$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb6e95b1-8774-36c1-a7a3-2273fe86c312.roa File: bb6e95b1-8774-36c1-a7a3-2273fe86c312.roa (raw, json) Hash identifier: gBLWh+bLddpwZtEztHRthSQLB4eCAUZHwxkXzJFv/mY= Subject key identifier: FF:2B:A8:96:3D:E1:8D:39:E3:B8:85:7F:C0:26:8A:0C:79:30:26:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A3C99C8E8F55AD3EAE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb6e95b1-8774-36c1-a7a3-2273fe86c312.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a3:c9:9c:8e:8f:55:ad:3e:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=85d6e9b0-a559-4cd5-9d7e-bcc10a9c023f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:f0:72:da:c7:c5:2a:fd:e6:cf:a5:75:80: 45:a9:b3:12:b4:ec:fd:0f:da:a4:64:08:99:4c:84: 43:4c:86:ef:97:c0:2a:bf:6a:80:b5:5f:2a:24:46: 4e:78:a9:fe:85:aa:bc:e6:f5:59:95:c7:fe:a0:51: 77:a1:02:8b:c7:fc:f7:43:99:99:b1:00:a7:5d:31: 7e:d2:b4:5a:9c:1b:56:ea:38:d4:fa:b8:b7:22:21: 38:ea:ee:02:4c:c3:50:c8:c2:3f:21:5a:50:2a:cd: 8a:1e:5b:68:74:ea:f3:3d:d4:10:93:bb:7e:84:d8: 94:0c:27:49:7b:93:b6:90:44:a4:3a:ef:0c:c4:0c: f1:71:47:8b:33:46:85:09:7b:76:af:fd:fd:b8:79: 0c:ed:93:3c:f2:01:8a:3e:3f:84:c4:14:01:41:a9: 0a:31:d8:50:5d:b3:8f:a6:da:c5:93:9b:14:6b:35: 37:6c:54:47:5c:0a:23:34:39:30:6a:d3:d1:27:5a: 42:cb:d2:69:84:fc:49:4d:6e:01:35:05:3e:62:2c: e6:52:5c:b5:70:6a:b7:bf:65:65:c2:f4:28:5b:3a: 63:2f:e4:a9:75:b7:ec:4a:6f:4a:8d:1c:a7:56:34: 3f:88:a4:0e:c0:1c:c1:f6:05:5e:69:03:d7:28:44: d9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2B:A8:96:3D:E1:8D:39:E3:B8:85:7F:C0:26:8A:0C:79:30:26:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb6e95b1-8774-36c1-a7a3-2273fe86c312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:35:71:d1:6c:53:38:33:c1:57:ae:e2:60:eb:42:da:20:8c: 84:34:4f:2b:77:d3:3a:3a:a3:27:f4:28:7d:a0:7a:e7:c3:68: 0d:31:9e:3b:7f:71:a9:43:b1:7d:c5:d9:06:48:cb:32:a9:dd: bb:35:44:05:e9:6d:c8:7e:57:58:c5:9b:5a:54:26:cf:e4:0f: 0b:18:30:d7:20:55:c8:d6:da:b9:27:04:15:f0:bf:81:56:1a: 7b:19:84:a6:13:17:2b:56:2c:c4:1d:6d:a8:f8:45:4e:3e:19: 73:40:f7:ed:88:5f:40:f3:ed:8a:c7:aa:05:b7:96:fd:c6:bc: 10:eb:ab:f6:90:c9:96:c7:7a:1e:d8:30:9d:87:8a:4e:65:69: de:1e:e7:49:7a:0b:bb:8f:1d:98:e5:42:a8:a8:9e:c2:7d:a2: 05:7a:b9:b0:7b:e4:8b:4b:45:ad:60:f7:23:b8:84:f5:1c:48: 7b:47:31:62:ec:fa:8a:92:24:4e:4a:0f:13:ba:79:d8:b6:4f: 04:f5:34:ee:af:15:f0:59:a5:65:7d:f8:2c:2d:83:f1:eb:13: 37:b6:58:32:f1:d7:84:fe:20:a4:8c:86:8c:45:b2:01:21:d1: e6:6e:b7:39:05:40:6f:05:3c:71:0d:d0:0d:d8:4e:15:fd:57: d7:68:4a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaPJnI6PVa0+rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODVkNmU5YjAtYTU1OS00Y2Q1LTlkN2UtYmNjMTBhOWMwMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCnwctrHxSr95s+ldYBFqbMStOz9D9qkZAiZ TIRDTIbvl8Aqv2qAtV8qJEZOeKn+haq85vVZlcf+oFF3oQKLx/z3Q5mZsQCnXTF+ 0rRanBtW6jjU+ri3IiE46u4CTMNQyMI/IVpQKs2KHltodOrzPdQQk7t+hNiUDCdJ e5O2kESkOu8MxAzxcUeLM0aFCXt2r/39uHkM7ZM88gGKPj+ExBQBQakKMdhQXbOP ptrFk5sUazU3bFRHXAojNDkwatPRJ1pCy9JphPxJTW4BNQU+YizmUly1cGq3v2Vl wvQoWzpjL+SpdbfsSm9KjRynVjQ/iKQOwBzB9gVeaQPXKETZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8rqJY94Y0547iFf8Amigx5MCb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI2ZTk1YjEtODc3NC0z NmMxLWE3YTMtMjI3M2ZlODZjMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg1cdFsUzgzwVeu4mDrQtogjIQ0Tyt30zo6oyf0KH2geufDaA0xnjt/ calDsX3F2QZIyzKp3bs1RAXpbch+V1jFm1pUJs/kDwsYMNcgVcjW2rknBBXwv4FW GnsZhKYTFytWLMQdbaj4RU4+GXNA9+2IX0Dz7YrHqgW3lv3GvBDrq/aQyZbHeh7Y MJ2Hik5lad4e50l6C7uPHZjlQqionsJ9ogV6ubB75ItLRa1g9yO4hPUcSHtHMWLs +oqSJE5KDxO6edi2TwT1NO6vFfBZpWV9+Cwtg/HrEze2WDLx14T+IKSMhoxFsgEh 0eZutzkFQG8FPHEN0A3YThX9V9doSnk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:53 2025 by rpki-client