$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a587aebd-d854-36ef-8d25-e8c5a8297f66.roa File: a587aebd-d854-36ef-8d25-e8c5a8297f66.roa (raw, json) Hash identifier: 6Xt1ZPJrwwgQzy9RTyXTMdwWtCQV0v+oEhRk7c4MYu0= Subject key identifier: A0:27:0A:63:CB:BD:88:35:0C:86:FD:8E:FC:8D:E3:AD:96:BD:B2:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01AFC924925C80FECB78B8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a587aebd-d854-36ef-8d25-e8c5a8297f66.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:af:c9:24:92:5c:80:fe:cb:78:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=93c80151-020b-4e33-bf19-d71f0ff4898f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:ee:03:09:3c:80:f9:17:15:c0:af:e1:16: 9d:fd:fb:91:85:f4:e5:1b:c7:dc:46:0a:f4:53:9a: 49:1a:ad:45:c7:25:2a:7b:14:a2:a4:46:27:08:8b: 14:90:c8:81:4f:87:9c:ea:6e:ff:5f:62:10:b4:a9: 24:91:89:1e:7b:ab:81:d6:6e:5b:1f:64:83:61:1f: 9a:ec:9a:5e:c7:75:8a:78:5d:d3:ad:79:2c:8e:35: 63:25:da:e8:29:0c:86:e0:26:85:18:6a:10:9f:fe: 19:ae:f9:2c:2c:44:bd:26:6a:67:3c:9f:a7:a8:ad: 07:8b:31:7b:e1:17:d9:ed:43:7a:ca:02:92:0f:a4: 6c:6e:e8:23:c8:7c:20:6c:ef:00:40:7b:6b:04:a3: b9:92:83:91:ab:86:c5:a6:b4:ca:fe:df:92:fb:dc: fb:bf:84:32:9f:11:1a:7d:b5:c1:9e:bd:5b:20:47: b1:11:6b:55:ca:98:52:95:4c:05:1d:ca:dc:13:56: bb:66:a9:8b:05:36:30:5a:87:f0:b1:be:1f:a2:33: 79:6b:dc:85:47:84:a7:bb:d5:00:86:a4:8f:23:f1: b9:d2:8c:00:ec:6e:31:83:57:7b:97:37:1c:ba:90: a3:cd:f3:9c:9a:4b:f6:8b:9b:ff:87:03:ab:35:25: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:27:0A:63:CB:BD:88:35:0C:86:FD:8E:FC:8D:E3:AD:96:BD:B2:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a587aebd-d854-36ef-8d25-e8c5a8297f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bc:54:6b:42:52:21:66:80:fc:a9:3c:c1:0b:cf:e7:78:2c: 96:da:23:6b:d1:ac:c6:b7:89:0a:4a:88:50:b6:91:e2:ce:83: 69:28:20:b7:72:62:d3:d5:4b:44:45:63:d4:f6:29:f9:5c:33: f7:8b:51:ed:56:be:8f:b6:f2:b3:52:27:69:59:a3:ba:15:54: 45:b8:4b:09:cd:8a:7c:bb:1b:27:0e:2d:ca:7a:cf:ea:24:81: 0c:d7:cb:70:3b:ac:d6:18:53:de:97:69:00:e1:1f:2d:6f:84: d0:0e:14:52:a2:72:40:4d:ec:6f:dc:93:34:f0:03:4e:57:e1: cb:6a:09:01:dd:d7:b3:b3:41:23:aa:ed:01:eb:ed:fe:33:88: 5a:6e:ca:46:04:c7:12:2c:9c:5a:cb:57:b4:78:dc:84:df:08: ae:82:3b:fb:f7:e5:44:5b:00:33:42:40:00:b5:1a:1f:ec:72: 87:f6:19:28:d6:49:53:ce:b1:be:9b:56:9d:b4:7e:b4:78:b1: e5:47:dd:0e:ef:67:a3:e2:f4:d9:18:a5:76:5e:a1:09:a9:29: 53:d7:6f:7e:af:56:0e:60:05:b1:68:cb:a8:92:39:74:0d:d3: bf:6a:0e:ff:07:5c:fd:ea:64:e4:24:74:b3:51:41:e1:f8:9e: 8d:ce:1d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAa/JJJJcgP7LeLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTNjODAxNTEtMDIwYi00ZTMzLWJmMTktZDcxZjBmZjQ4OThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk/uAwk8gPkXFcCv4Rad/fuRhfTlG8fcRgr0 U5pJGq1FxyUqexSipEYnCIsUkMiBT4ec6m7/X2IQtKkkkYkee6uB1m5bH2SDYR+a 7Jpex3WKeF3TrXksjjVjJdroKQyG4CaFGGoQn/4ZrvksLES9JmpnPJ+nqK0HizF7 4RfZ7UN6ygKSD6RsbugjyHwgbO8AQHtrBKO5koORq4bFprTK/t+S+9z7v4QynxEa fbXBnr1bIEexEWtVyphSlUwFHcrcE1a7ZqmLBTYwWofwsb4fojN5a9yFR4Snu9UA hqSPI/G50owA7G4xg1d7lzccupCjzfOcmkv2i5v/hwOrNSUeVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAnCmPLvYg1DIb9jvyN462WvbJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTU4N2FlYmQtZDg1NC0z NmVmLThkMjUtZThjNWE4Mjk3ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa8VGtCUiFmgPypPMELz+d4LJbaI2vRrMa3iQpKiFC2keLOg2koILdy YtPVS0RFY9T2KflcM/eLUe1Wvo+28rNSJ2lZo7oVVEW4SwnNiny7GycOLcp6z+ok gQzXy3A7rNYYU96XaQDhHy1vhNAOFFKickBN7G/ckzTwA05X4ctqCQHd17OzQSOq 7QHr7f4ziFpuykYExxIsnFrLV7R43ITfCK6CO/v35URbADNCQAC1Gh/scof2GSjW SVPOsb6bVp20frR4seVH3Q7vZ6Pi9NkYpXZeoQmpKVPXb36vVg5gBbFoy6iSOXQN 079qDv8HXP3qZOQkdLNRQeH4no3OHTQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:25 2025 by rpki-client