$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3434728-c5a0-3059-8936-85557ae39b72.roa File: a3434728-c5a0-3059-8936-85557ae39b72.roa (raw, json) Hash identifier: zRiBcCdCziAakjzC61BKUv51SEBNyHMzYEEf8em+hF4= Subject key identifier: E9:5A:77:3A:E2:9B:7A:5F:26:70:07:6D:11:40:51:23:C0:29:E1:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C21461D5E053D662FB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3434728-c5a0-3059-8936-85557ae39b72.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.217.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c2:14:61:d5:e0:53:d6:62:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=a21d4e29-fb1d-4dbb-83ca-378ed3ae0d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:54:5c:92:89:da:0f:7d:24:a6:43:10:bd:9c: 8d:b1:f9:3e:41:d2:f2:e1:48:13:02:da:43:24:62: ed:d4:0d:1e:00:d9:35:d8:52:35:db:49:a2:03:24: 5e:10:d3:7c:7f:cf:25:80:24:ce:e3:eb:73:21:5c: b3:09:05:1b:c0:13:5b:dc:3e:ba:ee:30:66:b4:02: db:5b:5c:2b:16:4f:96:f1:d0:73:5b:e3:d9:8c:aa: 1c:5a:8c:16:91:ab:1d:2d:27:6c:ea:cd:1e:ac:7d: b4:cf:91:2c:fe:82:7d:88:37:ce:38:1d:32:28:9b: 4e:42:ee:96:34:85:dc:d4:59:71:b0:f3:fe:2e:07: da:74:a4:42:1d:af:88:e8:9a:a9:8c:f4:66:d7:b3: 05:ac:61:46:4c:46:d0:76:6a:9d:2e:4e:77:04:01: 0c:03:1f:14:e2:70:ca:ba:93:ac:71:c6:99:50:0d: 77:3e:c5:7d:6d:7f:d3:7e:56:b8:43:83:40:31:6a: 19:40:e1:e8:c1:3d:97:28:a8:1e:4b:43:d6:4a:5a: 42:ca:aa:cb:20:bf:fb:b6:24:f2:f0:d6:82:c3:45: 37:4a:2c:6d:5f:16:86:08:47:9c:de:66:bc:21:e2: ac:81:77:fd:8f:b7:76:0f:fd:e6:50:e3:29:1a:98: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5A:77:3A:E2:9B:7A:5F:26:70:07:6D:11:40:51:23:C0:29:E1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3434728-c5a0-3059-8936-85557ae39b72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c5:78:af:0d:17:47:dc:07:80:0a:3f:5a:4a:12:45:bc:36: 53:37:73:91:75:b5:01:3f:33:ec:2a:06:4a:b3:b4:f5:72:49: 95:95:ab:c0:b8:8e:62:1f:d9:cf:8b:e6:4b:94:f6:17:2a:e7: a8:3e:30:ea:5c:13:35:26:8f:cd:0b:a2:65:57:6a:26:6e:64: e5:82:92:fc:23:42:b1:3a:97:6c:9f:56:ad:07:28:ef:16:24: df:8c:53:6f:d7:68:0a:8b:6a:37:b8:a0:23:65:a4:6f:b4:08: f5:ca:ca:7a:d8:6b:4c:84:20:16:a7:47:52:a2:d5:0d:92:a6: 80:0e:05:08:5e:de:81:5a:54:c4:f1:e7:98:bf:d9:55:e7:94: 4d:26:0f:81:4e:c0:6d:94:c4:cb:e5:b2:af:b4:1d:68:99:16: 8b:d7:de:a9:b9:99:4b:cd:c2:23:05:92:29:00:14:a1:48:c8: 0e:96:78:c4:a8:d1:f5:1e:25:65:db:06:94:f0:27:18:b5:f7: b7:49:17:92:1f:96:46:7b:f0:f8:c5:43:20:40:54:7c:6c:31: ee:94:4f:cb:6d:ed:c7:1e:8f:13:4a:89:dc:0c:ef:00:fa:76: b3:32:48:07:6e:01:f6:bf:55:59:ee:1f:b7:c5:d2:9d:7c:87: 3e:53:5f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcIUYdXgU9Zi+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTIxZDRlMjktZmIxZC00ZGJiLTgzY2EtMzc4ZWQzYWUwZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1RckonaD30kpkMQvZyNsfk+QdLy4UgTAtpD JGLt1A0eANk12FI120miAyReENN8f88lgCTO4+tzIVyzCQUbwBNb3D667jBmtALb W1wrFk+W8dBzW+PZjKocWowWkasdLSds6s0erH20z5Es/oJ9iDfOOB0yKJtOQu6W NIXc1FlxsPP+LgfadKRCHa+I6JqpjPRm17MFrGFGTEbQdmqdLk53BAEMAx8U4nDK upOsccaZUA13PsV9bX/Tfla4Q4NAMWoZQOHowT2XKKgeS0PWSlpCyqrLIL/7tiTy 8NaCw0U3SixtXxaGCEec3ma8IeKsgXf9j7d2D/3mUOMpGpii9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOladzrim3pfJnAHbRFAUSPAKeFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTM0MzQ3MjgtYzVhMC0z MDU5LTg5MzYtODU1NTdhZTM5YjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfFeK8NF0fcB4AKP1pKEkW8NlM3c5F1tQE/M+wqBkqztPVySZWVq8C4 jmIf2c+L5kuU9hcq56g+MOpcEzUmj80LomVXaiZuZOWCkvwjQrE6l2yfVq0HKO8W JN+MU2/XaAqLaje4oCNlpG+0CPXKynrYa0yEIBanR1Ki1Q2SpoAOBQhe3oFaVMTx 55i/2VXnlE0mD4FOwG2UxMvlsq+0HWiZFovX3qm5mUvNwiMFkikAFKFIyA6WeMSo 0fUeJWXbBpTwJxi197dJF5IflkZ78PjFQyBAVHxsMe6UT8tt7ccejxNKidwM7wD6 drMySAduAfa/VVnuH7fF0p18hz5TX8M= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:09 2025 by rpki-client