$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aeab790c-5169-3613-9dfd-441590a165f5.roa File: aeab790c-5169-3613-9dfd-441590a165f5.roa (raw, json) Hash identifier: I/vwWU7T/G3TpVugnyq87c3WEbwQEkh/F+b+xq2PnRg= Subject key identifier: 8D:0A:CB:06:44:5C:48:B2:A1:8A:25:2E:8E:93:34:6F:92:BF:DD:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BF1C54DF18CF3253AAF0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aeab790c-5169-3613-9dfd-441590a165f5.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.216.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:bf:1c:54:df:18:cf:32:53:aa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=302cbda3-0a41-427f-a345-b8039a2567fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:81:cf:87:45:00:06:c8:f6:94:4c:c2:0e: be:7c:fe:74:cd:bc:30:04:22:fb:c0:f6:73:53:54: 92:80:76:ed:ea:ad:46:8a:26:78:58:38:c8:60:b2: 18:9b:17:17:85:eb:c0:0c:a4:da:b7:1b:30:c0:54: b0:dd:a8:73:a4:f1:38:ed:c7:0b:98:e5:cf:d5:26: ae:00:22:7d:f9:6f:9c:52:5c:d0:d7:8e:e1:45:9c: d1:ce:b1:2b:90:b2:ec:65:86:b3:4e:4f:29:62:ba: 71:af:6a:42:97:bf:80:5a:98:cc:7c:0b:6c:c1:d9: a6:3a:73:0b:7f:62:ae:e9:13:d1:a3:c1:7c:90:b6: c3:be:53:85:92:cc:a1:eb:23:79:ac:09:51:59:8a: e3:3f:f9:e3:02:3b:e5:77:94:3a:a5:80:9c:80:b9: 57:a6:67:ba:4b:36:9e:75:9e:44:0a:36:b6:cb:70: b7:bd:ce:31:77:7d:81:60:6f:cd:e1:4d:83:47:89: df:d7:79:e3:92:57:f9:56:33:58:70:f0:a9:b2:dd: 83:42:84:7f:17:8e:3e:0d:1d:7b:da:29:ca:14:b2: ec:29:45:9c:8f:14:e1:16:5a:84:9a:d9:cc:4a:a4: 88:aa:a4:76:08:ce:84:b6:dd:ce:6d:56:63:b0:32: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0A:CB:06:44:5C:48:B2:A1:8A:25:2E:8E:93:34:6F:92:BF:DD:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aeab790c-5169-3613-9dfd-441590a165f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:11:fb:93:6d:d9:2a:37:8f:e1:89:5d:b4:e1:b6:09:cc:90: 80:f9:57:97:a9:d1:b4:9a:33:ca:53:de:63:d1:d4:28:a5:30: fd:c7:31:22:be:5b:3c:6c:42:e7:a7:15:0c:63:3f:27:85:a8: d2:4a:73:24:34:c4:dc:d6:d6:2e:d6:17:c4:c6:fd:f9:66:6e: fc:a2:56:b0:29:7e:56:12:30:53:50:22:f6:21:b5:bf:70:d2: be:19:db:73:c1:9c:16:f1:cb:7a:42:61:c3:45:81:7f:50:35: 1b:77:b7:58:0c:13:f2:5a:7c:6d:4f:eb:6d:e8:87:de:24:93: dc:7c:9a:a2:a1:cf:a2:dc:f2:94:e1:bb:39:7d:c4:73:36:93: 30:6c:db:8c:a2:c7:c9:85:a9:5a:62:4e:07:bf:05:82:4d:e1: 23:94:c2:3c:94:ce:b4:b3:71:cb:6e:34:27:f9:c1:b0:53:1d: 38:df:5b:01:c6:ec:85:f2:45:29:d6:e8:94:39:6d:f2:1f:5e: 24:c0:e8:0f:7e:ba:f0:ff:9d:38:1f:89:64:98:b6:47:c8:0b: 33:f7:ef:2b:1b:62:cd:4c:c9:bb:66:3c:b5:80:a9:2b:b1:8c: d9:18:bb:a7:9e:77:f5:d5:25:8b:d0:d5:03:d3:cd:68:df:ff: 2f:d3:12:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAb8cVN8YzzJTqvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzAyY2JkYTMtMGE0MS00MjdmLWEzNDUtYjgwMzlhMjU2N2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNiBz4dFAAbI9pRMwg6+fP50zbwwBCL7wPZz U1SSgHbt6q1GiiZ4WDjIYLIYmxcXhevADKTatxswwFSw3ahzpPE47ccLmOXP1Sau ACJ9+W+cUlzQ147hRZzRzrErkLLsZYazTk8pYrpxr2pCl7+AWpjMfAtswdmmOnML f2Ku6RPRo8F8kLbDvlOFksyh6yN5rAlRWYrjP/njAjvld5Q6pYCcgLlXpme6Szae dZ5ECja2y3C3vc4xd32BYG/N4U2DR4nf13njklf5VjNYcPCpst2DQoR/F44+DR17 2inKFLLsKUWcjxThFlqEmtnMSqSIqqR2CM6Ett3ObVZjsDIzKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0KywZEXEiyoYolLo6TNG+Sv93tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWVhYjc5MGMtNTE2OS0z NjEzLTlkZmQtNDQxNTkwYTE2NWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQR+5Nt2So3j+GJXbThtgnMkID5V5ep0bSaM8pT3mPR1CilMP3HMSK+ WzxsQuenFQxjPyeFqNJKcyQ0xNzW1i7WF8TG/flmbvyiVrApflYSMFNQIvYhtb9w 0r4Z23PBnBbxy3pCYcNFgX9QNRt3t1gME/JafG1P623oh94kk9x8mqKhz6Lc8pTh uzl9xHM2kzBs24yix8mFqVpiTge/BYJN4SOUwjyUzrSzcctuNCf5wbBTHTjfWwHG 7IXyRSnW6JQ5bfIfXiTA6A9+uvD/nTgfiWSYtkfICzP37ysbYs1MybtmPLWAqSux jNkYu6eed/XVJYvQ1QPTzWjf/y/TEtk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:49:52 2025 by rpki-client