$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fcaa7ed-1e16-30bd-ab52-fd7f10824dd8.roa File: 3fcaa7ed-1e16-30bd-ab52-fd7f10824dd8.roa (raw, json) Hash identifier: SUVppdwIX00DC1X9nlOGKOWP2bO4Q337t3z0wSfzjXE= Subject key identifier: F4:B6:C8:D7:06:CA:BD:5C:19:3D:87:73:F0:B5:D9:B5:26:64:AB:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671D26A6BE794786828FC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fcaa7ed-1e16-30bd-ab52-fd7f10824dd8.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.193.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1d:26:a6:be:79:47:86:82:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=a39e6981-07db-4d36-b89d-bbd6564b1aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:10:70:aa:b0:95:c1:84:37:2d:f3:63:25:71: a6:77:6c:8b:28:45:a7:41:60:45:d7:a8:25:0a:2a: 08:db:3b:62:2a:f6:f7:44:f9:9b:d7:20:96:f8:68: 6c:5f:50:8c:cd:fa:88:a5:03:c6:04:f9:cb:27:13: 91:ae:ba:6d:c3:24:d3:1a:c2:96:e6:41:1e:27:73: 79:d9:86:91:28:dd:8b:c2:28:ac:ca:37:93:33:d4: b1:34:d9:f8:60:19:69:0b:54:b7:f0:39:d3:c6:10: 02:28:c0:b6:df:36:a7:75:7a:ba:67:93:47:c0:a3: f9:e6:4c:bb:d7:2c:19:04:c8:55:63:29:5b:cc:32: d6:5a:fc:d1:c2:6e:cb:7a:22:1e:65:c1:7c:75:a1: ee:21:61:f7:cc:0e:99:90:45:c0:94:57:cd:58:6e: 2a:c8:2a:6b:60:a8:0a:03:45:08:ea:82:10:81:c9: d7:26:c4:16:df:0a:30:36:24:5f:f0:30:36:26:c0: b2:83:d8:2d:14:50:34:3b:63:f4:06:35:da:99:f2: 64:6f:b7:ed:fb:5c:30:7b:17:9c:04:ba:fb:cd:b0: 3a:4a:38:01:49:93:7c:93:77:5a:ea:ba:5c:79:6c: 9f:33:d1:88:7e:af:b6:ff:f3:b5:e4:b7:6d:9b:4a: e4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B6:C8:D7:06:CA:BD:5C:19:3D:87:73:F0:B5:D9:B5:26:64:AB:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fcaa7ed-1e16-30bd-ab52-fd7f10824dd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c0:e9:7a:79:78:99:cf:db:56:82:df:44:81:22:97:7f:d2: d4:b2:11:81:b6:65:25:a0:7a:97:2a:bf:62:31:f9:62:ad:87: 59:ed:75:3a:83:ba:3e:c5:9c:4f:5e:b9:94:47:e5:83:c7:87: 5e:24:6d:8e:5b:16:32:12:df:e1:fd:15:45:fa:a6:f9:91:3e: d4:f0:6d:b0:f2:c5:3c:16:e7:6c:eb:19:c5:c8:73:11:2f:0e: 4f:e9:cb:07:d4:d5:02:fe:62:3f:59:b5:db:74:65:5a:8d:58: b0:66:49:e6:0c:27:7d:a4:a6:50:85:cb:58:5f:f8:17:25:e6: 0c:a4:5d:df:4f:e3:47:42:3b:28:68:15:af:7c:b1:b3:89:b6: da:93:83:a8:af:40:97:0d:ad:03:89:25:c0:ae:02:d4:77:4b: e2:1c:a5:00:f8:a3:3f:f5:09:1f:97:2e:ec:25:36:4a:33:f5: c2:f6:56:78:51:4d:1f:22:19:7e:f6:6f:19:1f:cb:a2:d3:14: 8c:d8:53:fd:18:58:e5:a7:c4:4c:7d:ec:e8:49:6d:05:d2:d5: 37:de:9c:14:44:b0:74:21:11:c2:02:7e:fe:8f:de:ef:52:bc: 6c:8d:c4:ac:b1:e6:1f:1f:6e:9f:5f:73:ca:e2:22:90:a9:2b: 08:5c:d5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZx0mpr55R4aCj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YTM5ZTY5ODEtMDdkYi00ZDM2LWI4OWQtYmJkNjU2NGIxYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBBwqrCVwYQ3LfNjJXGmd2yLKEWnQWBF16gl CioI2ztiKvb3RPmb1yCW+GhsX1CMzfqIpQPGBPnLJxORrrptwyTTGsKW5kEeJ3N5 2YaRKN2LwiisyjeTM9SxNNn4YBlpC1S38DnTxhACKMC23zandXq6Z5NHwKP55ky7 1ywZBMhVYylbzDLWWvzRwm7LeiIeZcF8daHuIWH3zA6ZkEXAlFfNWG4qyCprYKgK A0UI6oIQgcnXJsQW3wowNiRf8DA2JsCyg9gtFFA0O2P0BjXamfJkb7ft+1wwexec BLr7zbA6SjgBSZN8k3da6rpceWyfM9GIfq+2//O15Ldtm0rkeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS2yNcGyr1cGT2Hc/C12bUmZKtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZjYWE3ZWQtMWUxNi0z MGJkLWFiNTItZmQ3ZjEwODI0ZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzA6Xp5eJnP21aC30SBIpd/0tSyEYG2ZSWgepcqv2Ix+WKth1ntdTqD uj7FnE9euZRH5YPHh14kbY5bFjIS3+H9FUX6pvmRPtTwbbDyxTwW52zrGcXIcxEv Dk/pywfU1QL+Yj9Ztdt0ZVqNWLBmSeYMJ32kplCFy1hf+Bcl5gykXd9P40dCOyho Fa98sbOJttqTg6ivQJcNrQOJJcCuAtR3S+IcpQD4oz/1CR+XLuwlNkoz9cL2VnhR TR8iGX72bxkfy6LTFIzYU/0YWOWnxEx97OhJbQXS1TfenBREsHQhEcICfv6P3u9S vGyNxKyx5h8fbp9fc8riIpCpKwhc1aQ= -----END CERTIFICATE-----Generated at Thu Oct 16 02:00:50 2025 by rpki-client