$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7197daa-8a8c-32f9-8816-302634daed79.roa File: a7197daa-8a8c-32f9-8816-302634daed79.roa (raw, json) Hash identifier: fBDzZVcX5ZSBDqfP+I70nx3ss2/TNyC4nJtxXjGSQa4= Subject key identifier: 6D:9C:6D:7E:25:49:9E:C0:7E:1D:B5:87:BB:AA:52:BC:45:DF:2E:DE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2136586010919E3F835A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7197daa-8a8c-32f9-8816-302634daed79.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.66.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:13:65:86:01:09:19:e3:f8:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=697def09-c1b6-4947-9b47-4f2758575bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b6:3c:ba:cf:b5:51:b4:ff:c1:e2:fe:88:70: f4:03:79:ed:1c:a5:59:23:1a:aa:43:3a:07:00:29: 00:d5:2e:79:17:b1:ce:d7:c5:be:81:87:8c:79:97: 88:75:5b:b2:99:fb:b9:8e:ef:c8:a5:69:39:48:7b: e6:11:73:7e:9a:a5:24:3f:1f:ef:23:6f:88:70:37: 32:e6:9b:5f:3c:58:81:03:9a:5e:8d:97:d3:dc:82: 6b:34:d6:dc:c7:17:98:46:20:ac:0f:97:ba:fe:52: 12:a4:3c:31:b1:a2:62:cb:2a:e1:78:97:02:f9:e5: 52:36:99:95:b7:8b:cb:33:b1:eb:72:4f:58:1f:d3: 7d:08:57:a9:d8:15:d7:d5:73:c7:6f:f7:41:29:16: 84:8b:2f:27:5b:c6:62:09:eb:9f:d0:6a:c9:d2:81: d9:7b:0d:7f:3e:24:60:24:7d:1c:54:6f:f9:b9:84: f1:df:d8:b0:b1:7f:e6:b5:82:46:f6:74:e3:33:12: 65:0c:da:7b:ed:e9:e0:18:a0:1b:89:d2:3d:39:61: a2:61:76:db:77:1d:1a:cd:32:3f:82:be:62:95:ca: 35:32:24:0e:62:4b:e5:3c:9b:64:c3:54:21:3b:bf: b6:e5:d3:c3:6b:f4:27:74:00:c9:7b:8c:8a:83:dc: e3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9C:6D:7E:25:49:9E:C0:7E:1D:B5:87:BB:AA:52:BC:45:DF:2E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7197daa-8a8c-32f9-8816-302634daed79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:85:b9:82:fc:fe:6c:cb:6f:5b:28:44:0a:24:e6:a7:89:1c: 95:09:9d:44:fd:44:01:53:be:1d:55:d6:8c:47:a7:29:a1:29: 45:1f:d1:04:58:e9:48:77:2d:b3:9a:a8:01:c8:87:03:6f:12: 04:cc:8b:bb:79:b6:a6:06:ee:02:8f:d7:98:7b:0d:89:99:44: 65:b9:cb:f0:37:91:35:20:e6:5a:87:01:82:8d:a1:f8:e2:9b: a4:53:97:6f:9f:68:8e:11:b7:dc:5d:0c:c0:34:06:a1:5d:67: 51:77:3f:78:55:9f:3b:53:c5:07:5c:6d:38:70:1b:c4:2c:e5: 4e:d5:0e:bf:a1:15:f7:15:2c:98:22:a9:93:42:94:32:d0:90: d2:e9:30:7e:8c:52:9c:f0:50:54:01:d5:fe:42:7c:4a:9e:51: 6b:d6:78:72:de:45:71:23:d3:1f:ab:1e:95:6f:7f:26:dd:f1: b3:64:d5:b7:5c:b4:cb:46:bf:e9:f9:d8:c3:cc:d0:78:43:f7: e0:3b:1e:e7:30:f0:cc:9c:08:73:1d:1f:e5:57:a4:da:90:53: 29:b0:f0:db:d1:8a:97:4d:69:e6:84:38:b3:24:e3:d8:f2:7d: f2:92:47:46:b6:41:24:c2:ae:0e:31:ed:e6:b5:bd:26:39:cf: 5a:24:7a:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hNlhgEJGeP4NaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Njk3ZGVmMDktYzFiNi00OTQ3LTliNDctNGYyNzU4NTc1YmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7Y8us+1UbT/weL+iHD0A3ntHKVZIxqqQzoH ACkA1S55F7HO18W+gYeMeZeIdVuymfu5ju/IpWk5SHvmEXN+mqUkPx/vI2+IcDcy 5ptfPFiBA5pejZfT3IJrNNbcxxeYRiCsD5e6/lISpDwxsaJiyyrheJcC+eVSNpmV t4vLM7Hrck9YH9N9CFep2BXX1XPHb/dBKRaEiy8nW8ZiCeuf0GrJ0oHZew1/PiRg JH0cVG/5uYTx39iwsX/mtYJG9nTjMxJlDNp77engGKAbidI9OWGiYXbbdx0azTI/ gr5ilco1MiQOYkvlPJtkw1QhO7+25dPDa/QndADJe4yKg9zjkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2cbX4lSZ7Afh21h7uqUrxF3y7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTcxOTdkYWEtOGE4Yy0z MmY5LTg4MTYtMzAyNjM0ZGFlZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOFuYL8/mzLb1soRAok5qeJHJUJnUT9RAFTvh1V1oxHpymhKUUf0QRY 6Uh3LbOaqAHIhwNvEgTMi7t5tqYG7gKP15h7DYmZRGW5y/A3kTUg5lqHAYKNofji m6RTl2+faI4Rt9xdDMA0BqFdZ1F3P3hVnztTxQdcbThwG8Qs5U7VDr+hFfcVLJgi qZNClDLQkNLpMH6MUpzwUFQB1f5CfEqeUWvWeHLeRXEj0x+rHpVvfybd8bNk1bdc tMtGv+n52MPM0HhD9+A7Hucw8MycCHMdH+VXpNqQUymw8NvRipdNaeaEOLMk49jy ffKSR0a2QSTCrg4x7ea1vSY5z1okeko= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:49 2025 by rpki-client