$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cb9355c-9a47-31ae-8118-c95a5a777323.roa File: 8cb9355c-9a47-31ae-8118-c95a5a777323.roa (raw, json) Hash identifier: 1pv28/UCxpWpMOcTsl6zHMzgB9rO8odN4hi7McXhPtI= Subject key identifier: 12:8E:12:AF:47:4A:7F:C9:D1:9A:E3:FD:35:2B:1D:9C:EA:C6:C1:17 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F22FF8A5B4BEE9EF1D4EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cb9355c-9a47-31ae-8118-c95a5a777323.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:2f:f8:a5:b4:be:e9:ef:1d:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=bd62e149-7826-43c4-8b9f-c71ec4a1a00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:99:74:fb:78:bc:b5:1a:5c:69:aa:7a:e2: 99:7c:54:2f:55:44:7c:05:b5:5c:c6:26:d1:08:03: 7a:a7:26:49:b9:29:5c:a7:47:41:84:b8:6d:18:dc: 9e:52:96:99:89:29:ac:d7:50:25:aa:87:b6:53:4d: 49:a1:74:8d:59:3f:9a:08:8c:6e:2d:4f:a3:42:4d: 57:64:81:ac:b1:18:49:6e:07:13:2b:f8:f0:20:58: a9:6b:6a:25:5a:f2:4e:63:62:a2:2b:c3:b2:2e:17: b2:e7:17:3b:32:44:52:c2:53:01:57:40:7e:44:ab: 86:3f:65:82:d9:be:4e:94:d8:ca:fe:e7:49:f4:ec: 99:1d:3f:3f:2e:66:db:b0:68:0e:62:1e:af:46:f3: 71:db:4a:13:ea:0e:87:76:fe:83:e5:32:a7:e3:ec: ed:d0:a4:ff:87:eb:2f:04:71:ef:89:1a:80:87:ed: cb:a1:23:bd:69:fd:f4:0c:33:c6:86:2a:a8:66:dd: ee:49:f6:fa:ae:9c:32:4e:b7:c1:01:47:0e:4f:2e: aa:f2:d7:64:1a:1a:59:da:fa:59:6b:aa:d8:a7:62: e4:0c:0f:e5:50:e4:3f:c4:f3:66:af:d2:5e:a3:dc: 4b:94:b6:84:1c:88:53:51:52:64:1f:01:2c:78:23: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8E:12:AF:47:4A:7F:C9:D1:9A:E3:FD:35:2B:1D:9C:EA:C6:C1:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cb9355c-9a47-31ae-8118-c95a5a777323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:60:bd:71:a7:62:ce:fd:f4:f2:d5:e3:71:9c:62:19:80:bb: 59:9b:4e:c6:4c:ed:51:63:6d:d8:12:e9:45:36:51:e3:e6:3f: 74:12:fe:59:3e:5c:4b:5c:62:2a:48:35:02:da:14:d9:37:69: 1f:7c:9e:78:13:fd:91:c1:1d:a6:33:6b:36:33:c7:bf:82:32: 39:90:a9:01:4e:f1:70:c3:ba:78:11:9c:94:cf:41:6e:93:83: 05:8f:c4:7c:bc:47:3f:0c:c1:74:41:ad:da:2e:0e:41:1b:88: 0b:9d:9b:17:d9:f4:50:42:21:18:74:0d:60:e5:4e:21:ca:9b: 76:be:fb:c6:88:a5:c2:19:6c:98:cc:5a:37:ea:9e:1c:de:a5: 0b:c7:aa:8f:65:32:9c:0f:67:c0:12:59:7d:8b:76:33:28:18: c8:6a:94:6e:81:62:5c:b1:e2:7b:42:48:7a:53:eb:b4:62:56: fe:bb:2c:95:b6:a3:c6:ca:98:43:42:fb:ef:1c:93:ad:bd:4b: 00:9e:8f:27:90:2b:eb:b9:ec:c1:7f:46:1c:77:38:f6:c8:92: 26:80:6c:d2:f9:cd:ce:d9:49:15:1b:dc:34:7b:40:af:1c:c1: a8:2b:d0:97:93:b8:e0:9a:b6:5e:c1:0d:8f:25:e6:25:f6:6e: a7:38:26:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28i/4pbS+6e8dTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmQ2MmUxNDktNzgyNi00M2M0LThiOWYtYzcxZWM0YTFhMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTaZdPt4vLUaXGmqeuKZfFQvVUR8BbVcxibR CAN6pyZJuSlcp0dBhLhtGNyeUpaZiSms11Alqoe2U01JoXSNWT+aCIxuLU+jQk1X ZIGssRhJbgcTK/jwIFipa2olWvJOY2KiK8OyLhey5xc7MkRSwlMBV0B+RKuGP2WC 2b5OlNjK/udJ9OyZHT8/LmbbsGgOYh6vRvNx20oT6g6Hdv6D5TKn4+zt0KT/h+sv BHHviRqAh+3LoSO9af30DDPGhiqoZt3uSfb6rpwyTrfBAUcOTy6q8tdkGhpZ2vpZ a6rYp2LkDA/lUOQ/xPNmr9Jeo9xLlLaEHIhTUVJkHwEseCN+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKOEq9HSn/J0Zrj/TUrHZzqxsEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGNiOTM1NWMtOWE0Ny0z MWFlLTgxMTgtYzk1YTVhNzc3MzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpgvXGnYs799PLV43GcYhmAu1mbTsZM7VFjbdgS6UU2UePmP3QS/lk+ XEtcYipINQLaFNk3aR98nngT/ZHBHaYzazYzx7+CMjmQqQFO8XDDungRnJTPQW6T gwWPxHy8Rz8MwXRBrdouDkEbiAudmxfZ9FBCIRh0DWDlTiHKm3a++8aIpcIZbJjM WjfqnhzepQvHqo9lMpwPZ8ASWX2LdjMoGMhqlG6BYlyx4ntCSHpT67RiVv67LJW2 o8bKmENC++8ck629SwCejyeQK+u57MF/Rhx3OPbIkiaAbNL5zc7ZSRUb3DR7QK8c wagr0JeTuOCatl7BDY8l5iX2bqc4JjY= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:32 2025 by rpki-client