$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d57765e-1b5a-326b-bf8b-f502f9c70fa7.roa File: 4d57765e-1b5a-326b-bf8b-f502f9c70fa7.roa (raw, json) Hash identifier: jMrWrKjwQ48AnfSxTDGNGlOLvszJzeOzGSJ6wT4GjsI= Subject key identifier: 04:7C:44:EA:62:95:44:FC:20:F6:90:AF:E1:CC:9B:F3:F3:2D:60:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01AA78779EB48548DA3AF0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d57765e-1b5a-326b-bf8b-f502f9c70fa7.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:aa:78:77:9e:b4:85:48:da:3a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=32c3508e-31c3-4566-8b8b-e666c6273691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bd:b6:fd:9f:1d:10:5f:32:ba:c6:3f:9d:8d: 92:24:39:ac:c5:0d:57:c9:3e:bc:28:03:65:e1:50: 0f:12:cc:dd:a4:25:01:44:12:25:ee:73:ff:df:53: 0f:98:40:91:ca:6a:f3:6c:99:f9:79:de:dd:99:44: 37:37:d1:3d:05:af:7b:44:85:31:d1:42:7c:06:3a: d1:d8:9d:fb:63:da:f5:0d:67:f0:44:41:4a:fe:fd: 4d:e1:10:67:22:49:1a:20:30:e2:17:ce:14:ae:70: 6d:af:3a:9e:41:b3:4b:1a:f3:e9:b3:06:e8:52:23: 5e:1a:91:c8:79:4b:6d:47:c4:64:de:b2:3b:e5:b6: 36:98:97:74:a7:7f:6b:d4:cc:56:ab:67:da:04:27: 15:d0:4f:fe:90:77:c6:0f:4d:40:63:fd:e7:ec:0d: d6:15:ac:7f:99:2f:11:0a:a1:3b:9e:46:13:30:16: a1:65:9d:1d:05:4c:27:01:f8:a8:93:20:ed:5e:4f: cf:f6:28:d6:4e:58:42:6a:74:87:8f:20:ad:02:9c: c1:98:9a:8b:9d:36:c7:29:b2:5f:73:6d:7d:a0:b4: 76:5c:08:78:d8:b2:1b:a3:c1:04:3e:da:ec:86:4f: 7d:64:db:d8:b1:d1:8d:b4:5f:04:df:3b:81:94:94: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7C:44:EA:62:95:44:FC:20:F6:90:AF:E1:CC:9B:F3:F3:2D:60:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d57765e-1b5a-326b-bf8b-f502f9c70fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fb:44:79:7e:2d:a2:5d:b0:15:1b:5b:98:2e:cc:5f:9a:8e: 6f:5e:ca:60:b9:f0:c7:b9:01:70:c7:5f:d0:ba:ab:c3:b7:f4: 28:8b:6f:65:aa:0b:12:68:91:4f:b8:6a:58:37:04:2b:c6:5b: cd:d2:1d:7e:e9:4c:c8:0f:cd:9e:93:c6:0c:a0:82:9c:2a:ed: e1:17:fe:57:01:64:2e:bb:8c:eb:26:fe:49:72:6e:28:2c:98: 56:d0:df:42:16:94:81:ef:e7:1d:72:bc:91:71:76:d9:7a:c4: 43:c8:c3:1c:09:cf:87:87:73:eb:3a:00:d8:23:ab:05:5c:b3: ce:6a:18:d1:35:41:06:0a:8c:ca:f9:31:39:2d:cf:63:35:2e: d7:0e:1f:03:ad:0c:13:f2:de:6a:07:36:c7:01:83:1d:dc:44: 70:93:aa:15:3c:82:b0:fc:a6:96:19:8d:e4:19:b6:c0:b6:38: 28:e7:ae:54:c8:0f:46:06:a6:18:42:d1:5d:5a:cc:c3:b4:44: c2:95:ad:cd:38:fd:77:c8:6a:78:0b:5d:42:cf:9f:6a:38:53: aa:59:d3:b1:42:91:74:0b:0d:fc:2e:7c:f2:a1:9e:15:ef:20: a8:d4:b4:81:2d:31:74:87:56:d3:f8:20:98:22:a3:7b:7b:42: 48:cd:fd:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAap4d560hUjaOvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzJjMzUwOGUtMzFjMy00NTY2LThiOGItZTY2NmM2MjczNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir22/Z8dEF8yusY/nY2SJDmsxQ1XyT68KANl 4VAPEszdpCUBRBIl7nP/31MPmECRymrzbJn5ed7dmUQ3N9E9Ba97RIUx0UJ8BjrR 2J37Y9r1DWfwREFK/v1N4RBnIkkaIDDiF84UrnBtrzqeQbNLGvPpswboUiNeGpHI eUttR8Rk3rI75bY2mJd0p39r1MxWq2faBCcV0E/+kHfGD01AY/3n7A3WFax/mS8R CqE7nkYTMBahZZ0dBUwnAfiokyDtXk/P9ijWTlhCanSHjyCtApzBmJqLnTbHKbJf c219oLR2XAh42LIbo8EEPtrshk99ZNvYsdGNtF8E3zuBlJRo3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAR8ROpilUT8IPaQr+HMm/PzLWAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGQ1Nzc2NWUtMWI1YS0z MjZiLWJmOGItZjUwMmY5YzcwZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNAOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/7RHl+LaJdsBUbW5guzF+ajm9eymC58Me5AXDHX9C6q8O39CiLb2Wq CxJokU+4alg3BCvGW83SHX7pTMgPzZ6Txgyggpwq7eEX/lcBZC67jOsm/klybigs mFbQ30IWlIHv5x1yvJFxdtl6xEPIwxwJz4eHc+s6ANgjqwVcs85qGNE1QQYKjMr5 MTktz2M1LtcOHwOtDBPy3moHNscBgx3cRHCTqhU8grD8ppYZjeQZtsC2OCjnrlTI D0YGphhC0V1azMO0RMKVrc04/XfIangLXULPn2o4U6pZ07FCkXQLDfwufPKhnhXv IKjUtIEtMXSHVtP4IJgio3t7QkjN/ao= -----END CERTIFICATE-----Generated at Wed Oct 15 23:27:10 2025 by rpki-client