$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6be82fb0-0de1-3030-bcda-651e23001ba1.roa File: 6be82fb0-0de1-3030-bcda-651e23001ba1.roa (raw, json) Hash identifier: 4Z0V4wpgDtwLvbsXgRJcsTIFlje5xKfbYXFtb4UP9vY= Subject key identifier: F9:24:16:20:BD:4B:E9:C7:DA:17:8C:7D:25:AC:4C:2E:88:D5:DA:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C5654CAEE5CE617D1500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6be82fb0-0de1-3030-bcda-651e23001ba1.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.217.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c5:65:4c:ae:e5:ce:61:7d:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=75cd846c-b6d5-479c-9ec3-662f1be57a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:4f:66:fd:78:33:f2:5a:f8:cd:f4:b3:0b: f1:c7:26:8f:56:71:f1:83:e9:58:df:13:b3:1a:55: 51:d7:aa:96:04:7c:cc:d8:e5:17:5b:a3:cc:2b:c9: 20:3a:e2:e1:af:61:fb:37:a3:fc:ce:09:31:68:46: 60:ca:31:4f:1d:52:ba:ad:37:b0:36:7b:bc:e6:c5: 0f:a7:87:54:12:f1:97:07:a6:9c:e6:f4:f3:11:1b: f4:b0:af:80:4d:79:a4:9f:0f:86:a5:42:17:ec:42: e0:6a:67:03:de:5b:0b:f4:1a:cc:3d:a6:a3:4d:a4: b8:16:79:c8:8b:bd:97:d7:82:1e:77:2b:3f:c9:41: 79:ff:9c:78:8e:24:97:ec:ee:23:21:67:53:f4:a1: cf:0c:be:30:44:c9:bd:a8:7a:36:c9:1e:67:55:8d: c3:38:2b:44:cb:00:ae:00:fd:51:c4:c6:67:46:60: 05:2d:d4:6e:c0:f9:9a:3f:35:84:c4:fa:74:6f:6f: a7:85:ef:15:6b:b1:5a:38:0a:5d:28:a6:49:86:c6: a3:89:18:ed:c0:c9:12:63:62:d1:b0:93:31:7f:8c: 26:d0:b0:22:5e:ce:de:ce:73:0a:49:7f:d7:6f:72: e9:31:67:ce:12:d3:e7:96:de:84:38:8f:b1:ce:1c: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:24:16:20:BD:4B:E9:C7:DA:17:8C:7D:25:AC:4C:2E:88:D5:DA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6be82fb0-0de1-3030-bcda-651e23001ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4b:64:38:f1:7e:a2:2f:01:aa:e3:c8:68:84:1f:68:64:ab: ce:cf:96:3d:a3:52:be:4e:41:52:7f:3a:6a:74:e4:c1:6c:1c: 93:33:60:68:b9:1b:d0:53:7c:1d:53:0c:09:f4:63:c6:86:f7: 04:cc:19:e2:2a:57:95:ff:1c:e0:e8:fd:d8:97:4e:16:ea:bd: 47:1f:e6:58:23:2f:69:e7:8d:b4:cf:5c:45:31:15:48:aa:8a: a9:0a:06:fd:3f:19:17:91:bc:7f:1e:4b:95:b1:84:e9:33:0e: 59:37:4e:fd:62:5a:38:ed:94:32:40:5d:28:fc:5b:4f:2a:50: 62:a5:c2:9a:b6:b8:62:6f:2f:de:35:2e:e0:02:c0:b2:4a:0c: 18:4f:ca:e4:40:b3:f7:27:dd:36:24:c3:14:da:c9:55:3e:c6: 7d:9b:93:b4:fd:82:a3:b8:52:c3:1a:e6:a9:52:40:d6:da:c3: 05:29:7d:bf:fa:97:07:02:99:53:ab:54:ae:92:1c:01:7d:f7: 0c:bd:e6:7a:69:e3:91:e0:df:48:6e:e6:b0:6e:17:71:a7:f2: 0d:cb:d3:f0:31:e4:e1:e8:98:33:ad:51:20:23:0a:3f:0e:18: 87:8f:54:7e:94:19:bb:54:cf:26:1c:26:70:91:87:6b:5a:01: da:75:b4:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcVlTK7lzmF9FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NzVjZDg0NmMtYjZkNS00NzljLTllYzMtNjYyZjFiZTU3YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzhPZv14M/Ja+M30swvxxyaPVnHxg+lY3xOz GlVR16qWBHzM2OUXW6PMK8kgOuLhr2H7N6P8zgkxaEZgyjFPHVK6rTewNnu85sUP p4dUEvGXB6ac5vTzERv0sK+ATXmknw+GpUIX7ELgamcD3lsL9BrMPaajTaS4FnnI i72X14Iedys/yUF5/5x4jiSX7O4jIWdT9KHPDL4wRMm9qHo2yR5nVY3DOCtEywCu AP1RxMZnRmAFLdRuwPmaPzWExPp0b2+nhe8Va7FaOApdKKZJhsajiRjtwMkSY2LR sJMxf4wm0LAiXs7eznMKSX/Xb3LpMWfOEtPnlt6EOI+xzhy7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkkFiC9S+nH2heMfSWsTC6I1doDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmJlODJmYjAtMGRlMS0z MDMwLWJjZGEtNjUxZTIzMDAxYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxLZDjxfqIvAarjyGiEH2hkq87Plj2jUr5OQVJ/Omp05MFsHJMzYGi5 G9BTfB1TDAn0Y8aG9wTMGeIqV5X/HODo/diXThbqvUcf5lgjL2nnjbTPXEUxFUiq iqkKBv0/GReRvH8eS5WxhOkzDlk3Tv1iWjjtlDJAXSj8W08qUGKlwpq2uGJvL941 LuACwLJKDBhPyuRAs/cn3TYkwxTayVU+xn2bk7T9gqO4UsMa5qlSQNbawwUpfb/6 lwcCmVOrVK6SHAF99wy95npp45Hg30hu5rBuF3Gn8g3L0/Ax5OHomDOtUSAjCj8O GIePVH6UGbtUzyYcJnCRh2taAdp1tP8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:26 2025 by rpki-client