$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51864109-a9ea-367d-a152-74d249c6c946.roa File: 51864109-a9ea-367d-a152-74d249c6c946.roa (raw, json) Hash identifier: dPkks0Uikv8XwB1otY6Myc1m7inE6MusCLUitzYS9oc= Subject key identifier: 72:41:B5:1F:62:36:38:95:37:FE:57:1B:60:62:92:03:DA:22:3F:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206725B5D1B1C61C40F09480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51864109-a9ea-367d-a152-74d249c6c946.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.203.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:25:b5:d1:b1:c6:1c:40:f0:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=b8b6f19b-0261-47ac-83e1-fb13cef86208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:ab:41:e0:c0:bd:ac:30:bd:7c:fa:0d:a2: 7a:80:d3:a6:5e:b7:fb:4c:38:58:4d:8f:d9:b6:06: 9c:e8:75:1c:0b:68:fd:c7:61:db:7d:fa:2c:da:bd: 1c:fc:ef:e5:d2:38:01:00:c8:77:d6:03:ef:ae:e7: 38:47:ba:86:17:df:20:69:93:f1:fe:01:97:45:ee: e3:22:b7:61:b8:bd:fb:6e:3e:22:97:f7:aa:d8:a8: 75:62:da:ce:a6:93:b2:06:0f:b2:eb:1a:01:55:36: 33:10:53:33:27:62:54:c6:16:15:db:be:b3:e1:d4: 9c:d3:50:8d:7f:c2:99:6e:b1:26:df:e5:e6:ba:2c: c6:5b:af:a2:d5:18:f5:e0:47:5f:54:c5:94:b5:f6: 7e:28:6b:9d:25:78:88:01:74:92:a9:af:89:35:c1: 46:be:ae:96:3e:c2:07:f2:9b:b8:85:9d:8c:4c:0f: 0b:20:7d:74:2d:50:63:fb:b3:e4:9b:39:23:62:ee: 69:1f:e1:78:a5:d9:75:1b:e4:44:c1:15:58:c8:00: 7d:6b:a5:f2:67:cd:6b:71:95:25:bb:20:9a:72:bd: 27:36:69:f8:8d:93:0e:b8:f0:6e:20:9c:7e:98:13: b0:af:06:69:aa:22:18:d5:7f:4b:9b:45:ac:bc:fb: db:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:41:B5:1F:62:36:38:95:37:FE:57:1B:60:62:92:03:DA:22:3F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51864109-a9ea-367d-a152-74d249c6c946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.203.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2a:1e:44:90:c4:7c:56:50:2b:c7:63:0b:db:b2:4c:8a:e0: c4:33:5c:c0:ca:38:e6:06:05:57:38:ed:27:e0:65:f8:2d:22: ef:41:ac:be:80:5b:3a:79:f8:7e:13:02:b6:6e:97:eb:8e:78: 6f:d4:b8:10:65:86:3b:3a:09:d5:bb:49:97:0f:13:e5:b8:40: 82:59:ae:1d:93:0d:c6:36:d4:ec:fc:fd:30:4f:69:05:0b:e3: af:a1:90:34:a1:eb:3a:01:b9:4f:2d:b9:74:6d:e0:57:39:ca: 80:01:11:a7:61:ab:8d:41:2c:4c:ff:bc:02:18:00:92:fa:1e: 6c:d5:dc:1c:8b:f5:21:0f:b0:4b:df:bc:2b:76:e0:d6:0c:9f: 92:81:b2:97:8e:12:58:fb:9e:a2:f5:9d:b6:fd:98:7c:9a:5c: 39:4e:1f:7e:cb:ee:c0:17:8b:ec:e4:b1:6a:99:55:c9:7f:25: f7:ec:7a:20:48:f6:8d:4d:ed:e5:a0:87:01:08:77:cc:8e:b7: 47:49:34:ac:0f:40:4f:92:1e:4a:21:90:f1:18:76:65:08:c2: 9a:1a:81:be:30:e4:5a:b8:bf:40:8a:b4:39:39:dd:68:92:b4: e5:4d:42:79:be:d6:d7:5f:15:cc:08:7e:af:f7:ce:89:d0:b8: c3:97:ce:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZyW10bHGHEDwlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjhiNmYxOWItMDI2MS00N2FjLTgzZTEtZmIxM2NlZjg2MjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfarQeDAvawwvXz6DaJ6gNOmXrf7TDhYTY/Z tgac6HUcC2j9x2Hbffos2r0c/O/l0jgBAMh31gPvruc4R7qGF98gaZPx/gGXRe7j IrdhuL37bj4il/eq2Kh1YtrOppOyBg+y6xoBVTYzEFMzJ2JUxhYV276z4dSc01CN f8KZbrEm3+XmuizGW6+i1Rj14EdfVMWUtfZ+KGudJXiIAXSSqa+JNcFGvq6WPsIH 8pu4hZ2MTA8LIH10LVBj+7PkmzkjYu5pH+F4pdl1G+REwRVYyAB9a6XyZ81rcZUl uyCacr0nNmn4jZMOuPBuIJx+mBOwrwZpqiIY1X9Lm0WsvPvbzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJBtR9iNjiVN/5XG2BikgPaIj9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTE4NjQxMDktYTllYS0z NjdkLWExNTItNzRkMjQ5YzZjOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYqHkSQxHxWUCvHYwvbskyK4MQzXMDKOOYGBVc47SfgZfgtIu9BrL6A Wzp5+H4TArZul+uOeG/UuBBlhjs6CdW7SZcPE+W4QIJZrh2TDcY21Oz8/TBPaQUL 46+hkDSh6zoBuU8tuXRt4Fc5yoABEadhq41BLEz/vAIYAJL6HmzV3ByL9SEPsEvf vCt24NYMn5KBspeOElj7nqL1nbb9mHyaXDlOH37L7sAXi+zksWqZVcl/JffseiBI 9o1N7eWghwEId8yOt0dJNKwPQE+SHkohkPEYdmUIwpoagb4w5Fq4v0CKtDk53WiS tOVNQnm+1tdfFcwIfq/3zonQuMOXzjM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:42 2025 by rpki-client