$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d164255-aef8-3138-ba75-01068ebd184e.roa File: 3d164255-aef8-3138-ba75-01068ebd184e.roa (raw, json) Hash identifier: qYkiLOmBZ3kSnWjhkJFrlWxaElMdg/WQs3OfeICwwAg= Subject key identifier: 5A:F8:A3:C8:8F:73:57:A7:E1:9A:9E:38:25:1F:2D:E6:A4:C4:F6:4A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C7CFDDCC0334C8BA8A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d164255-aef8-3138-ba75-01068ebd184e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c7:cf:dd:cc:03:34:c8:ba:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=c7075c9e-2f64-4354-8c9f-2905d1ffbabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:e9:fd:33:1f:b2:6d:82:a4:5e:18:25:76: 9c:8f:28:cf:ff:54:5a:fe:3d:f5:9e:55:4c:30:60: e1:9b:33:12:3d:58:48:31:9e:38:63:27:ce:6c:03: bc:04:2c:fa:31:63:b2:a5:fd:49:ea:aa:ff:19:53: ef:7d:9a:e4:fb:1a:4b:39:11:b7:05:32:36:bf:ef: 0e:d1:f0:4c:a6:75:be:af:96:93:09:d6:f2:0d:96: 9a:00:2d:65:44:b6:1e:4b:25:96:43:43:b5:ba:62: ce:fe:5a:1e:24:c9:8d:2c:23:b2:2d:a8:79:54:df: 96:6c:c5:b0:65:46:97:32:87:70:99:bf:bf:a6:87: b9:80:a6:8f:76:65:16:a4:66:5e:79:ed:50:84:0c: e2:7d:ec:49:92:13:c1:79:05:90:cd:7d:14:5f:1e: 19:7e:a5:b2:0b:8f:7c:bc:46:36:fc:f8:af:aa:5e: 51:fb:c2:9e:09:23:29:f0:9a:21:5d:76:0e:a8:58: ff:65:7c:37:bb:87:01:e9:00:dc:10:44:90:d8:c4: 5f:2a:5f:77:5e:de:db:bc:09:62:43:e5:20:4d:02: 73:83:97:d2:84:81:27:c2:83:1b:35:55:97:04:2c: e1:42:a1:69:8b:2c:83:43:05:e9:81:52:da:83:c2: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F8:A3:C8:8F:73:57:A7:E1:9A:9E:38:25:1F:2D:E6:A4:C4:F6:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d164255-aef8-3138-ba75-01068ebd184e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e6:0b:ba:d5:f2:d0:d7:d8:ca:28:54:10:f0:6e:b7:70:6a: 5a:ef:2f:61:c3:5b:7a:22:b5:b8:39:72:d6:6f:1c:56:27:95: 15:00:3c:39:db:a8:d7:3d:ec:fb:a6:2e:07:fd:17:6f:24:7f: 03:b0:ec:04:1d:64:f3:83:67:8e:c1:c6:03:27:a9:36:11:61: ec:5a:63:c3:7c:fb:9b:ae:dc:2c:7a:fd:ea:a1:76:63:52:1c: 40:1c:9e:0f:d2:46:a4:41:7c:7d:76:dc:32:90:97:28:13:8c: c5:ee:32:39:6d:13:93:09:b4:7d:aa:05:07:4e:1c:d0:7e:6a: 59:1c:95:ed:b2:88:30:48:fa:6a:15:e8:50:be:a2:04:5a:08: 8b:5f:90:41:e3:f4:bb:de:4f:66:39:10:c9:e1:cd:37:1b:44: 43:d0:d5:8e:ff:8c:95:20:38:c1:bf:b3:ad:69:eb:0a:7e:e3: 19:ff:8c:92:26:f3:0b:04:76:5c:e9:ed:58:de:31:b8:2c:7f: b6:a4:8c:8c:8c:eb:16:0c:02:55:b8:c1:74:34:97:fc:79:4e: 43:83:ea:e1:74:d4:11:99:b2:db:d1:41:02:48:d4:85:b4:3d: 74:f4:cf:71:c3:49:26:fd:7d:c3:60:77:32:cb:34:bc:00:10: 2f:10:7f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcfP3cwDNMi6ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzcwNzVjOWUtMmY2NC00MzU0LThjOWYtMjkwNWQxZmZiYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrjp/TMfsm2CpF4YJXacjyjP/1Ra/j31nlVM MGDhmzMSPVhIMZ44YyfObAO8BCz6MWOypf1J6qr/GVPvfZrk+xpLORG3BTI2v+8O 0fBMpnW+r5aTCdbyDZaaAC1lRLYeSyWWQ0O1umLO/loeJMmNLCOyLah5VN+WbMWw ZUaXModwmb+/poe5gKaPdmUWpGZeee1QhAzifexJkhPBeQWQzX0UXx4ZfqWyC498 vEY2/Pivql5R+8KeCSMp8JohXXYOqFj/ZXw3u4cB6QDcEESQ2MRfKl93Xt7bvAli Q+UgTQJzg5fShIEnwoMbNVWXBCzhQqFpiyyDQwXpgVLag8KpXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr4o8iPc1en4ZqeOCUfLeakxPZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2QxNjQyNTUtYWVmOC0z MTM4LWJhNzUtMDEwNjhlYmQxODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvmC7rV8tDX2MooVBDwbrdwalrvL2HDW3oitbg5ctZvHFYnlRUAPDnb qNc97PumLgf9F28kfwOw7AQdZPODZ47BxgMnqTYRYexaY8N8+5uu3Cx6/eqhdmNS HEAcng/SRqRBfH123DKQlygTjMXuMjltE5MJtH2qBQdOHNB+alkcle2yiDBI+moV 6FC+ogRaCItfkEHj9LveT2Y5EMnhzTcbREPQ1Y7/jJUgOMG/s61p6wp+4xn/jJIm 8wsEdlzp7VjeMbgsf7akjIyM6xYMAlW4wXQ0l/x5TkOD6uF01BGZstvRQQJI1IW0 PXT0z3HDSSb9fcNgdzLLNLwAEC8Qf6k= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:26 2025 by rpki-client