$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3a7a3cf-a0ca-380b-a505-e9c0a036f1d0.roa File: d3a7a3cf-a0ca-380b-a505-e9c0a036f1d0.roa (raw, json) Hash identifier: 1VNL6kuPwjJsW7DOrk2WCGixid+XTQxcoQ5H96XKF3Y= Subject key identifier: BA:8B:30:14:4E:50:E7:AD:6D:CB:01:D8:B4:F8:08:1E:E2:55:9C:2D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C4B26341CBF0A4A97650 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3a7a3cf-a0ca-380b-a505-e9c0a036f1d0.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.217.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c4:b2:63:41:cb:f0:a4:a9:76:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=c1362c73-62a9-4505-9451-d3efa98ec45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:8c:fb:96:c1:54:7d:8d:75:eb:34:ea:0d: b6:eb:94:48:b3:ce:27:5e:7a:36:6a:ea:a4:dc:89: b8:8a:18:27:f8:2d:84:28:f4:90:c4:b7:ed:80:45: 2b:77:2a:87:e9:b1:c0:8d:ba:43:b4:41:22:8c:ab: 02:85:cc:c8:96:44:6e:39:77:de:2a:3f:18:af:53: 9a:8a:28:74:64:f3:24:11:44:c5:7d:6f:67:1b:b2: 2a:ef:2b:50:de:42:07:c2:1b:ab:9c:6d:f6:ca:ae: a6:86:4e:df:52:61:02:ed:f8:8c:aa:9f:ae:ff:dc: 23:01:35:7f:da:3e:aa:d7:da:be:d6:12:2d:ee:c1: 89:5d:60:05:f1:12:97:d9:29:20:89:47:47:57:20: 02:83:f4:2e:4e:09:f4:fc:6d:ce:94:c2:75:9d:ae: bc:41:18:43:48:06:ed:4a:38:7a:0a:69:8c:9b:11: a6:29:c7:3a:f4:84:11:ed:b1:d6:0d:65:85:7e:ad: 26:fa:05:16:bc:ec:54:0f:3d:a0:e2:b1:24:80:c0: 20:a9:7a:ac:57:60:68:68:3e:ef:23:b1:c2:0e:6b: b8:4b:cc:b3:0b:e3:3b:fc:8f:ce:0b:5b:df:92:1c: 4a:f7:6b:5d:57:64:0e:0c:8c:0c:f9:73:6f:1c:5f: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8B:30:14:4E:50:E7:AD:6D:CB:01:D8:B4:F8:08:1E:E2:55:9C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3a7a3cf-a0ca-380b-a505-e9c0a036f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:44:7d:13:64:62:e3:4f:ed:a0:2f:73:5d:3e:46:f4:d0:41: ec:62:02:e9:0f:93:c5:df:f9:49:c0:a8:d0:8f:79:a0:ed:25: 15:2c:6f:27:c6:ff:1f:bc:1d:a8:4b:fe:83:a5:c5:0a:91:82: 6d:d1:3a:de:71:a0:ec:d3:13:6e:9a:f3:5c:91:08:86:bb:80: 00:ad:65:7e:ff:c4:56:3d:ef:ac:67:62:1e:a5:76:b1:69:00: 72:2d:d9:18:fb:b9:05:79:5f:44:ec:df:bf:0d:7e:c0:3d:7b: d5:66:32:35:34:8b:58:5a:eb:da:fa:78:c4:e9:53:e7:9c:85: 4f:4e:52:09:0e:2b:73:e3:e8:24:c6:69:1f:9f:c9:a0:1a:91: b1:b9:52:56:70:79:13:e8:6a:fa:27:c8:0e:0f:b6:5c:20:70: 98:49:9d:9a:02:87:2a:54:16:af:46:3f:00:27:7a:f7:ea:f9: 86:f8:1e:58:9a:51:de:2e:9a:bc:2d:18:e7:af:d5:87:57:60: 47:ac:26:cd:f9:c6:06:b8:f2:c7:46:16:f8:e3:43:cb:14:a5: c3:3e:02:5e:a2:7a:cf:18:c6:7f:02:12:29:30:31:26:4d:e4: 91:47:9a:4f:70:92:ee:d9:e8:80:62:31:aa:5a:5d:3b:32:a6: ba:15:c5:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcSyY0HL8KSpdlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzEzNjJjNzMtNjJhOS00NTA1LTk0NTEtZDNlZmE5OGVjNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb2M+5bBVH2Ndes06g2265RIs84nXno2auqk 3Im4ihgn+C2EKPSQxLftgEUrdyqH6bHAjbpDtEEijKsChczIlkRuOXfeKj8Yr1Oa iih0ZPMkEUTFfW9nG7Iq7ytQ3kIHwhurnG32yq6mhk7fUmEC7fiMqp+u/9wjATV/ 2j6q19q+1hIt7sGJXWAF8RKX2SkgiUdHVyACg/QuTgn0/G3OlMJ1na68QRhDSAbt Sjh6CmmMmxGmKcc69IQR7bHWDWWFfq0m+gUWvOxUDz2g4rEkgMAgqXqsV2BoaD7v I7HCDmu4S8yzC+M7/I/OC1vfkhxK92tdV2QODIwM+XNvHF8/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqLMBROUOetbcsB2LT4CB7iVZwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNhN2EzY2YtYTBjYS0z ODBiLWE1MDUtZTljMGEwMzZmMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBEfRNkYuNP7aAvc10+RvTQQexiAukPk8Xf+UnAqNCPeaDtJRUsbyfG /x+8HahL/oOlxQqRgm3ROt5xoOzTE26a81yRCIa7gACtZX7/xFY976xnYh6ldrFp AHIt2Rj7uQV5X0Ts378NfsA9e9VmMjU0i1ha69r6eMTpU+echU9OUgkOK3Pj6CTG aR+fyaAakbG5UlZweRPoavonyA4PtlwgcJhJnZoChypUFq9GPwAnevfq+Yb4Hlia Ud4umrwtGOev1YdXYEesJs35xga48sdGFvjjQ8sUpcM+Al6ies8Yxn8CEikwMSZN 5JFHmk9wku7Z6IBiMapaXTsyproVxVE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:25 2025 by rpki-client