$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58289d68-ab35-3223-aafb-6f1ddb204459.roa File: 58289d68-ab35-3223-aafb-6f1ddb204459.roa (raw, json) Hash identifier: vaVfd1Z1sNEVSv2s2Peklq26F41uh7tbT9t6UCvYqZs= Subject key identifier: 9B:AE:62:3B:9C:C7:23:B9:57:01:2A:56:AB:33:F7:0A:AE:42:EC:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01AF26886ED599367B08C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58289d68-ab35-3223-aafb-6f1ddb204459.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:af:26:88:6e:d5:99:36:7b:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=0ccbad12-9c65-4feb-ae75-55ff481aaebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:54:d5:94:1c:51:c5:f8:0d:fd:7f:2a:bd:03: b2:f9:03:ee:94:ce:68:29:65:24:e0:43:74:1d:f9: c3:f9:54:93:3d:98:89:e4:76:81:aa:65:20:54:86: 0c:28:4b:68:3b:d8:44:9e:ae:e0:a0:c6:76:fb:a0: fb:df:54:9e:c5:19:07:8a:71:ab:26:4c:da:ac:61: 35:62:d2:87:49:bc:d5:c5:0b:0a:e4:31:c9:55:0c: 18:21:b7:2a:64:c6:a8:0f:48:2d:89:ad:1a:06:33: 42:94:a7:4b:d3:c2:c6:bb:7d:91:c1:54:dc:da:2a: d5:ab:28:bb:d7:87:43:f4:67:64:4b:db:7c:21:fe: ae:f5:f6:1b:bd:ee:c9:41:fc:9b:d9:44:f1:98:85: 42:1b:ae:26:02:0f:b7:87:19:2f:ed:47:e3:93:21: 94:f7:cb:ad:55:13:04:eb:b5:18:ba:86:be:c7:e9: 41:80:f6:82:d3:af:75:60:e6:3e:65:81:04:f9:d8: 5b:61:ab:5c:92:5c:3c:78:4c:45:69:26:d9:fe:9c: 5a:77:24:1b:c5:4f:55:9f:96:95:a2:26:bf:33:c6: 4e:e6:a9:ee:95:48:72:7c:52:1f:a9:ad:1a:fa:f6: dc:d4:bb:8c:7e:e2:ab:32:dc:7d:fb:90:63:69:b0: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AE:62:3B:9C:C7:23:B9:57:01:2A:56:AB:33:F7:0A:AE:42:EC:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58289d68-ab35-3223-aafb-6f1ddb204459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:af:c8:8d:af:bd:03:e1:77:39:9e:9f:ec:60:30:92:e6:68: b0:be:88:11:3e:60:fe:be:ba:c7:43:a4:39:f3:a6:af:0f:a4: de:f2:27:bb:a0:bb:c8:1e:4b:ee:51:98:5b:32:52:e1:8d:93: 05:34:57:06:2d:13:bc:41:01:1e:cd:c1:b1:7a:ac:01:4a:7a: 39:bd:0c:b7:3c:52:a5:ec:1a:ff:23:c6:6e:1a:14:2d:e1:53: 74:9b:8b:59:ec:87:f2:9d:5b:6d:fb:da:8d:22:04:97:af:a7: cf:e4:ee:1c:50:53:42:81:40:a8:c3:aa:e6:d4:7c:a4:a4:4d: 70:2a:8a:63:a1:e6:ca:c0:ea:c4:41:72:69:14:02:b9:30:46: b5:9c:88:fc:c4:0b:5f:4e:54:ef:a7:62:c5:9d:83:1c:f7:49: 6a:91:c5:6c:76:11:8c:fa:22:30:25:01:31:93:8d:62:78:cf: 54:df:b8:e5:f1:86:fb:9a:b7:5c:73:88:a1:37:8c:40:fb:0f: 58:20:48:8c:de:9f:ac:29:a2:58:fd:42:98:dc:a3:ae:1b:f3: 0b:42:75:7a:23:bc:bd:95:bb:c2:38:35:43:8c:24:6c:d3:14: 6b:93:4c:14:19:ad:77:f1:35:1f:44:85:b9:5a:e7:f4:c8:d4: 7e:23:31:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAa8miG7VmTZ7CMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MGNjYmFkMTItOWM2NS00ZmViLWFlNzUtNTVmZjQ4MWFhZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVTVlBxRxfgN/X8qvQOy+QPulM5oKWUk4EN0 HfnD+VSTPZiJ5HaBqmUgVIYMKEtoO9hEnq7goMZ2+6D731SexRkHinGrJkzarGE1 YtKHSbzVxQsK5DHJVQwYIbcqZMaoD0gtia0aBjNClKdL08LGu32RwVTc2irVqyi7 14dD9GdkS9t8If6u9fYbve7JQfyb2UTxmIVCG64mAg+3hxkv7UfjkyGU98utVRME 67UYuoa+x+lBgPaC0691YOY+ZYEE+dhbYatcklw8eExFaSbZ/pxadyQbxU9Vn5aV oia/M8ZO5qnulUhyfFIfqa0a+vbc1LuMfuKrMtx9+5BjabBd5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuuYjucxyO5VwEqVqsz9wquQuxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTgyODlkNjgtYWIzNS0z MjIzLWFhZmItNmYxZGRiMjA0NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyvyI2vvQPhdzmen+xgMJLmaLC+iBE+YP6+usdDpDnzpq8PpN7yJ7ug u8geS+5RmFsyUuGNkwU0VwYtE7xBAR7NwbF6rAFKejm9DLc8UqXsGv8jxm4aFC3h U3Sbi1nsh/KdW2372o0iBJevp8/k7hxQU0KBQKjDqubUfKSkTXAqimOh5srA6sRB cmkUArkwRrWciPzEC19OVO+nYsWdgxz3SWqRxWx2EYz6IjAlATGTjWJ4z1TfuOXx hvuat1xziKE3jED7D1ggSIzen6wpolj9Qpjco64b8wtCdXojvL2Vu8I4NUOMJGzT FGuTTBQZrXfxNR9Ehbla5/TI1H4jMbo= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:33 2025 by rpki-client