$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9153c73f-7103-37c5-90ff-2a9d5005c965.roa File: 9153c73f-7103-37c5-90ff-2a9d5005c965.roa (raw, json) Hash identifier: nm3Di1i+0bOcFBk2Bga52OZ50PyyH5DWNLIIRnVpdkI= Subject key identifier: 8A:D5:15:AA:9F:A3:B4:DC:3A:83:91:9D:E0:E0:C7:50:3F:97:52:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206726105CA68E98A6887380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9153c73f-7103-37c5-90ff-2a9d5005c965.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.203.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:26:10:5c:a6:8e:98:a6:88:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=12a3ce3d-f0fa-4200-b603-b5eb5b5b6130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ff:55:de:43:e6:3e:40:f4:96:0e:5c:d9:ae: 49:f1:92:a8:2d:52:3e:3d:75:31:3d:4e:21:19:f7: 6a:e9:32:9d:db:28:ab:48:83:86:6b:da:e5:a8:bf: 86:f9:5e:36:73:58:68:66:74:6d:11:71:c3:3e:f3: f8:c3:55:48:12:2a:8e:e8:55:a9:09:b0:98:e1:07: 73:da:41:67:f3:1e:0b:85:8f:ea:09:78:3f:69:f0: e7:a3:aa:66:8b:b5:34:03:39:a5:f2:08:a2:c4:d6: 2d:12:ca:f0:af:a7:91:51:35:7c:88:ee:0d:ee:13: 67:01:84:20:12:83:f1:f8:19:7d:80:92:37:4e:7a: 0d:26:d5:b5:98:ae:93:65:6e:34:05:37:13:83:5c: fd:23:03:54:1d:47:e3:0c:67:95:18:dd:97:30:66: 9e:1b:13:e2:88:a4:df:21:a6:9d:23:ab:b3:8f:d5: 62:2a:5f:3d:9f:bc:0e:4f:6d:1c:75:a4:2b:f3:0d: 1c:a4:e7:8f:d3:32:57:f4:db:86:0b:73:4c:ce:74: 82:78:18:45:86:28:10:d7:09:d9:43:7d:14:25:8d: 99:b1:2b:ad:80:3c:23:84:3c:34:a6:ca:f1:5f:a8: f3:a5:99:dd:96:54:0c:e3:b5:e2:5f:37:b9:f6:2c: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D5:15:AA:9F:A3:B4:DC:3A:83:91:9D:E0:E0:C7:50:3F:97:52:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9153c73f-7103-37c5-90ff-2a9d5005c965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.203.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:04:af:a5:31:f7:d2:53:73:63:6f:e6:16:64:a7:8b:e1:76: 02:27:e9:98:70:d7:e5:27:53:95:2a:3c:b5:d1:ae:9d:52:87: b6:28:53:60:49:e7:86:ab:0d:3f:a2:f7:af:e0:d7:b6:6e:24: 7a:89:48:80:67:e9:73:98:50:fc:fc:02:64:6d:ec:ae:53:01: 9c:c9:0b:f3:ce:6a:53:b6:1d:79:63:0b:22:45:ef:be:e9:52: 5b:18:33:cf:3f:6b:58:2f:5f:28:df:36:e4:1c:18:cf:7d:2a: 1e:b0:67:70:b2:cd:f5:81:75:81:c3:15:4f:ff:fe:96:24:a8: 02:05:16:32:8a:84:1f:82:26:1c:4f:90:f3:1c:91:e3:78:d5: 51:ea:b9:72:7c:de:e1:8f:5d:19:a0:bd:e0:ff:78:20:82:a4: 63:7d:ba:f3:4a:ca:b7:6b:90:58:30:2a:51:7b:72:2a:6a:b6: 9b:04:4c:14:a2:63:ae:83:27:d0:0d:ac:90:b2:6e:97:72:3a: 85:39:0c:fa:48:d6:39:fd:1e:a7:6f:bc:dd:31:55:d5:3e:d6: 46:15:75:d8:f6:49:a5:26:92:c1:b1:7a:32:db:26:38:b6:d7: 3b:db:2f:df:a0:bb:bb:5a:df:53:7b:d7:f9:63:cc:05:57:e9: 44:c1:b9:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZyYQXKaOmKaIc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MTJhM2NlM2QtZjBmYS00MjAwLWI2MDMtYjVlYjViNWI2MTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7f9V3kPmPkD0lg5c2a5J8ZKoLVI+PXUxPU4h Gfdq6TKd2yirSIOGa9rlqL+G+V42c1hoZnRtEXHDPvP4w1VIEiqO6FWpCbCY4Qdz 2kFn8x4LhY/qCXg/afDno6pmi7U0Azml8giixNYtEsrwr6eRUTV8iO4N7hNnAYQg EoPx+Bl9gJI3TnoNJtW1mK6TZW40BTcTg1z9IwNUHUfjDGeVGN2XMGaeGxPiiKTf IaadI6uzj9ViKl89n7wOT20cdaQr8w0cpOeP0zJX9NuGC3NMznSCeBhFhigQ1wnZ Q30UJY2ZsSutgDwjhDw0psrxX6jzpZndllQM47XiXze59iyVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrVFaqfo7TcOoORneDgx1A/l1JuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTE1M2M3M2YtNzEwMy0z N2M1LTkwZmYtMmE5ZDUwMDVjOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAEr6Ux99JTc2Nv5hZkp4vhdgIn6Zhw1+UnU5UqPLXRrp1Sh7YoU2BJ 54arDT+i96/g17ZuJHqJSIBn6XOYUPz8AmRt7K5TAZzJC/POalO2HXljCyJF777p UlsYM88/a1gvXyjfNuQcGM99Kh6wZ3CyzfWBdYHDFU///pYkqAIFFjKKhB+CJhxP kPMckeN41VHquXJ83uGPXRmgveD/eCCCpGN9uvNKyrdrkFgwKlF7cipqtpsETBSi Y66DJ9ANrJCybpdyOoU5DPpI1jn9HqdvvN0xVdU+1kYVddj2SaUmksGxejLbJji2 1zvbL9+gu7ta31N71/ljzAVX6UTBueU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:51:30 2025 by rpki-client