$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a406882-c5a0-3992-b569-9f0fb36acd04.roa File: 9a406882-c5a0-3992-b569-9f0fb36acd04.roa (raw, json) Hash identifier: edS3M5FLb6A0t/faq1nUyRtl3N6dacwYyIY7VawVAws= Subject key identifier: B5:02:78:89:8B:AB:90:91:41:7B:B6:CA:9C:6F:D3:1E:09:6E:03:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29FA1A6FACF04C73B4380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a406882-c5a0-3992-b569-9f0fb36acd04.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.221.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9f:a1:a6:fa:cf:04:c7:3b:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3846aab7-2d2d-4438-9d04-33deab08113d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:44:85:d9:c0:ba:1e:5c:34:d7:76:8c:09: 59:8c:7b:14:31:a8:01:e1:0a:8b:0c:dc:a4:0a:49: 19:b6:fd:a0:67:fd:6e:0b:8d:96:d3:04:0a:af:07: fd:bd:1e:32:e0:d7:69:74:18:8d:c9:6c:38:9d:d7: 4b:a0:f7:36:7b:cf:b3:5e:6a:12:fd:3e:39:db:73: 09:9e:69:3d:25:12:fd:2b:b5:0c:ab:aa:74:df:6b: f6:e1:02:a9:70:cb:36:f0:7f:03:bc:e2:ac:47:60: 3c:e5:bb:dc:bc:d1:51:c3:50:1f:77:7c:5c:10:2b: 12:71:91:21:25:e1:52:b2:73:8c:0c:67:0e:01:be: eb:0a:79:c8:a4:3d:a1:f9:ae:58:0c:e1:8a:8c:2d: 5f:e1:68:5c:89:45:f0:6d:42:d6:69:62:ba:c5:b2: 43:ce:27:f8:5c:69:e1:1f:e4:eb:91:a9:d2:9a:47: 54:54:07:4f:6c:d7:19:2a:68:bb:39:7e:28:05:43: 1c:1f:d8:09:45:43:b5:4d:43:39:d5:46:b0:e0:a1: 10:b6:db:fa:51:8f:ff:9b:8f:4d:c4:e8:8f:13:fe: c6:38:a7:b9:1d:1a:c4:da:61:09:5b:ac:9e:68:f9: 33:ac:ed:81:d2:4a:f1:15:fb:90:5a:80:30:7f:61: c1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:02:78:89:8B:AB:90:91:41:7B:B6:CA:9C:6F:D3:1E:09:6E:03:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a406882-c5a0-3992-b569-9f0fb36acd04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9c:08:d6:37:26:f6:7b:3d:09:3a:c8:d9:1b:ed:7a:b4:88: a5:1e:b8:a5:a8:d6:73:15:5e:ae:f9:c5:03:a8:b9:a1:0a:b0: 47:35:7e:bc:96:01:36:c8:0f:5c:03:3f:75:cc:8d:61:67:bb: 7a:2b:56:4e:61:05:2a:16:13:41:44:cc:ea:0d:e3:95:82:50: 2e:a9:26:50:1b:ea:8d:9d:bf:27:92:d8:3f:da:1f:f0:68:a9: 38:99:f8:e4:01:69:f8:d2:c9:97:08:cd:10:ed:ad:6a:6b:76: 50:6e:e9:1f:00:db:07:9a:8a:a9:3c:11:9d:a1:0f:a1:2e:a1: 55:2d:b3:b1:3c:e4:d9:21:36:79:b0:29:70:d1:b5:27:3a:9c: 40:fd:48:e5:31:af:96:d7:41:43:71:8b:24:8e:e5:ae:55:29: 00:d2:20:f6:21:46:79:cd:08:0b:8a:f7:db:8c:e7:3b:55:a1: f1:d3:34:4c:0f:0b:9f:31:d5:4a:ed:c5:01:98:02:54:a6:b8: 21:eb:0f:87:55:e8:3e:37:f8:a3:82:b6:6f:f1:66:4e:c9:e6: cb:52:77:8d:96:a5:9a:66:14:93:d1:2b:d3:b0:31:67:35:8d: 96:be:2d:52:d8:92:ec:03:e0:dd:1b:0a:0a:2a:f7:95:28:30: 11:71:5c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28p+hpvrPBMc7Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Mzg0NmFhYjctMmQyZC00NDM4LTlkMDQtMzNkZWFiMDgxMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja9EhdnAuh5cNNd2jAlZjHsUMagB4QqLDNyk CkkZtv2gZ/1uC42W0wQKrwf9vR4y4NdpdBiNyWw4nddLoPc2e8+zXmoS/T4523MJ nmk9JRL9K7UMq6p032v24QKpcMs28H8DvOKsR2A85bvcvNFRw1Afd3xcECsScZEh JeFSsnOMDGcOAb7rCnnIpD2h+a5YDOGKjC1f4WhciUXwbULWaWK6xbJDzif4XGnh H+TrkanSmkdUVAdPbNcZKmi7OX4oBUMcH9gJRUO1TUM51Uaw4KEQttv6UY//m49N xOiPE/7GOKe5HRrE2mEJW6yeaPkzrO2B0krxFfuQWoAwf2HBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUCeImLq5CRQXu2ypxv0x4JbgP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWE0MDY4ODItYzVhMC0z OTkyLWI1NjktOWYwZmIzNmFjZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABicCNY3JvZ7PQk6yNkb7Xq0iKUeuKWo1nMVXq75xQOouaEKsEc1fryW ATbID1wDP3XMjWFnu3orVk5hBSoWE0FEzOoN45WCUC6pJlAb6o2dvyeS2D/aH/Bo qTiZ+OQBafjSyZcIzRDtrWprdlBu6R8A2weaiqk8EZ2hD6EuoVUts7E85NkhNnmw KXDRtSc6nED9SOUxr5bXQUNxiySO5a5VKQDSIPYhRnnNCAuK99uM5ztVofHTNEwP C58x1UrtxQGYAlSmuCHrD4dV6D43+KOCtm/xZk7J5stSd42WpZpmFJPRK9OwMWc1 jZa+LVLYkuwD4N0bCgoq95UoMBFxXFc= -----END CERTIFICATE-----Generated at Wed Oct 15 21:21:55 2025 by rpki-client