$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3492f8b4-e00c-38df-9b20-d72cac2d132c.roa File: 3492f8b4-e00c-38df-9b20-d72cac2d132c.roa (raw, json) Hash identifier: Dn3kZwwkztHdnr/iwOCKlFMqcOjj3W5rsw3KbNfKO1g= Subject key identifier: C6:05:40:73:50:8C:0F:D0:21:F1:5C:D3:8A:90:34:89:6B:DE:81:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B98C41A6503279E089C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3492f8b4-e00c-38df-9b20-d72cac2d132c.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.212.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b9:8c:41:a6:50:32:79:e0:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=9fd95de2-4a16-4f6b-8573-1c201eb08ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:87:a5:f5:a1:63:9e:77:2a:79:65:20:60:38: 21:a3:2f:d9:77:ed:e0:08:8a:7a:40:93:1b:a9:0e: 9f:e3:77:f8:1a:f1:71:91:a5:2c:ba:a4:66:c3:82: 92:78:d5:d0:46:9c:22:af:d5:0c:60:ef:5f:ed:cc: 3f:f0:e8:d6:84:93:f8:bd:51:67:da:ba:e0:58:92: 7c:76:19:1b:5d:58:34:a2:6a:4d:3d:84:13:ea:7c: 6d:cd:dc:e1:77:68:92:7d:61:fa:3f:8b:01:89:8a: 2e:a0:5c:80:6f:37:93:52:6a:71:70:a7:55:1a:50: 07:12:3f:f9:36:6e:0b:14:88:33:67:dd:b9:41:fa: 22:c8:d7:ea:84:02:fa:5c:7a:59:71:14:75:bf:60: f2:2e:74:f3:7d:b8:6b:75:6f:31:8f:90:00:4a:90: 47:9c:8a:cf:7b:98:39:bc:8d:1b:1c:d9:93:d8:76: 4c:8f:54:17:ce:64:c1:fb:6e:a1:a3:28:46:3a:90: bf:57:4c:7a:fc:48:b4:e2:6a:1b:08:a2:be:7f:4b: fe:0b:e2:8d:c6:c8:a0:28:a7:41:85:91:aa:92:a5: 2f:bc:1e:e7:a5:14:07:24:bf:3d:b2:98:3b:43:40: b0:d0:1e:cf:91:4a:9c:c7:0e:1f:6c:52:2c:36:2e: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:05:40:73:50:8C:0F:D0:21:F1:5C:D3:8A:90:34:89:6B:DE:81:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3492f8b4-e00c-38df-9b20-d72cac2d132c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:81:34:db:8c:1c:fc:d1:d0:2b:61:9a:cc:a5:1e:fd:82:69: d2:b4:81:bb:73:d5:1f:26:8c:a1:d4:e7:e3:6f:d4:af:47:65: 9c:71:ae:bb:46:f8:d0:b2:be:b6:0d:c9:98:6a:2f:52:d4:b0: 72:ef:ee:2e:88:4d:16:ee:39:40:3d:b9:ee:4c:9a:1c:48:1b: 8c:04:79:e7:6f:41:8f:d3:53:ca:49:4a:9c:99:7a:6b:90:2b: 48:60:01:9f:dd:4a:96:34:db:9a:c5:fe:a0:a6:72:3f:96:c7: 07:17:dc:bd:2c:c3:38:fe:bb:21:f2:24:24:6c:5b:90:86:0e: 7d:9b:54:8a:ed:c3:45:c7:9a:f3:2f:70:2b:a2:86:8e:5d:ef: 05:3d:d7:0c:2d:81:25:36:ea:4c:94:de:0d:c1:bd:8d:9e:6c: 81:10:ca:7e:3a:a9:99:6e:9c:1a:b6:b7:ce:52:e8:1e:77:c5: ec:5a:83:f8:75:59:77:e5:54:dc:a6:2f:09:e1:c8:78:7c:fc: 6e:9f:3f:af:f8:ec:96:f0:65:23:d8:e4:70:50:cc:ad:eb:61: 74:9c:7f:31:ce:76:1d:84:d9:db:9c:5a:8e:5c:48:a1:ef:8b: 7f:b9:2c:87:d7:d5:aa:4d:3e:34:26:7b:8e:75:03:0b:1f:77: 1e:e9:df:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbmMQaZQMnngicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OWZkOTVkZTItNGExNi00ZjZiLTg1NzMtMWMyMDFlYjA4ZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYel9aFjnncqeWUgYDghoy/Zd+3gCIp6QJMb qQ6f43f4GvFxkaUsuqRmw4KSeNXQRpwir9UMYO9f7cw/8OjWhJP4vVFn2rrgWJJ8 dhkbXVg0ompNPYQT6nxtzdzhd2iSfWH6P4sBiYouoFyAbzeTUmpxcKdVGlAHEj/5 Nm4LFIgzZ925QfoiyNfqhAL6XHpZcRR1v2DyLnTzfbhrdW8xj5AASpBHnIrPe5g5 vI0bHNmT2HZMj1QXzmTB+26hoyhGOpC/V0x6/Ei04mobCKK+f0v+C+KNxsigKKdB hZGqkqUvvB7npRQHJL89spg7Q0Cw0B7PkUqcxw4fbFIsNi7bkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYFQHNQjA/QIfFc04qQNIlr3oHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQ5MmY4YjQtZTAwYy0z OGRmLTliMjAtZDcyY2FjMmQxMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNQyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGBNNuMHPzR0CthmsylHv2CadK0gbtz1R8mjKHU5+Nv1K9HZZxxrrtG +NCyvrYNyZhqL1LUsHLv7i6ITRbuOUA9ue5MmhxIG4wEeedvQY/TU8pJSpyZemuQ K0hgAZ/dSpY025rF/qCmcj+WxwcX3L0swzj+uyHyJCRsW5CGDn2bVIrtw0XHmvMv cCuiho5d7wU91wwtgSU26kyU3g3BvY2ebIEQyn46qZlunBq2t85S6B53xexag/h1 WXflVNymLwnhyHh8/G6fP6/47JbwZSPY5HBQzK3rYXScfzHOdh2E2ducWo5cSKHv i3+5LIfX1apNPjQme451Awsfdx7p368= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:50 2025 by rpki-client