$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/997cf553-f9ca-3894-a017-f281148f812c.roa File: 997cf553-f9ca-3894-a017-f281148f812c.roa (raw, json) Hash identifier: ilHK85mVqL4SAaAgyDiDKhc7QI6AKpGZhQ+pliN1VFE= Subject key identifier: 17:B2:B6:0B:E0:0F:59:7D:EF:7C:24:3B:EF:E8:46:0D:83:34:38:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2922AF3A1FE8880191140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/997cf553-f9ca-3894-a017-f281148f812c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.221.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:92:2a:f3:a1:fe:88:80:19:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=08cd4bb4-9be2-44d8-bacd-7789e2adf324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c0:ea:6c:b2:53:8f:e9:69:fc:21:04:fe:9d: 29:ba:b9:21:c6:97:26:b3:d9:52:14:43:8e:b9:f7: 8e:19:f2:6d:50:cf:54:17:4e:f8:f9:47:9b:26:e6: d7:66:e2:41:17:05:bc:a1:1b:ad:74:21:0d:0e:58: 97:ac:ff:f2:54:ed:be:76:03:ee:95:7e:6c:a9:ad: da:d3:59:83:1c:44:a6:4a:99:f2:9b:12:48:4d:03: 71:21:72:c3:11:cf:0d:4f:48:38:01:20:a1:77:c2: 41:f1:e3:60:cd:4e:ce:af:f8:11:9a:f5:eb:dd:eb: ea:e9:1e:30:90:c2:75:d7:2d:97:b0:33:69:8d:f8: 0b:25:2e:00:98:e8:28:b9:fa:85:fc:22:fd:ef:03: 0b:69:5e:72:58:fe:90:24:51:b1:8a:b9:96:7d:c3: fa:9a:0d:42:70:9d:42:c4:ae:82:02:5c:65:80:43: 83:60:19:e1:31:7a:8c:f3:50:a8:c9:36:6d:38:89: 95:2a:8c:07:fa:c9:2d:fd:2a:21:2f:a9:41:1a:cb: 75:46:85:41:f1:21:ea:72:e4:03:c5:b0:58:62:d5: ea:c9:ce:ba:77:25:57:67:c5:9f:f2:82:a8:ce:13: b5:88:5f:4e:c1:d3:0d:61:8f:01:92:3f:ca:63:78: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:B6:0B:E0:0F:59:7D:EF:7C:24:3B:EF:E8:46:0D:83:34:38:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/997cf553-f9ca-3894-a017-f281148f812c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:4a:02:76:cc:32:19:79:80:21:3f:6e:ea:bc:18:c8:32:48: 0f:7c:70:41:dd:0b:41:80:b0:9a:8d:b1:c0:77:eb:81:f1:e4: 9b:4c:a7:02:47:31:96:c3:88:c1:4f:ca:4b:3d:3a:38:3f:fc: 96:50:90:c2:2d:a2:21:4d:51:3b:4c:26:7e:02:6c:33:db:b6: d4:8f:fc:88:87:47:d1:bc:ac:0a:81:af:c1:c8:5f:f7:4e:21: d5:65:16:bc:36:9f:81:47:6a:f4:89:f4:c7:72:c4:bc:45:f9: f5:4f:15:e0:6d:07:69:28:e1:50:e1:d5:3a:c8:c2:cd:4d:3d: af:25:ed:88:16:87:71:c5:0c:97:bb:2b:df:87:87:00:8b:91: d1:bf:99:51:5d:0f:fe:2a:9f:57:58:d4:e9:a1:9a:16:79:d6: dc:43:95:ff:36:01:9b:1e:c9:4b:ff:7d:18:32:1b:8f:ab:37: 1f:20:e5:8b:45:b5:26:9b:91:56:4d:50:14:65:a4:f9:2f:7f: 63:0a:3b:f0:14:aa:d7:b3:2b:42:e5:30:b3:df:90:6f:1e:2c: 92:a5:8b:89:38:3f:d6:d8:73:00:e5:79:34:73:4a:46:81:26: 6d:3f:ec:34:fe:54:32:74:1b:33:13:a5:4b:db:a7:32:bd:6d: bf:d5:f9:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pIq86H+iIAZEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDhjZDRiYjQtOWJlMi00NGQ4LWJhY2QtNzc4OWUyYWRmMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cDqbLJTj+lp/CEE/p0purkhxpcms9lSFEOO ufeOGfJtUM9UF074+UebJubXZuJBFwW8oRutdCENDliXrP/yVO2+dgPulX5sqa3a 01mDHESmSpnymxJITQNxIXLDEc8NT0g4ASChd8JB8eNgzU7Or/gRmvXr3evq6R4w kMJ11y2XsDNpjfgLJS4AmOgoufqF/CL97wMLaV5yWP6QJFGxirmWfcP6mg1CcJ1C xK6CAlxlgEODYBnhMXqM81CoyTZtOImVKowH+skt/SohL6lBGst1RoVB8SHqcuQD xbBYYtXqyc66dyVXZ8Wf8oKozhO1iF9OwdMNYY8Bkj/KY3inowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeytgvgD1l973wkO+/oRg2DNDhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTk3Y2Y1NTMtZjljYS0z ODk0LWEwMTctZjI4MTE0OGY4MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNKAnbMMhl5gCE/buq8GMgySA98cEHdC0GAsJqNscB364Hx5JtMpwJH MZbDiMFPyks9Ojg//JZQkMItoiFNUTtMJn4CbDPbttSP/IiHR9G8rAqBr8HIX/dO IdVlFrw2n4FHavSJ9MdyxLxF+fVPFeBtB2ko4VDh1TrIws1NPa8l7YgWh3HFDJe7 K9+HhwCLkdG/mVFdD/4qn1dY1OmhmhZ51txDlf82AZseyUv/fRgyG4+rNx8g5YtF tSabkVZNUBRlpPkvf2MKO/AUqtezK0LlMLPfkG8eLJKli4k4P9bYcwDleTRzSkaB Jm0/7DT+VDJ0GzMTpUvbpzK9bb/V+V0= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:53 2025 by rpki-client