:83:55:8A:49:29:D2:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5170c702-5be5-3c7d-858f-d5f62d386f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:39:12:fc:d8:b0:04:b1:76:db:ae:dc:c0:6b:7c:83:38:cc: f8:3d:97:a6:1d:d3:0b:f2:0f:9b:37:ec:09:2e:41:5f:32:b7: 22:a4:35:fd:f5:91:b0:fd:ed:71:68:4a:06:cd:c4:16:40:76: f6:f9:d3:16:55:99:c3:01:21:50:bb:9f:e9:9b:6d:85:2d:a9: b8:1b:29:d9:a4:d4:44:56:b7:c5:bb:bf:4d:a0:99:e0:a0:a2: 57:11:01:ab:c2:51:5a:8b:7d:c8:1d:f6:6a:6f:87:f7:66:33: d2:c5:37:e2:6c:f1:43:51:01:bd:30:49:2d:ea:82:21:aa:ff: d2:10:99:e6:3e:81:85:a7:fb:c1:2b:7f:8a:34:bd:ef:70:65: 1d:de:58:67:58:8c:1d:67:ed:8a:40:40:42:26:8d:1c:0f:d2: 30:72:1b:65:fe:84:fc:70:ec:5d:f6:e0:df:35:ae:4f:82:78: c8:91:c1:b6:49:66:3f:ca:74:d2:d4:86:80:dc:8f:fa:2b:b2: 04:fb:d8:ed:e9:a9:61:ab:86:a9:29:66:d8:59:fd:b1:aa:c4: 07:08:a9:7a:86:3b:00:c3:5f:ee:b5:2f:20:42:d0:76:a7:cb: b6:1f:38:6a:a0:e3:bb:af:9f:46:29:55:e9:9b:68:24:ff:e6: 20:ff:48:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAb7EAajxpIUSLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NzNjNTlkYzYtZDZlMC00YjVmLWFjMzItZGEzMTQ2Mjg4MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5fMT0OeYtnufKxGxtCQHCTtGof9tDWtRt1F 6HKPJ9sd+EVEJQnFwGyrhyRcIyygJUhg53FQMyVrWC+njL9Jn9zMsFxO8ZXAq/wN gb29fW+H31rxU5Wzv8/QF3QvqSSf56qfottmDPHlKwfiC9qvPyp4BjgBPXzlt48s NhUEs3Ih6kHgiQBsMkxzXPK53Y5AalBMdrFFCtr1vEmH2Di22PVsDY1jpRr7V2yp 5ANP7XQ5T3aZNehkkXkp3uM5e4W7SHgDCU939hCerBCTqKprdSuhOBbEx1b93uVg 8goBUTjKLkgStrXguPx3QzsBWTxRjET7H2emm/pamIewRIu14QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUeiF/gIgudDJSNMzmDVYpJKdI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTE3MGM3MDItNWJlNS0z YzdkLTg1OGYtZDVmNjJkMzg2ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNh+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI5EvzYsASxdtuu3MBrfIM4zPg9l6Yd0wvyD5s37AkuQV8ytyKkNf31 kbD97XFoSgbNxBZAdvb50xZVmcMBIVC7n+mbbYUtqbgbKdmk1ERWt8W7v02gmeCg olcRAavCUVqLfcgd9mpvh/dmM9LFN+Js8UNRAb0wSS3qgiGq/9IQmeY+gYWn+8Er f4o0ve9wZR3eWGdYjB1n7YpAQEImjRwP0jByG2X+hPxw7F324N81rk+CeMiRwbZJ Zj/KdNLUhoDcj/orsgT72O3pqWGrhqkpZthZ/bGqxAcIqXqGOwDDX+61LyBC0Han y7YfOGqg47uvn0YpVembaCT/5iD/SDc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:08 2025 by rpki-client