$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb651be-d81f-3d19-982e-62dcf3d86e88.roa File: 3cb651be-d81f-3d19-982e-62dcf3d86e88.roa (raw, json) Hash identifier: NWs3ggjFVRQETrH3FZ0YCDFsCw2dUGYOBL6oHrNkv5Q= Subject key identifier: 6F:D7:8F:DD:FE:22:43:40:0B:A7:1D:77:33:2F:D6:BD:98:57:5B:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206726679BF2B81B646F2200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb651be-d81f-3d19-982e-62dcf3d86e88.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.203.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:26:67:9b:f2:b8:1b:64:6f:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=15aaa0c9-a51e-400f-aa8b-fe6269d55cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:d9:f4:0d:28:f2:38:46:0a:0f:22:67:08: 4c:5e:6a:89:c8:88:e5:33:d9:dc:55:f6:6b:82:29: 36:d0:e0:9b:b0:82:29:8c:83:c5:be:35:d9:9c:95: 50:d0:5e:dd:cf:7c:50:91:44:61:67:01:96:df:ac: 59:b3:ea:c0:5d:4a:81:ae:f6:a5:84:ba:27:d4:f1: 82:74:e7:c6:82:ab:0a:ba:ab:ac:2d:32:13:17:7a: b1:d2:08:5a:9f:73:16:d9:b8:65:3c:f0:1c:f0:65: 63:62:c0:3a:10:59:4e:55:47:51:6c:82:06:ec:ff: ea:73:23:27:88:5e:31:32:b6:e6:ad:71:04:10:b9: 26:9c:3a:cc:f2:d0:5a:6c:38:72:e5:61:df:95:a8: ed:35:fc:57:cb:da:17:b9:ba:d5:4e:b4:da:f5:04: 86:73:1f:c2:4b:66:00:a7:c3:44:a9:bd:36:39:e3: 5c:12:c3:04:1f:3c:0c:4c:85:17:7a:3e:bf:bc:d5: 9d:63:f7:44:8c:02:ac:36:e5:e8:67:b6:9f:c3:4d: 16:03:c7:1f:b3:c6:b3:c4:cc:39:72:69:4b:42:e9: c2:38:43:47:de:f1:48:26:b5:21:4c:69:91:5b:2b: ae:6e:76:d7:ec:49:e9:ff:52:da:9e:2a:d4:da:04: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D7:8F:DD:FE:22:43:40:0B:A7:1D:77:33:2F:D6:BD:98:57:5B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb651be-d81f-3d19-982e-62dcf3d86e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.203.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:66:b9:62:e2:88:14:ce:94:91:ae:64:f2:bf:88:4c:d6:68: 2e:77:4d:8d:af:3a:bc:8a:ff:fa:da:6e:b9:ef:2b:6d:c8:09: 25:97:16:6f:c5:1a:67:2f:02:8a:d3:9e:78:8f:c9:56:4e:de: 9d:51:12:7e:12:ac:4a:d9:b8:82:fd:59:f9:3a:b4:f8:1d:06: 99:52:d1:4e:5f:1b:95:df:18:f5:3f:d6:37:06:85:4c:16:7d: 39:de:18:b6:fb:d4:10:12:24:18:2b:13:16:66:74:81:15:4b: b7:fb:d8:10:50:cc:08:68:cc:22:cd:84:f9:b0:45:93:70:b5: ad:b4:7a:a1:5b:83:e1:73:bf:ea:f4:12:43:d2:31:31:10:87: 84:db:82:fb:36:0d:1d:8f:3a:b0:a0:96:04:0e:5e:1a:e3:04: 1b:cc:83:ea:94:63:58:44:5e:a8:6b:b1:b7:56:79:fc:4b:f5: e2:9e:4c:86:ca:b1:5f:13:f9:d9:d6:f9:63:7b:02:39:6a:5f: 5e:b9:58:e1:22:0e:a1:7a:07:23:0c:a9:6f:22:b6:b9:aa:80: 55:94:98:65:c6:10:4e:ea:14:6a:bb:a4:b9:f0:2d:c0:55:dc: 1b:36:88:12:b8:7b:ac:31:20:f4:3f:45:49:8f:58:0f:54:9a: 19:cb:1f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZyZnm/K4G2RvIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MTVhYWEwYzktYTUxZS00MDBmLWFhOGItZmU2MjY5ZDU1Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD/Z9A0o8jhGCg8iZwhMXmqJyIjlM9ncVfZr gik20OCbsIIpjIPFvjXZnJVQ0F7dz3xQkURhZwGW36xZs+rAXUqBrvalhLon1PGC dOfGgqsKuqusLTITF3qx0ghan3MW2bhlPPAc8GVjYsA6EFlOVUdRbIIG7P/qcyMn iF4xMrbmrXEEELkmnDrM8tBabDhy5WHflajtNfxXy9oXubrVTrTa9QSGcx/CS2YA p8NEqb02OeNcEsMEHzwMTIUXej6/vNWdY/dEjAKsNuXoZ7afw00WA8cfs8azxMw5 cmlLQunCOENH3vFIJrUhTGmRWyuubnbX7Enp/1LanirU2gSbQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/Xj93+IkNAC6cddzMv1r2YV1uQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NiNjUxYmUtZDgxZi0z ZDE5LTk4MmUtNjJkY2YzZDg2ZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9muWLiiBTOlJGuZPK/iEzWaC53TY2vOryK//rabrnvK23ICSWXFm/F GmcvAorTnniPyVZO3p1REn4SrErZuIL9Wfk6tPgdBplS0U5fG5XfGPU/1jcGhUwW fTneGLb71BASJBgrExZmdIEVS7f72BBQzAhozCLNhPmwRZNwta20eqFbg+Fzv+r0 EkPSMTEQh4Tbgvs2DR2POrCglgQOXhrjBBvMg+qUY1hEXqhrsbdWefxL9eKeTIbK sV8T+dnW+WN7AjlqX165WOEiDqF6ByMMqW8itrmqgFWUmGXGEE7qFGq7pLnwLcBV 3Bs2iBK4e6wxIPQ/RUmPWA9UmhnLH8k= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:24 2025 by rpki-client