$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a146c65-5daa-37a4-adc8-dc9f5622f12e.roa File: 9a146c65-5daa-37a4-adc8-dc9f5622f12e.roa (raw, json) Hash identifier: E+z9GmBpg6WCER4p+oveKo2NQbQuM3QG6hdn5EV4wfE= Subject key identifier: 20:A6:F2:2B:F8:B1:BC:7D:BE:4C:69:28:F9:8E:9B:69:F7:1F:17:B1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9CA277344E224D37BDC640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a146c65-5daa-37a4-adc8-dc9f5622f12e.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 174.72.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:a2:77:34:4e:22:4d:37:bd:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=d3330729-0931-4652-937b-b7f7ce052fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2a:ac:fc:3d:c4:bb:ef:80:3a:b8:1d:78:8f: 33:32:28:35:00:44:45:a3:66:bc:b4:9f:f4:b5:ed: 24:ff:fb:94:ba:01:e4:08:0a:ef:ad:11:9b:75:b3: 38:ff:11:7a:75:59:9e:6c:7a:d3:7e:51:b7:df:ba: b6:27:7a:2d:3f:a8:b7:f9:8a:2b:10:a6:0d:65:1a: f9:a7:5b:06:30:b8:ad:64:5c:4b:96:de:5d:b5:ba: 51:82:d6:b1:eb:ae:6b:9e:e5:c3:a0:0a:88:bb:2f: c6:b1:33:d8:7a:d5:37:12:b3:20:0e:82:a9:03:6e: 1c:e8:bc:89:85:ba:9b:e9:c8:39:82:c9:76:d9:ea: aa:d1:fc:74:3a:dd:1b:2e:fd:c2:47:6e:11:ad:8b: 85:ac:34:53:30:49:db:99:29:f0:c0:0f:51:15:1d: a3:f2:c0:08:ae:04:61:37:14:6c:a0:00:9f:5e:e3: 7f:07:1c:be:7c:48:de:a1:30:f7:9c:f3:d4:a8:34: 6d:b2:a9:ad:e7:51:74:70:25:1f:00:30:cf:7c:04: 32:1e:44:e3:b2:b9:3d:c3:66:f4:06:68:87:a4:bd: 65:9d:ec:56:25:ea:e9:f5:91:ce:3e:d1:cb:e5:ef: bb:15:54:49:48:2e:49:26:c6:ab:2c:75:ad:3d:32: ca:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A6:F2:2B:F8:B1:BC:7D:BE:4C:69:28:F9:8E:9B:69:F7:1F:17:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a146c65-5daa-37a4-adc8-dc9f5622f12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:04:4b:ba:e4:b1:e8:8f:a4:25:1c:d6:96:33:04:49:36:3d: 4e:ee:40:81:b6:40:ab:c8:a6:0c:4d:a7:8a:97:35:77:09:a6: 94:07:f6:8b:57:81:aa:b2:c8:4c:4f:99:63:2d:17:1f:1f:a2: 38:83:86:2e:24:49:04:ef:f5:d8:d1:f1:74:03:2f:18:3d:52: 8d:84:2f:6d:c0:82:d7:c2:1d:70:fe:62:95:89:07:52:f2:37: 47:f4:71:a0:39:28:45:e1:a7:de:9c:ca:bb:92:3f:c2:b3:1a: 4d:4a:b7:56:7b:42:70:0b:57:e1:43:fa:bd:a4:d3:24:a1:40: 05:3d:d8:db:03:b8:bb:a1:6a:68:67:fa:68:50:ec:74:ba:a8: b3:e1:36:06:ea:93:eb:31:c2:0e:fd:2a:1f:40:05:51:e2:df: 5b:e9:2d:1b:ac:0d:9f:ab:c0:ae:64:ff:63:a8:b6:0a:aa:bb: 9e:2e:43:1e:8a:bf:d7:80:a2:cb:99:fa:52:47:f4:58:2a:cf: b6:f1:46:08:40:77:76:1a:98:ef:e9:5b:7c:39:25:cb:13:c8: 65:a0:14:4a:e0:79:e6:98:54:f0:83:bd:6d:0f:46:99:1e:7a: 4f:82:bf:d3:d0:e5:04:1c:fc:8d:da:94:0b:be:a7:a9:bf:76: 4e:9c:db:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnKJ3NE4iTTe9xkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDMzMzA3MjktMDkzMS00NjUyLTkzN2ItYjdmN2NlMDUyZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiqs/D3Eu++AOrgdeI8zMig1AERFo2a8tJ/0 te0k//uUugHkCArvrRGbdbM4/xF6dVmebHrTflG337q2J3otP6i3+YorEKYNZRr5 p1sGMLitZFxLlt5dtbpRgtax665rnuXDoAqIuy/GsTPYetU3ErMgDoKpA24c6LyJ hbqb6cg5gsl22eqq0fx0Ot0bLv3CR24RrYuFrDRTMEnbmSnwwA9RFR2j8sAIrgRh NxRsoACfXuN/Bxy+fEjeoTD3nPPUqDRtsqmt51F0cCUfADDPfAQyHkTjsrk9w2b0 BmiHpL1lnexWJerp9ZHOPtHL5e+7FVRJSC5JJsarLHWtPTLKKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCm8iv4sbx9vkxpKPmOm2n3HxexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWExNDZjNjUtNWRhYS0z N2E0LWFkYzgtZGM5ZjU2MjJmMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIES7rkseiPpCUc1pYzBEk2PU7uQIG2QKvIpgxNp4qXNXcJppQH9otX gaqyyExPmWMtFx8fojiDhi4kSQTv9djR8XQDLxg9Uo2EL23AgtfCHXD+YpWJB1Ly N0f0caA5KEXhp96cyruSP8KzGk1Kt1Z7QnALV+FD+r2k0yShQAU92NsDuLuhamhn +mhQ7HS6qLPhNgbqk+sxwg79Kh9ABVHi31vpLRusDZ+rwK5k/2Ootgqqu54uQx6K v9eAosuZ+lJH9Fgqz7bxRghAd3YamO/pW3w5JcsTyGWgFErgeeaYVPCDvW0PRpke ek+Cv9PQ5QQc/I3alAu+p6m/dk6c2wU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:08:14 2025 by rpki-client