$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/685ceb29-0a44-329b-af42-187ecde6306a.roa File: 685ceb29-0a44-329b-af42-187ecde6306a.roa (raw, json) Hash identifier: 6CDHin1PED42qWXkjzOdLZ9dnosfrN3YSsjana8KWZg= Subject key identifier: 2C:00:3F:C9:BD:A2:96:17:B6:E7:FA:11:74:37:21:65:FE:17:09:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C0C9B3CEA0980B904C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/685ceb29-0a44-329b-af42-187ecde6306a.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.217.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c0:c9:b3:ce:a0:98:0b:90:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ade61e46-191a-4d9c-8ef4-f51f59268b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f3:ba:5a:33:d4:51:a0:f5:81:ea:84:df:33: 75:53:f8:4a:cf:e6:a5:7e:18:81:48:60:3e:c6:83: ed:61:96:96:e4:88:ca:2f:4d:0f:e1:1f:4a:79:67: fb:fb:31:c5:a3:cb:99:ef:da:2e:94:30:dc:6f:e1: 99:e1:e6:19:6e:5d:d6:7c:95:5e:ba:05:32:b3:21: a4:6b:08:5d:b1:48:91:3b:1b:7e:dd:a8:57:a6:ad: d9:0d:34:75:77:20:34:0e:6d:e9:eb:87:80:31:aa: 52:11:75:d0:33:59:98:8a:b8:fe:c1:c2:e8:e9:40: 15:d0:e8:09:29:50:ac:d0:e8:34:12:6b:2b:d2:d5: 15:fc:84:b9:cf:91:02:4c:31:6a:58:72:24:56:ff: de:25:2a:d4:34:8d:80:82:91:72:5e:64:55:af:bb: 95:33:1e:4b:72:67:98:13:0d:77:af:dd:07:25:2a: ba:a3:ab:bb:5a:1d:52:1b:8d:70:78:fa:ec:c5:a5: bf:b1:df:7f:4f:0f:31:e6:7f:ae:6b:c5:0c:bf:4e: 04:9a:f6:47:c4:53:63:31:0c:f2:d7:da:e9:71:e9: 48:18:3d:c8:a2:96:1a:44:71:47:30:47:7e:0e:7f: 41:be:db:62:16:83:b3:f0:eb:15:0f:32:52:97:1f: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:00:3F:C9:BD:A2:96:17:B6:E7:FA:11:74:37:21:65:FE:17:09:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/685ceb29-0a44-329b-af42-187ecde6306a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:37:2c:8d:3f:2b:e1:56:c0:1e:cf:4b:62:f5:94:12:17:d2: 73:1b:09:44:84:73:20:e8:d4:e2:c8:33:6f:76:33:32:14:24: 40:76:13:8f:cd:f4:39:e1:fa:a9:33:b5:d8:26:11:89:d6:67: f9:90:a8:ad:75:a3:2a:7d:e6:df:d8:1d:4e:7b:c9:43:4b:e0: 8e:8b:24:2c:37:b8:4e:eb:4b:6a:74:d8:36:01:8e:23:f1:12: 57:5c:98:34:89:e7:a9:19:3a:2a:a9:4e:eb:bf:41:5c:c3:cc: 88:eb:e3:2b:5f:63:ca:81:25:cf:56:be:47:cc:15:f1:73:02: 0c:45:99:a7:20:d7:4d:61:7d:7e:50:97:21:22:18:da:53:9f: 9b:31:ab:dd:ba:50:5f:18:8b:1b:c4:35:f1:92:1d:9e:8e:52: 53:73:67:1c:ad:56:36:7c:48:47:39:4b:a2:08:ce:7b:87:ef: d4:18:ee:de:de:6e:1e:60:77:02:58:ab:d0:8f:ee:9d:3c:8c: 3d:b6:8e:58:36:e6:7a:22:b4:a8:9d:a3:ce:bb:83:c4:28:87: 93:6a:9e:e0:b7:d3:3a:a9:5a:a6:bd:03:61:64:94:3f:1c:28: 1b:e7:06:4c:13:52:14:16:b9:89:84:d2:0b:91:09:ba:61:af: fc:02:66:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcDJs86gmAuQTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWRlNjFlNDYtMTkxYS00ZDljLThlZjQtZjUxZjU5MjY4YjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvO6WjPUUaD1geqE3zN1U/hKz+alfhiBSGA+ xoPtYZaW5IjKL00P4R9KeWf7+zHFo8uZ79oulDDcb+GZ4eYZbl3WfJVeugUysyGk awhdsUiROxt+3ahXpq3ZDTR1dyA0Dm3p64eAMapSEXXQM1mYirj+wcLo6UAV0OgJ KVCs0Og0Emsr0tUV/IS5z5ECTDFqWHIkVv/eJSrUNI2AgpFyXmRVr7uVMx5LcmeY Ew13r90HJSq6o6u7Wh1SG41wePrsxaW/sd9/Tw8x5n+ua8UMv04EmvZHxFNjMQzy 19rpcelIGD3IopYaRHFHMEd+Dn9BvttiFoOz8OsVDzJSlx/XbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwAP8m9opYXtuf6EXQ3IWX+FwlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjg1Y2ViMjktMGE0NC0z MjliLWFmNDItMTg3ZWNkZTYzMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNkxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo3LI0/K+FWwB7PS2L1lBIX0nMbCUSEcyDo1OLIM292MzIUJEB2E4/N 9Dnh+qkztdgmEYnWZ/mQqK11oyp95t/YHU57yUNL4I6LJCw3uE7rS2p02DYBjiPx EldcmDSJ56kZOiqpTuu/QVzDzIjr4ytfY8qBJc9WvkfMFfFzAgxFmacg101hfX5Q lyEiGNpTn5sxq926UF8YixvENfGSHZ6OUlNzZxytVjZ8SEc5S6IIznuH79QY7t7e bh5gdwJYq9CP7p08jD22jlg25noitKido867g8Qoh5NqnuC30zqpWqa9A2FklD8c KBvnBkwTUhQWuYmE0guRCbphr/wCZrE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:30 2025 by rpki-client