$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa File: 2068fb4a-98b3-3410-9859-e3769e0dd577.roa (raw, json) Hash identifier: cq5g1LgSxUaG7l7J90L/YPh+rqhUaEuOhDCZPtq5tDA= Subject key identifier: 95:5F:EC:AE:5D:27:7A:56:CE:9D:B7:52:7B:0E:1E:B9:D1:F1:A8:67 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01D184D6DC5DB85B59C280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.223.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:d1:84:d6:dc:5d:b8:5b:59:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=d30e38e4-6fb3-4688-948c-af45ce0d8da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:bc:17:85:e7:bd:21:9d:ac:49:40:eb:78: 13:01:10:00:65:70:b3:4a:fd:09:de:00:a4:d9:1c: 90:e1:d5:72:1a:1c:61:6f:01:70:61:11:e6:a4:3a: 68:98:0f:f7:ed:0c:ce:ac:3f:8d:4c:0b:19:07:56: c2:00:25:e1:a6:5e:0d:dc:3a:53:e0:3a:26:ee:7a: 88:93:a0:e3:e8:25:e4:8f:b0:15:09:95:b6:e1:e0: 36:80:81:4a:74:4b:2a:d1:2b:6a:b9:03:ef:cb:98: 55:22:f0:ea:14:2e:f9:4d:1e:d5:6c:5a:78:50:d2: 6f:df:99:30:10:2e:b9:85:e6:fa:c6:1f:68:a9:58: 99:3f:27:8d:36:48:5e:f6:ed:38:a0:c3:f4:7b:c4: 05:01:49:9d:d6:a4:09:04:8b:6e:8c:80:b2:72:55: aa:25:25:51:6f:e9:ad:bd:ae:0e:26:df:6f:3d:6a: b1:4d:09:a5:cf:d0:bb:72:bf:e3:be:34:6d:64:3c: 9d:94:e6:45:c3:53:86:52:71:be:37:2f:de:d0:2a: 77:fa:2c:ff:a5:ba:b9:98:72:52:ef:77:03:48:9a: 68:b5:f3:c9:b6:bc:bf:d0:e6:49:50:d9:8c:f9:e3: 36:aa:60:f8:40:4f:67:7a:22:f6:43:71:a8:21:d2: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:EC:AE:5D:27:7A:56:CE:9D:B7:52:7B:0E:1E:B9:D1:F1:A8:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9b:1e:54:2b:2f:28:1b:64:83:bb:c9:12:7a:fe:87:8b:f7: cb:9c:07:51:39:0c:c3:64:fd:0b:e0:6a:30:08:1f:5f:2b:0c: a3:8e:53:b5:9b:4f:df:b2:89:cd:c7:0b:bd:ff:76:27:37:d9: 45:87:62:40:20:06:8f:31:80:ba:03:77:05:5a:ed:ec:74:93: 49:60:80:1f:8d:29:2e:e8:2e:d2:1f:94:3e:60:fa:81:f3:8d: 11:1e:d5:6f:85:95:c6:aa:76:ec:1d:c6:be:21:73:b0:b3:c3: c8:84:83:a0:7c:41:4e:fd:cc:82:44:db:a2:4c:96:42:cc:99: ce:00:ad:9d:09:65:d4:d2:64:b9:ec:06:4a:5a:07:88:88:af: 11:50:bc:6f:e1:e6:1b:66:c5:2e:aa:02:87:cc:d9:e8:36:35: 7d:42:d2:27:e8:ce:e2:80:e3:e7:db:c1:b4:d7:42:80:9d:c0: ad:8a:f0:8a:42:c2:39:d2:6b:22:6f:54:e1:09:e4:64:d6:4f: a6:e0:9a:de:da:f5:09:59:6b:d8:63:3f:b8:18:90:ea:62:07: 2f:41:4e:28:e0:24:08:cf:ad:be:79:c3:7d:67:d9:3f:0a:21: 5f:11:db:44:46:be:c8:91:bb:d6:69:1d:dc:9e:0e:2b:f2:3f: 76:b9:35:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAdGE1txduFtZwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDMwZTM4ZTQtNmZiMy00Njg4LTk0OGMtYWY0NWNlMGQ4ZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln28F4XnvSGdrElA63gTARAAZXCzSv0J3gCk 2RyQ4dVyGhxhbwFwYRHmpDpomA/37QzOrD+NTAsZB1bCACXhpl4N3DpT4Dom7nqI k6Dj6CXkj7AVCZW24eA2gIFKdEsq0StquQPvy5hVIvDqFC75TR7VbFp4UNJv35kw EC65heb6xh9oqViZPyeNNkhe9u04oMP0e8QFAUmd1qQJBItujICyclWqJSVRb+mt va4OJt9vPWqxTQmlz9C7cr/jvjRtZDydlOZFw1OGUnG+Ny/e0Cp3+iz/pbq5mHJS 73cDSJpotfPJtry/0OZJUNmM+eM2qmD4QE9neiL2Q3GoIdIzNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVf7K5dJ3pWzp23UnsOHrnR8ahnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA2OGZiNGEtOThiMy0z NDEwLTk4NTktZTM3NjllMGRkNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN9cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABObHlQrLygbZIO7yRJ6/oeL98ucB1E5DMNk/QvgajAIH18rDKOOU7Wb T9+yic3HC73/dic32UWHYkAgBo8xgLoDdwVa7ex0k0lggB+NKS7oLtIflD5g+oHz jREe1W+Flcaqduwdxr4hc7Czw8iEg6B8QU79zIJE26JMlkLMmc4ArZ0JZdTSZLns BkpaB4iIrxFQvG/h5htmxS6qAofM2eg2NX1C0ifozuKA4+fbwbTXQoCdwK2K8IpC wjnSayJvVOEJ5GTWT6bgmt7a9QlZa9hjP7gYkOpiBy9BTijgJAjPrb55w31n2T8K IV8R20RGvsiRu9ZpHdyeDivyP3a5NTw= -----END CERTIFICATE-----Generated at Thu Oct 16 01:58:06 2025 by rpki-client