$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d952fa1d-6dc7-3a48-8e64-b62395f05064.roa File: d952fa1d-6dc7-3a48-8e64-b62395f05064.roa (raw, json) Hash identifier: jJOfOy6OnhtY72wo2kCkH8hS1kIVxa8MkRnQZvrHRPY= Subject key identifier: 49:79:92:5D:3B:55:08:3E:4B:2B:C4:B3:60:E3:20:77:25:59:83:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C27A487A383132BF6400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d952fa1d-6dc7-3a48-8e64-b62395f05064.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.217.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c2:7a:48:7a:38:31:32:bf:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=567f99cf-52a3-4e6d-bdc5-6dae94bb02c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:7b:72:80:2d:25:b3:8f:86:8b:11:50:3f: 97:c1:1d:8e:df:cf:c6:5a:d5:07:9b:75:d0:78:7d: 7e:66:78:4a:ee:99:6d:78:17:d5:df:3b:11:df:6b: b1:e0:23:66:c2:8d:78:20:04:f9:55:e3:9f:67:30: ae:2d:7e:d7:30:49:09:42:89:a6:b6:fb:fa:2c:a4: 2b:43:00:da:ce:bf:0b:25:a4:8a:e9:65:5b:d3:5f: 33:df:98:69:0c:12:9a:d7:ad:b2:f5:4d:4f:76:c0: e7:17:76:28:29:2e:45:ab:a7:08:c2:53:bb:30:13: 11:97:44:02:7f:2a:37:7f:fc:03:5f:da:6b:72:dc: 4f:88:7b:84:3c:b9:3c:69:18:9a:19:76:44:f0:eb: 31:0c:0e:3d:ef:12:ae:f2:4b:34:5e:8d:09:da:c2: 2d:8d:29:b4:03:9a:ef:34:a3:1d:17:ec:59:77:49: 7a:96:b6:54:71:c2:aa:33:71:87:46:9c:46:cd:2e: fa:25:d3:8f:29:ab:07:82:32:eb:55:8e:a7:21:f2: 2f:9a:02:50:24:0d:96:63:a3:41:4a:f5:a2:8a:63: 24:ec:1c:96:3b:6a:dd:b5:be:f7:5b:2e:85:6c:ba: 16:b9:91:2f:09:81:cc:70:c4:0d:42:c6:7e:fa:c1: ec:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:79:92:5D:3B:55:08:3E:4B:2B:C4:B3:60:E3:20:77:25:59:83:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d952fa1d-6dc7-3a48-8e64-b62395f05064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1d:15:b3:75:28:b6:3a:43:5d:c6:e4:cf:83:30:77:1b:ea: 7e:fc:7c:7e:85:f5:20:38:1b:34:0b:c2:cc:d5:4b:90:d6:e7: 39:81:c5:3d:0a:57:2a:d2:9a:1d:fa:3b:b9:eb:cc:8b:49:20: 20:b6:31:be:59:fb:52:3a:67:8b:e7:3f:3d:77:6d:3f:23:77: 21:5b:da:12:19:67:d0:f8:aa:e5:2d:bf:cf:7c:a2:4e:2d:6a: 82:1c:5f:39:9c:95:24:d5:eb:2e:b8:b5:b6:95:56:1b:58:77: 1c:70:c2:d9:b7:cc:e7:21:4a:a7:a7:b0:e1:bd:f6:40:c2:d0: e3:17:5a:4a:91:ef:13:36:a3:cd:b0:40:44:6a:59:bf:00:cc: 8d:30:b1:93:b7:98:b5:bb:d1:2f:37:a6:99:d4:3b:58:21:77: 63:c8:9b:bf:f4:93:5c:f3:b8:5f:36:99:b3:7b:98:ce:70:8e: 31:da:80:42:4a:cf:95:46:84:0e:97:35:21:ad:ab:37:14:7c: c2:87:36:75:83:b7:c2:6e:b8:be:c6:02:3e:32:2c:78:81:e3: 0a:89:2f:87:c9:cf:0d:7d:c6:16:52:9f:18:1b:bb:94:83:04: d3:4f:4e:8d:d1:d4:15:7d:63:b7:48:42:e3:b8:3b:d6:a2:f6: fe:69:4d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcJ6SHo4MTK/ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NTY3Zjk5Y2YtNTJhMy00ZTZkLWJkYzUtNmRhZTk0YmIwMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNl7coAtJbOPhosRUD+XwR2O38/GWtUHm3XQ eH1+ZnhK7plteBfV3zsR32ux4CNmwo14IAT5VeOfZzCuLX7XMEkJQommtvv6LKQr QwDazr8LJaSK6WVb018z35hpDBKa162y9U1PdsDnF3YoKS5Fq6cIwlO7MBMRl0QC fyo3f/wDX9prctxPiHuEPLk8aRiaGXZE8OsxDA497xKu8ks0Xo0J2sItjSm0A5rv NKMdF+xZd0l6lrZUccKqM3GHRpxGzS76JdOPKasHgjLrVY6nIfIvmgJQJA2WY6NB SvWiimMk7ByWO2rdtb73Wy6FbLoWuZEvCYHMcMQNQsZ++sHsWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl5kl07VQg+SyvEs2DjIHclWYOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDk1MmZhMWQtNmRjNy0z YTQ4LThlNjQtYjYyMzk1ZjA1MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsdFbN1KLY6Q13G5M+DMHcb6n78fH6F9SA4GzQLwszVS5DW5zmBxT0K VyrSmh36O7nrzItJICC2Mb5Z+1I6Z4vnPz13bT8jdyFb2hIZZ9D4quUtv898ok4t aoIcXzmclSTV6y64tbaVVhtYdxxwwtm3zOchSqensOG99kDC0OMXWkqR7xM2o82w QERqWb8AzI0wsZO3mLW70S83ppnUO1ghd2PIm7/0k1zzuF82mbN7mM5wjjHagEJK z5VGhA6XNSGtqzcUfMKHNnWDt8JuuL7GAj4yLHiB4wqJL4fJzw19xhZSnxgbu5SD BNNPTo3R1BV9Y7dIQuO4O9ai9v5pTXQ= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:22 2025 by rpki-client