$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35c40157-4ba1-314f-a9ac-01c11e191383.roa File: 35c40157-4ba1-314f-a9ac-01c11e191383.roa (raw, json) Hash identifier: wBBHpr5qvgr49iP3gb4vVjy0d1Bg4z4Yp11t6aBDJAQ= Subject key identifier: 2C:9F:C1:9B:AF:EA:52:12:C5:71:50:1C:62:28:C8:C0:DE:0A:42:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01ACDA55A9583247330030 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35c40157-4ba1-314f-a9ac-01c11e191383.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ac:da:55:a9:58:32:47:33:00:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=36e7f9d0-b6af-47bc-b76d-3e38945118e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:ca:8d:38:38:bd:3c:86:6b:b4:5e:41:e8: 4c:82:4c:de:be:ca:ec:13:46:04:d2:5f:ba:6d:7a: d0:fc:e5:d4:d4:3b:32:df:40:13:a6:b9:e9:6a:7e: db:a3:59:a9:41:ee:fc:c5:05:ba:45:c2:55:5f:22: 8c:a6:d8:81:70:9b:a7:97:2f:10:95:1a:c3:63:98: e6:44:d3:27:8e:27:88:70:a7:df:44:e5:34:c3:e0: 5e:fe:54:af:f4:ce:15:88:84:db:e6:5e:1b:80:a0: 6f:f5:8f:33:c2:11:af:25:9e:e9:3f:27:12:09:20: 21:72:c3:95:d0:5e:2c:09:80:ac:d1:eb:52:b2:e6: 84:f7:a4:f4:51:7e:a7:dd:ab:3a:0b:dc:70:c3:59: 96:e7:ca:fd:77:af:74:d0:65:46:91:69:c6:0b:9e: 8e:54:4e:d5:be:fb:06:6d:39:27:b5:b7:e0:63:3b: f7:77:af:be:67:b7:15:6f:12:fd:90:c0:b0:7f:a5: d4:6d:9b:80:ab:fa:a9:e5:4e:48:d3:d7:52:fb:53: 15:e1:eb:d7:b2:46:c0:59:4c:97:9d:15:1f:2c:f8: 73:66:a7:d5:d1:99:d9:2a:1f:39:ea:3d:cf:8d:a2: 28:f3:82:1d:f0:a0:49:ed:84:59:0b:2a:e1:41:b0: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9F:C1:9B:AF:EA:52:12:C5:71:50:1C:62:28:C8:C0:DE:0A:42:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35c40157-4ba1-314f-a9ac-01c11e191383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ef:90:cd:14:9c:ac:20:ba:b1:21:e4:dd:c4:93:11:c7:9e: a7:63:27:03:a0:f5:02:c5:6b:08:56:72:57:bb:3a:ad:b4:83: f7:d6:e9:14:4b:5b:5c:ca:3d:64:08:f6:35:f8:35:3a:59:67: 5f:92:48:42:b7:90:fe:4a:93:e0:bd:ea:5f:6d:a4:0b:48:8b: a4:af:5a:60:98:4a:a9:ca:e4:6e:21:dd:00:d9:ea:0b:ea:2d: b4:ac:c0:fb:8e:a4:18:56:ff:b4:b1:95:ca:31:02:90:dc:5f: 7f:90:ac:e4:c1:32:27:77:d5:95:f8:23:9f:9e:27:e8:fc:1d: e0:2e:b7:6f:af:62:97:4f:52:2e:d7:fe:4e:fd:36:a5:9b:77: 7c:0b:04:1d:e0:51:f3:50:93:17:cd:10:cb:b0:67:52:19:ff: ca:09:ee:7d:a6:66:75:b2:7c:70:34:4c:a6:e8:1f:97:e1:4d: 0a:38:7f:d9:77:e3:26:5f:47:fa:cd:8a:92:d8:30:e4:b2:6f: ee:ad:ee:f4:96:bc:7c:d1:36:a5:e6:dc:8f:b1:73:79:82:a6: 7a:22:44:c9:cf:cf:6e:e2:93:7e:c8:19:f0:a5:c8:c1:76:11: c4:d9:ab:30:6e:67:0c:8a:c7:75:99:28:af:48:14:b8:97:a8: 00:c3:dc:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAazaValYMkczADAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzZlN2Y5ZDAtYjZhZi00N2JjLWI3NmQtM2UzODk0NTExOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uPKjTg4vTyGa7ReQehMgkzevsrsE0YE0l+6 bXrQ/OXU1Dsy30ATprnpan7bo1mpQe78xQW6RcJVXyKMptiBcJunly8QlRrDY5jm RNMnjieIcKffROU0w+Be/lSv9M4ViITb5l4bgKBv9Y8zwhGvJZ7pPycSCSAhcsOV 0F4sCYCs0etSsuaE96T0UX6n3as6C9xww1mW58r9d6900GVGkWnGC56OVE7VvvsG bTkntbfgYzv3d6++Z7cVbxL9kMCwf6XUbZuAq/qp5U5I09dS+1MV4evXskbAWUyX nRUfLPhzZqfV0ZnZKh856j3PjaIo84Id8KBJ7YRZCyrhQbB54wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyfwZuv6lISxXFQHGIoyMDeCkL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVjNDAxNTctNGJhMS0z MTRmLWE5YWMtMDFjMTFlMTkxMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbvkM0UnKwgurEh5N3EkxHHnqdjJwOg9QLFawhWcle7Oq20g/fW6RRL W1zKPWQI9jX4NTpZZ1+SSEK3kP5Kk+C96l9tpAtIi6SvWmCYSqnK5G4h3QDZ6gvq LbSswPuOpBhW/7SxlcoxApDcX3+QrOTBMid31ZX4I5+eJ+j8HeAut2+vYpdPUi7X /k79NqWbd3wLBB3gUfNQkxfNEMuwZ1IZ/8oJ7n2mZnWyfHA0TKboH5fhTQo4f9l3 4yZfR/rNipLYMOSyb+6t7vSWvHzRNqXm3I+xc3mCpnoiRMnPz27ik37IGfClyMF2 EcTZqzBuZwyKx3WZKK9IFLiXqADD3P4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:28 2025 by rpki-client