$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/322756ce-1129-3e12-9775-46ddcf8c9930.roa File: 322756ce-1129-3e12-9775-46ddcf8c9930.roa (raw, json) Hash identifier: 8mv+qWy4wiUE6Fcan3P8n2ft9688wCpJE2fa2cGjftU= Subject key identifier: AA:9F:06:AC:05:71:FE:86:B8:AE:6F:7D:D0:2E:C4:20:68:62:E8:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A249CA91169339A56580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/322756ce-1129-3e12-9775-46ddcf8c9930.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a2:49:ca:91:16:93:39:a5:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=482e34aa-e5f3-4ad2-bceb-eca80e748de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3d:7c:21:83:eb:ee:ce:14:eb:c4:c0:a2:28: 03:5b:e1:f5:37:78:5b:c8:32:fd:3a:87:a5:3b:c4: 2e:76:e3:6e:92:b2:aa:5d:66:0e:ec:d7:b6:42:0d: b4:25:de:4e:0b:41:03:9c:c8:2a:d1:c1:9d:5d:a3: 72:0b:d8:82:1e:11:96:54:1c:86:b3:62:33:fe:13: c2:6b:0b:f8:54:8b:11:e0:ae:7b:4d:81:11:c7:8f: ff:d2:89:08:d7:00:66:8f:0e:2b:5a:45:7f:92:6e: 2e:c2:f5:26:92:64:3b:00:57:0c:5f:20:ac:78:ef: aa:c0:52:df:80:67:e5:28:44:0a:34:1e:b8:be:48: a8:71:5a:5b:74:cd:39:29:05:1c:48:a9:bb:1d:22: c9:7e:f1:eb:df:c8:ab:88:39:27:99:bf:1d:d9:9f: 82:cd:5d:fd:94:fb:78:b0:4d:68:43:a2:94:bb:0f: 1d:59:e5:92:99:5c:17:4b:3f:ac:45:c1:2c:c0:7e: af:48:b3:2d:81:9f:b0:92:fb:88:e3:c2:ba:2c:e6: 50:3c:5e:cf:84:7f:b4:eb:0c:06:f9:20:54:d6:57: 10:33:db:f0:06:4e:9d:2d:82:5b:a6:61:cc:08:7d: 08:dc:63:11:81:6f:79:dc:bc:f6:c2:56:60:70:78: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9F:06:AC:05:71:FE:86:B8:AE:6F:7D:D0:2E:C4:20:68:62:E8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/322756ce-1129-3e12-9775-46ddcf8c9930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:de:7c:50:75:2c:0d:9e:29:85:86:51:78:3c:f1:de:85:62: c9:5e:f4:67:31:99:47:af:c5:54:ca:1e:5f:48:e3:6d:fe:ea: c6:da:47:90:83:50:83:92:4e:0c:ca:c6:e2:90:2b:c8:c9:c3: d4:46:6c:49:d7:2c:f7:0e:5d:59:f9:ce:83:a2:18:5f:c5:60: ee:db:36:d4:60:98:e4:38:d5:23:b9:cd:42:42:ad:3a:5d:96: 3a:fb:9b:ed:69:70:53:c9:0b:b5:0b:3c:a0:e6:3c:79:8d:07: dd:0c:d3:b0:ef:f2:dd:de:5d:0c:5d:31:01:f5:80:7f:71:9e: 4c:8c:b3:ca:a5:b1:67:9a:65:d8:0c:5b:e7:57:8e:e4:21:af: 18:2d:eb:63:58:6b:62:a8:9d:68:6c:53:be:82:01:c0:73:30: c3:3e:16:45:b0:bb:51:f5:9e:25:f9:38:38:13:fa:65:b8:ed: dc:27:45:f9:1a:80:37:51:4f:5b:af:70:0f:e6:07:f8:1f:f4: d9:56:56:fc:3f:3d:03:84:c4:21:94:c4:93:10:95:6f:5c:6b: ff:2a:73:12:7e:64:97:96:4c:9f:fd:07:e4:dd:55:1b:30:93: a0:d6:6a:dc:9f:ad:2e:e1:d1:12:5b:a5:50:cc:c6:e7:5a:73: 63:c8:c0:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaJJypEWkzmlZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDgyZTM0YWEtZTVmMy00YWQyLWJjZWItZWNhODBlNzQ4ZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz18IYPr7s4U68TAoigDW+H1N3hbyDL9Ooel O8QuduNukrKqXWYO7Ne2Qg20Jd5OC0EDnMgq0cGdXaNyC9iCHhGWVByGs2Iz/hPC awv4VIsR4K57TYERx4//0okI1wBmjw4rWkV/km4uwvUmkmQ7AFcMXyCseO+qwFLf gGflKEQKNB64vkiocVpbdM05KQUcSKm7HSLJfvHr38iriDknmb8d2Z+CzV39lPt4 sE1oQ6KUuw8dWeWSmVwXSz+sRcEswH6vSLMtgZ+wkvuI48K6LOZQPF7PhH+06wwG +SBU1lcQM9vwBk6dLYJbpmHMCH0I3GMRgW953Lz2wlZgcHi4fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqfBqwFcf6GuK5vfdAuxCBoYuiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzIyNzU2Y2UtMTEyOS0z ZTEyLTk3NzUtNDZkZGNmOGM5OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMmuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnefFB1LA2eKYWGUXg88d6FYsle9GcxmUevxVTKHl9I423+6sbaR5CD UIOSTgzKxuKQK8jJw9RGbEnXLPcOXVn5zoOiGF/FYO7bNtRgmOQ41SO5zUJCrTpd ljr7m+1pcFPJC7ULPKDmPHmNB90M07Dv8t3eXQxdMQH1gH9xnkyMs8qlsWeaZdgM W+dXjuQhrxgt62NYa2KonWhsU76CAcBzMMM+FkWwu1H1niX5ODgT+mW47dwnRfka gDdRT1uvcA/mB/gf9NlWVvw/PQOExCGUxJMQlW9ca/8qcxJ+ZJeWTJ/9B+TdVRsw k6DWatyfrS7h0RJbpVDMxudac2PIwPY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:27 2025 by rpki-client