$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b246adc-a598-3ef0-9e6e-a910cb9684ee.roa File: 3b246adc-a598-3ef0-9e6e-a910cb9684ee.roa (raw, json) Hash identifier: B6efEwaBfr4sSg/T/tA/G0nPPXiUJ2EVXiXSUEQbnYU= Subject key identifier: 34:2A:D2:FA:5C:A0:C8:11:50:1B:C8:D4:B3:2D:D2:CC:BD:AF:09:F7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BFE8355BA799F433A780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b246adc-a598-3ef0-9e6e-a910cb9684ee.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.216.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:bf:e8:35:5b:a7:99:f4:33:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=dd869962-ee4c-4064-88bf-6dde8b4489e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:87:01:78:a7:8a:7f:37:30:04:64:fe:7b: e9:11:33:1a:95:02:94:98:fd:0f:aa:9d:fb:45:98: 89:d3:09:34:c7:87:83:ae:0e:c7:4e:0b:cc:b3:61: 34:89:79:d3:c4:71:1f:56:90:d7:c7:ea:1f:b7:c0: 54:9b:b4:c1:0e:50:17:31:d7:4a:46:33:95:8f:32: 48:3a:23:0f:b8:f3:ff:86:85:01:67:e3:e1:9e:2f: 1f:d3:0b:31:53:3b:d8:7a:62:bc:5c:d0:08:d3:66: a3:1a:d4:a3:e0:f1:e4:82:30:1c:8d:f6:bd:d9:12: 0b:75:0f:02:1e:b4:d8:b4:7b:6e:e6:de:ed:fa:ed: 28:20:7b:c5:25:25:af:90:e2:53:b2:a8:9f:c3:b9: 24:76:46:72:7d:17:49:96:28:bc:42:05:ce:d7:4c: a1:7b:3d:32:60:0e:60:1c:c1:50:c9:39:3b:c6:d5: ac:55:ce:1a:d8:e9:14:38:90:b5:7e:53:63:d2:59: 33:3d:8a:8f:cc:0d:ea:31:23:39:23:5e:83:61:9c: 27:96:fb:61:fe:40:8b:8b:36:16:65:d8:b3:15:75: 3e:4e:f0:fe:ee:59:b6:32:6b:48:37:38:2b:38:10: 9b:74:95:d1:f8:44:d3:e3:39:46:ad:88:c9:f6:07: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2A:D2:FA:5C:A0:C8:11:50:1B:C8:D4:B3:2D:D2:CC:BD:AF:09:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b246adc-a598-3ef0-9e6e-a910cb9684ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5b:0c:c1:e5:18:21:3a:46:be:d9:32:55:fe:bb:79:05:be: 94:d5:72:ce:a9:39:2a:7d:b5:b1:a8:bc:65:bc:ea:d4:e7:ba: 52:42:22:71:59:74:e9:b5:1d:03:98:e2:1e:5b:f6:d8:77:e3: e7:30:f6:c2:2f:d6:82:0f:5b:e8:79:c9:97:61:0c:eb:fb:30: 24:5a:80:97:2b:c0:20:10:9f:a0:84:54:aa:b3:91:48:69:07: 5d:51:0c:74:db:fd:b3:6f:44:5f:b5:00:e5:45:6a:81:9b:ea: 4f:5a:15:98:97:e1:4a:07:91:c8:9a:e8:df:40:5b:bf:2e:0f: 18:ef:2e:5a:9e:19:b0:ad:b0:5b:98:48:0b:ca:db:d5:42:8e: 39:3e:44:bb:68:35:f6:3c:8c:d4:cc:fe:df:35:df:02:ac:f1: 31:1d:51:18:15:e0:06:57:15:fa:31:49:be:95:38:6f:59:69: af:4e:86:d8:53:ce:94:4b:40:8d:e6:40:d7:08:39:a4:64:d8: 14:2d:e1:80:af:82:f7:15:3a:57:6f:ac:f9:9e:c5:f6:6a:a5: 28:09:0c:77:5c:ca:51:81:6c:5c:76:88:d9:90:67:d8:06:8d: 2f:e6:53:09:a0:3c:d4:06:1f:19:8a:fc:7c:e3:c2:e7:5d:f9: 25:2d:49:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAb/oNVunmfQzp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGQ4Njk5NjItZWU0Yy00MDY0LTg4YmYtNmRkZThiNDQ4OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMiHAXinin83MARk/nvpETMalQKUmP0Pqp37 RZiJ0wk0x4eDrg7HTgvMs2E0iXnTxHEfVpDXx+oft8BUm7TBDlAXMddKRjOVjzJI OiMPuPP/hoUBZ+Phni8f0wsxUzvYemK8XNAI02ajGtSj4PHkgjAcjfa92RILdQ8C HrTYtHtu5t7t+u0oIHvFJSWvkOJTsqifw7kkdkZyfRdJlii8QgXO10yhez0yYA5g HMFQyTk7xtWsVc4a2OkUOJC1flNj0lkzPYqPzA3qMSM5I16DYZwnlvth/kCLizYW ZdizFXU+TvD+7lm2MmtINzgrOBCbdJXR+ETT4zlGrYjJ9gdp6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQq0vpcoMgRUBvI1LMt0sy9rwn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2IyNDZhZGMtYTU5OC0z ZWYwLTllNmUtYTkxMGNiOTY4NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZbDMHlGCE6Rr7ZMlX+u3kFvpTVcs6pOSp9tbGovGW86tTnulJCInFZ dOm1HQOY4h5b9th34+cw9sIv1oIPW+h5yZdhDOv7MCRagJcrwCAQn6CEVKqzkUhp B11RDHTb/bNvRF+1AOVFaoGb6k9aFZiX4UoHkcia6N9AW78uDxjvLlqeGbCtsFuY SAvK29VCjjk+RLtoNfY8jNTM/t813wKs8TEdURgV4AZXFfoxSb6VOG9Zaa9OhthT zpRLQI3mQNcIOaRk2BQt4YCvgvcVOldvrPmexfZqpSgJDHdcylGBbFx2iNmQZ9gG jS/mUwmgPNQGHxmK/Hzjwudd+SUtSSo= -----END CERTIFICATE-----Generated at Thu Oct 16 01:57:23 2025 by rpki-client