$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7045947a-a51a-318b-bb46-86dd414dedb1.roa File: 7045947a-a51a-318b-bb46-86dd414dedb1.roa (raw, json) Hash identifier: d1QLb810h3jMEzp8+pCG2FoAQx/5UO75d0W3BRfLA7Y= Subject key identifier: FF:4C:5F:0F:F0:47:6A:2D:58:F7:18:64:C0:B6:72:DE:6E:BA:26:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F019AB25B2D96F7631436B0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7045947a-a51a-318b-bb46-86dd414dedb1.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.200.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:9a:b2:5b:2d:96:f7:63:14:36:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=8a957ac1-65ac-47b9-b293-3a16095173db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:e1:8a:a2:60:4a:1c:04:de:87:a6:4e:47: bd:02:2b:8c:70:9b:33:b3:7a:04:f2:97:a1:57:61: a2:ab:fc:fe:64:62:f1:72:ee:00:70:98:e2:ac:87: c2:24:75:aa:c6:8c:7b:7e:03:28:c6:96:f9:ed:b6: d4:ee:91:6e:e3:58:53:22:cd:06:72:b0:16:ad:39: cb:b8:2c:dd:bd:1d:88:bc:10:d3:13:ff:38:64:ee: f4:61:22:f4:91:21:5e:3d:72:f9:f4:03:0b:c2:64: 3c:2e:3a:d5:02:05:9e:24:23:07:3e:48:df:68:f9: 30:67:0d:de:de:82:50:0e:ba:e1:e1:30:9a:00:dc: b2:be:65:2d:98:6c:79:df:b7:dc:dc:cb:a3:c2:c3: 04:81:11:3a:55:13:8e:f3:b4:13:a5:bc:1c:a3:bd: 23:ce:8f:3e:15:44:77:82:b4:85:ed:1c:6d:36:2a: c3:93:28:40:1b:f1:66:85:d3:fd:93:24:7d:15:70: b8:01:1b:7b:b7:ec:71:fe:46:22:0b:a2:3e:ba:02: 0c:a6:e2:63:b0:3a:92:3a:68:02:0d:3e:7e:e0:ac: 24:f3:9d:a5:f6:4d:ed:81:a5:12:68:6f:61:a1:5f: d0:b0:e4:b7:3c:d9:ba:b9:4b:78:3d:b0:66:e7:cf: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4C:5F:0F:F0:47:6A:2D:58:F7:18:64:C0:B6:72:DE:6E:BA:26:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7045947a-a51a-318b-bb46-86dd414dedb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5b:5d:6b:f1:e1:10:13:66:7c:c9:b2:6c:01:e0:46:c0:4c: 0d:6b:5a:e8:75:17:38:8b:19:dc:78:95:44:09:3c:46:48:6b: bc:33:40:98:4b:1e:26:35:1c:48:63:52:ae:82:2e:5b:74:36: 94:fd:7f:29:93:07:d7:89:7e:8b:26:2b:c4:ad:d4:96:3b:a3: 0e:58:58:11:83:86:d2:e7:cb:01:bb:e8:31:96:3b:7b:94:8b: 28:94:90:4f:3b:24:01:dc:e2:40:b5:f7:8e:7e:54:1f:bb:13: 7b:15:2f:3b:62:e6:96:46:ff:92:56:db:e4:19:3f:1e:37:e0: cf:43:40:1f:84:06:6d:43:fe:1d:d5:dc:be:9c:bf:94:6e:9e: bf:28:c5:14:09:98:ad:fc:94:bb:e0:f5:68:54:e1:17:25:58: 83:b1:8f:7f:c4:c8:0e:43:2f:54:b8:0b:ca:78:21:73:7a:76: c6:f3:ba:f0:34:24:74:38:c8:b9:e2:58:24:9a:21:63:08:ad: f3:fb:21:39:8d:67:af:01:07:d7:83:a4:ad:ae:fd:e6:9e:ed: da:92:7c:64:d0:d5:47:8b:16:67:0f:e3:a8:eb:8d:3d:80:70: 62:3f:ef:6c:ba:4a:55:17:2c:77:60:b6:f3:b8:d5:4b:b2:c5: fb:d5:52:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZqyWy2W92MUNrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OGE5NTdhYzEtNjVhYy00N2I5LWIyOTMtM2ExNjA5NTE3M2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWrhiqJgShwE3oemTke9AiuMcJszs3oE8peh V2Giq/z+ZGLxcu4AcJjirIfCJHWqxox7fgMoxpb57bbU7pFu41hTIs0GcrAWrTnL uCzdvR2IvBDTE/84ZO70YSL0kSFePXL59AMLwmQ8LjrVAgWeJCMHPkjfaPkwZw3e 3oJQDrrh4TCaANyyvmUtmGx537fc3MujwsMEgRE6VROO87QTpbwco70jzo8+FUR3 grSF7RxtNirDkyhAG/FmhdP9kyR9FXC4ARt7t+xx/kYiC6I+ugIMpuJjsDqSOmgC DT5+4Kwk852l9k3tgaUSaG9hoV/QsOS3PNm6uUt4PbBm588K1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9MXw/wR2otWPcYZMC2ct5uuiaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzA0NTk0N2EtYTUxYS0z MThiLWJiNDYtODZkZDQxNGRlZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMhCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBbXWvx4RATZnzJsmwB4EbATA1rWuh1FziLGdx4lUQJPEZIa7wzQJhL HiY1HEhjUq6CLlt0NpT9fymTB9eJfosmK8St1JY7ow5YWBGDhtLnywG76DGWO3uU iyiUkE87JAHc4kC1945+VB+7E3sVLzti5pZG/5JW2+QZPx434M9DQB+EBm1D/h3V 3L6cv5Runr8oxRQJmK38lLvg9WhU4RclWIOxj3/EyA5DL1S4C8p4IXN6dsbzuvA0 JHQ4yLniWCSaIWMIrfP7ITmNZ68BB9eDpK2u/eae7dqSfGTQ1UeLFmcP46jrjT2A cGI/72y6SlUXLHdgtvO41UuyxfvVUgU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:08 2025 by rpki-client