$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4571b679-7f9e-33d0-aebc-da4462bfb28d.roa File: 4571b679-7f9e-33d0-aebc-da4462bfb28d.roa (raw, json) Hash identifier: Bo+17eOMU+OB99OtcdKjU4EI6Mi2v8OPuxBHOZBKf6o= Subject key identifier: 24:48:7B:D4:0B:6C:77:90:8D:98:EB:E6:3A:D6:43:A0:F7:B2:EE:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29BA67974B80B07F21F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4571b679-7f9e-33d0-aebc-da4462bfb28d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.213.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9b:a6:79:74:b8:0b:07:f2:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b9c66b6d-6eaf-47ee-a290-914891756fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:09:28:dd:07:aa:08:d7:e8:27:a6:82:25: 50:e9:70:7c:6d:40:f5:3d:f0:c2:12:d6:ab:8d:f6: d9:40:97:2e:77:d0:c2:ba:e7:39:18:ad:01:f6:0b: d2:04:ac:32:e3:81:75:87:5d:6f:db:b5:00:3b:42: b8:3b:b9:b3:49:32:f8:dc:e1:6a:10:e4:b8:80:32: 1e:11:ab:3c:26:5d:02:0d:e0:ec:69:8d:41:8b:a1: 0e:a7:21:4f:37:be:f8:f2:94:32:5c:2a:ba:39:8a: 70:1a:b1:a8:a9:81:b2:e3:3f:b3:f0:b5:3d:13:65: 11:6b:aa:72:c3:c3:2e:9c:82:a3:e4:7c:c3:79:67: d3:6a:84:bb:a0:d1:d9:cd:46:60:54:ca:16:7b:c3: 10:64:d0:a8:fc:70:79:75:92:ee:89:2d:ee:e3:aa: 3a:e3:05:95:5c:87:d8:bb:c0:99:e4:79:89:34:30: 58:0a:bd:46:4a:15:5c:fb:42:50:c6:4d:fc:a9:66: a0:29:e2:12:fd:5a:7b:07:8a:b7:a5:93:17:0d:4e: 2e:17:d5:63:6a:9f:3d:9c:bc:eb:1b:ba:cc:b0:82: f9:12:a7:fa:3b:cc:67:79:97:ae:ca:0c:d3:e6:94: 14:b8:47:3b:80:40:1e:d1:2c:d7:c7:e8:7e:c6:44: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:48:7B:D4:0B:6C:77:90:8D:98:EB:E6:3A:D6:43:A0:F7:B2:EE:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4571b679-7f9e-33d0-aebc-da4462bfb28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.213.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:23:39:fa:09:b2:6e:f0:6b:37:41:b7:61:1a:19:04:3d:40: 51:a5:ba:ba:cd:88:d8:51:05:11:c5:50:2c:7e:4f:aa:14:2a: b2:40:fb:f9:dc:81:57:84:09:cd:08:cf:19:1e:aa:18:21:9e: 4e:de:fa:ff:8b:cd:9f:7f:0c:ad:fb:ed:8b:e0:ca:26:b1:95: 0d:88:4d:d2:b0:70:4d:2c:53:cf:3a:90:0c:98:1b:99:91:09: fa:af:02:1b:f0:7f:44:20:97:0b:79:4d:ee:a5:9a:a9:4b:f3: ce:68:c0:b3:7f:1c:dc:ce:16:e0:e3:c2:28:e8:e1:40:40:50: 47:ce:c2:88:41:a9:ba:47:7d:6e:21:9a:a8:bb:99:dc:c4:96: 5d:63:b7:5b:0b:24:d8:f3:73:21:83:25:73:99:63:44:8c:3b: 2e:fa:00:47:98:28:ef:38:44:cf:dc:51:d6:74:ac:e7:3d:df: 69:70:57:f6:92:87:e3:f8:0b:95:7d:1f:df:bd:1d:1f:9c:9a: 50:b9:74:e5:df:f3:55:80:96:5a:41:2a:02:71:4c:18:50:70: ce:1c:bf:81:03:13:be:01:ff:8d:bb:d1:ab:85:41:eb:56:ae: 2d:ce:d5:e5:ae:3d:95:49:67:7c:78:dc:d0:3c:2f:53:31:d2: d2:49:b1:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pumeXS4CwfyHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YjljNjZiNmQtNmVhZi00N2VlLWEyOTAtOTE0ODkxNzU2ZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCcJKN0HqgjX6CemgiVQ6XB8bUD1PfDCEtar jfbZQJcud9DCuuc5GK0B9gvSBKwy44F1h11v27UAO0K4O7mzSTL43OFqEOS4gDIe Eas8Jl0CDeDsaY1Bi6EOpyFPN7748pQyXCq6OYpwGrGoqYGy4z+z8LU9E2URa6py w8MunIKj5HzDeWfTaoS7oNHZzUZgVMoWe8MQZNCo/HB5dZLuiS3u46o64wWVXIfY u8CZ5HmJNDBYCr1GShVc+0JQxk38qWagKeIS/Vp7B4q3pZMXDU4uF9Vjap89nLzr G7rMsIL5Eqf6O8xneZeuygzT5pQUuEc7gEAe0SzXx+h+xkTomQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRIe9QLbHeQjZjr5jrWQ6D3su6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDU3MWI2NzktN2Y5ZS0z M2QwLWFlYmMtZGE0NDYyYmZiMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcjOfoJsm7wazdBt2EaGQQ9QFGlurrNiNhRBRHFUCx+T6oUKrJA+/nc gVeECc0Izxkeqhghnk7e+v+LzZ9/DK377YvgyiaxlQ2ITdKwcE0sU886kAyYG5mR CfqvAhvwf0Qglwt5Te6lmqlL885owLN/HNzOFuDjwijo4UBAUEfOwohBqbpHfW4h mqi7mdzEll1jt1sLJNjzcyGDJXOZY0SMOy76AEeYKO84RM/cUdZ0rOc932lwV/aS h+P4C5V9H9+9HR+cmlC5dOXf81WAllpBKgJxTBhQcM4cv4EDE74B/4270auFQetW ri3O1eWuPZVJZ3x43NA8L1Mx0tJJsQ8= -----END CERTIFICATE-----Generated at Thu Oct 16 02:00:54 2025 by rpki-client