$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b60a73e-75d8-33a0-b09c-19ba5cc2227e.roa File: 6b60a73e-75d8-33a0-b09c-19ba5cc2227e.roa (raw, json) Hash identifier: K3Db3fO82m5dANgmGDQsSLdyh4aM3YmaJ39a49EhfrQ= Subject key identifier: 4A:99:8C:F0:E0:E5:80:2A:28:4C:DE:5C:A9:D1:C8:72:37:1F:EE:32 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B25434AEDEB628A19580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b60a73e-75d8-33a0-b09c-19ba5cc2227e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b2:54:34:ae:de:b6:28:a1:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=d3ce1695-9485-4012-bdab-e6b72c00c2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:8c:30:8b:93:26:e7:85:44:fa:fb:a7:bd: 10:27:b0:22:d4:36:26:7c:fd:d5:63:46:e7:6f:71: 3c:c7:85:1f:1b:01:08:7b:c6:21:03:72:cc:01:d9: 79:e0:c2:4c:af:89:d2:0f:12:e2:cd:a8:5a:b1:91: 90:ad:7b:89:2c:a7:53:be:8f:24:04:25:de:41:7c: d1:de:f3:2d:36:51:ef:72:0e:cf:7c:c7:83:92:cb: 2d:35:35:a6:f0:de:fa:9a:b7:6a:d1:1d:02:f0:1c: e9:40:ad:3f:aa:d3:08:2d:1f:38:5b:52:f6:66:3c: c5:3b:62:8d:63:9d:3a:61:98:dc:c5:8c:52:58:01: 39:ba:1e:d7:5f:ba:a1:78:2d:e6:e9:b0:9d:02:ee: 4d:b4:05:17:22:9b:7a:c1:b6:83:1b:80:f3:1b:d5: e4:17:59:12:63:a5:03:6d:4d:24:45:8f:41:de:f0: 71:d4:f0:8e:a7:04:a2:4e:cd:3e:0d:8f:79:0b:2e: 44:56:91:91:04:2e:5d:e1:2c:43:1c:5a:70:c6:df: c7:60:79:20:75:cf:8c:a5:0a:39:4f:18:8d:9f:be: d6:7c:c0:78:b4:5d:91:b7:1e:ff:bb:60:48:e8:67: f9:32:80:41:d0:11:fa:d2:42:33:3e:cc:7b:8c:9b: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:99:8C:F0:E0:E5:80:2A:28:4C:DE:5C:A9:D1:C8:72:37:1F:EE:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b60a73e-75d8-33a0-b09c-19ba5cc2227e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0b:51:cb:51:0d:dc:1f:ac:fb:d2:5a:78:e6:33:31:3b:28: bc:0d:51:d1:9a:ba:75:53:e1:a7:04:f4:da:74:f0:78:6a:00: 79:fe:2d:3e:17:9d:21:d9:e0:cd:48:8a:c1:1f:72:66:57:5f: de:5b:ca:96:f5:b9:a7:5d:5b:78:32:82:8f:48:45:7e:5f:05: be:4f:59:ae:e8:9e:f0:a5:87:8a:ed:60:15:4b:48:b8:be:95: 80:19:08:05:b1:92:5d:34:80:c5:7e:7d:66:81:59:a8:84:33: 2e:78:b6:02:bf:f4:d6:76:d8:a5:b8:27:d9:4d:65:fa:29:be: e4:70:19:da:61:55:a5:38:ab:61:81:9d:4d:3e:af:0e:17:5b: 67:5d:79:51:03:fe:12:91:21:32:0a:f7:16:a6:9d:13:4d:5b: 9f:b2:41:3c:ba:c1:99:8b:0c:b7:3c:a0:26:dd:3d:3f:1c:93: 82:b8:de:5e:38:7d:42:2a:74:ce:71:ed:c5:28:66:85:3e:26: 71:22:6d:cb:10:e2:56:2d:8f:f3:e7:aa:a3:0e:63:20:79:f5: bc:6f:13:fa:a3:39:e1:ad:87:d5:f0:08:67:c7:fe:e5:d7:a5: f8:df:68:ca:08:78:64:7d:1a:a9:b6:ed:5c:82:e2:f8:fc:66: d4:b6:e4:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbJUNK7etiihlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDNjZTE2OTUtOTQ4NS00MDEyLWJkYWItZTZiNzJjMDBjMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NiMMIuTJueFRPr7p70QJ7Ai1DYmfP3VY0bn b3E8x4UfGwEIe8YhA3LMAdl54MJMr4nSDxLizahasZGQrXuJLKdTvo8kBCXeQXzR 3vMtNlHvcg7PfMeDksstNTWm8N76mrdq0R0C8BzpQK0/qtMILR84W1L2ZjzFO2KN Y506YZjcxYxSWAE5uh7XX7qheC3m6bCdAu5NtAUXIpt6wbaDG4DzG9XkF1kSY6UD bU0kRY9B3vBx1PCOpwSiTs0+DY95Cy5EVpGRBC5d4SxDHFpwxt/HYHkgdc+MpQo5 TxiNn77WfMB4tF2Rtx7/u2BI6Gf5MoBB0BH60kIzPsx7jJsfdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqZjPDg5YAqKEzeXKnRyHI3H+4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmI2MGE3M2UtNzVkOC0z M2EwLWIwOWMtMTliYTVjYzIyMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADALUctRDdwfrPvSWnjmMzE7KLwNUdGaunVT4acE9Np08HhqAHn+LT4X nSHZ4M1IisEfcmZXX95bypb1uaddW3gygo9IRX5fBb5PWa7onvClh4rtYBVLSLi+ lYAZCAWxkl00gMV+fWaBWaiEMy54tgK/9NZ22KW4J9lNZfopvuRwGdphVaU4q2GB nU0+rw4XW2ddeVED/hKRITIK9xamnRNNW5+yQTy6wZmLDLc8oCbdPT8ck4K43l44 fUIqdM5x7cUoZoU+JnEibcsQ4lYtj/PnqqMOYyB59bxvE/qjOeGth9XwCGfH/uXX pfjfaMoIeGR9Gqm27VyC4vj8ZtS25DU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:43:53 2025 by rpki-client