$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b5e61f4-7371-355c-b2f3-e49e173c4042.roa File: 1b5e61f4-7371-355c-b2f3-e49e173c4042.roa (raw, json) Hash identifier: cVxru45qSrdxJw2hr6G5op7Bb2UcR8JCpVGOJ3kNgmU= Subject key identifier: 58:5B:30:F4:B9:5B:C6:7E:9B:5C:88:17:DC:D4:2C:A6:7C:D3:90:7E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B2B7F485822872404680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b5e61f4-7371-355c-b2f3-e49e173c4042.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b2:b7:f4:85:82:28:72:40:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=a1dac579-5e19-4168-8a4e-494e28254824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:c7:b9:21:02:fa:24:46:19:b6:b7:8e:32: 60:08:8c:8e:a1:f3:f2:e6:d2:8f:e0:1d:fe:a9:e2: 59:f1:3c:a8:9e:94:50:d8:04:96:4d:14:3d:ae:a1: 87:d2:e5:bc:be:0b:b2:a9:76:03:39:7c:15:90:10: 43:b5:82:53:27:f7:c6:0c:83:5c:37:69:da:be:22: 9b:bb:6d:d7:b2:1b:a5:6f:b4:e5:3d:bb:da:70:ec: 8f:bb:49:0b:b9:44:86:87:7d:45:03:23:a1:8f:06: a5:c0:fa:79:24:d8:cb:14:db:4a:a0:40:ca:9d:5c: e1:1d:de:a2:fa:1c:ce:42:71:b8:bb:02:72:63:af: 06:84:10:aa:c8:6f:aa:7e:1a:c7:a2:b5:8f:92:2f: a9:a9:fe:12:59:bb:da:e9:3d:f1:78:bf:08:d6:8a: 73:08:55:2a:50:0d:ca:2f:22:e5:34:7d:86:a7:32: 9a:9e:8d:87:0f:51:61:29:22:b7:a0:21:d8:01:e8: b9:e3:89:f7:05:88:a0:f7:2d:cd:6b:41:d7:fd:b8: f5:94:36:f7:62:25:bd:c3:32:26:2a:20:02:83:66: 72:8a:e3:19:23:f7:53:e5:64:14:46:06:37:01:9d: 55:d7:0c:d0:f0:51:d9:bf:62:38:60:9b:98:f9:11: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5B:30:F4:B9:5B:C6:7E:9B:5C:88:17:DC:D4:2C:A6:7C:D3:90:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b5e61f4-7371-355c-b2f3-e49e173c4042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c6:ef:79:ea:6b:9e:7c:7d:31:e2:e5:42:22:2a:f6:27:06: ce:9a:8c:19:5f:dd:c1:1d:ee:cc:55:bd:11:52:63:c5:e3:0f: 8b:97:39:fc:0e:9e:3e:58:d4:f6:70:83:a5:84:88:71:12:5a: af:24:7c:62:09:04:d9:10:bb:eb:15:f0:dd:14:35:6b:94:b8: fd:46:cb:c7:92:c6:d7:3e:86:d1:09:af:5e:12:e9:f6:b2:04: 06:cd:27:e1:af:0c:7c:27:87:18:48:1f:98:51:81:f8:d3:e0: a8:4d:96:53:af:ff:7b:28:52:53:5e:ee:ac:ff:56:89:ff:ce: 8e:c2:00:ed:02:f8:54:25:a3:5c:4f:89:9c:e6:41:84:0c:53: 29:cf:26:43:44:33:ad:88:49:e0:c1:01:41:9c:7a:5e:ff:b5: 6d:e4:78:96:4b:0e:23:fe:c1:07:85:88:98:bd:7a:04:2e:f7: 99:1f:a3:de:8d:ea:7d:0b:63:85:63:f5:3f:d8:ba:19:14:dd: 25:63:f1:9e:30:2b:7a:27:e3:bf:cf:56:be:d5:3d:61:c9:b1: e0:9a:40:4b:d6:66:82:6f:20:ef:ab:85:9d:f5:6c:87:85:fd: 62:f1:84:ef:b8:a1:2f:76:f9:0d:87:f2:db:c2:5a:99:ff:45: 4f:37:5d:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbK39IWCKHJARoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTFkYWM1NzktNWUxOS00MTY4LThhNGUtNDk0ZTI4MjU0ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5nHuSEC+iRGGba3jjJgCIyOofPy5tKP4B3+ qeJZ8TyonpRQ2ASWTRQ9rqGH0uW8vguyqXYDOXwVkBBDtYJTJ/fGDINcN2naviKb u23Xshulb7TlPbvacOyPu0kLuUSGh31FAyOhjwalwPp5JNjLFNtKoEDKnVzhHd6i +hzOQnG4uwJyY68GhBCqyG+qfhrHorWPki+pqf4SWbva6T3xeL8I1opzCFUqUA3K LyLlNH2GpzKano2HD1FhKSK3oCHYAei544n3BYig9y3Na0HX/bj1lDb3YiW9wzIm KiACg2ZyiuMZI/dT5WQURgY3AZ1V1wzQ8FHZv2I4YJuY+RGRPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhbMPS5W8Z+m1yIF9zULKZ805B+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWI1ZTYxZjQtNzM3MS0z NTVjLWIyZjMtZTQ5ZTE3M2M0MDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNDzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbG73nqa558fTHi5UIiKvYnBs6ajBlf3cEd7sxVvRFSY8XjD4uXOfwO nj5Y1PZwg6WEiHESWq8kfGIJBNkQu+sV8N0UNWuUuP1Gy8eSxtc+htEJr14S6fay BAbNJ+GvDHwnhxhIH5hRgfjT4KhNllOv/3soUlNe7qz/Von/zo7CAO0C+FQlo1xP iZzmQYQMUynPJkNEM62ISeDBAUGcel7/tW3keJZLDiP+wQeFiJi9egQu95kfo96N 6n0LY4Vj9T/YuhkU3SVj8Z4wK3on47/PVr7VPWHJseCaQEvWZoJvIO+rhZ31bIeF /WLxhO+4oS92+Q2H8tvCWpn/RU83XZk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:54 2025 by rpki-client