$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c18ab6e6-80af-3378-8e46-3a37a06b9c52.roa File: c18ab6e6-80af-3378-8e46-3a37a06b9c52.roa (raw, json) Hash identifier: BxUrDKWnogDxiK+UotIpZu46RG8Tfm22PxYSTU4x38Q= Subject key identifier: 3C:89:76:C9:D5:00:39:77:28:F2:A5:F9:F5:0B:50:FA:AB:0B:0F:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01C7AAFDCE31C905876B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c18ab6e6-80af-3378-8e46-3a37a06b9c52.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.221.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:c7:aa:fd:ce:31:c9:05:87:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=95787dd1-5c15-4bcb-a541-ed97a023f516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:23:c8:00:5b:b7:95:56:86:45:46:e9:4f: ba:c4:a0:e9:1f:78:2c:15:c5:3a:bc:14:0a:a0:80: 66:23:c1:e9:7f:71:48:e9:4f:ae:73:62:07:b8:38: 8d:f2:0f:a8:1d:5f:3b:00:a7:9b:ce:58:0c:f2:fa: c9:96:74:37:b7:4b:8e:e8:7b:f6:a1:0a:1f:ec:8c: 60:b8:49:80:1a:83:c8:b1:d0:17:41:3e:d8:bc:85: 3f:00:27:26:54:8d:e1:71:74:54:5b:e7:95:20:98: ba:c0:7b:b4:98:0a:fe:4a:62:66:09:e5:10:ad:0f: 3e:d1:3d:bd:6f:be:d2:97:1c:00:3c:10:68:90:92: 8a:ab:fe:a0:a6:0b:d9:a6:d4:6c:76:71:43:f7:b4: e2:5c:cc:44:30:6f:43:66:6f:2f:64:90:b9:ae:2f: 2a:26:d6:1a:73:d1:f5:e1:15:be:0f:b6:31:a2:b9: f6:bc:36:01:83:ae:71:52:89:27:d7:64:0c:6a:96: 57:f5:ea:21:46:1b:64:c0:c0:7f:9f:0d:47:f2:38: a8:c3:95:63:c9:d4:ef:a7:0f:f0:d2:1d:cc:03:62: e0:63:f7:6b:6c:7c:a8:4c:21:48:16:70:2b:fd:01: 95:a4:b9:68:29:56:13:1b:26:bf:92:da:01:9f:b5: 93:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:89:76:C9:D5:00:39:77:28:F2:A5:F9:F5:0B:50:FA:AB:0B:0F:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c18ab6e6-80af-3378-8e46-3a37a06b9c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a0:73:ad:24:48:4e:b8:c9:12:e0:00:de:98:d5:f6:c4:99: be:a1:c0:b9:ea:7e:17:59:f9:4e:6f:74:51:cd:5b:cc:af:9e: 58:c9:89:03:eb:b5:10:16:99:b2:fe:5e:f5:22:05:a2:30:ca: a2:16:89:ab:7a:31:d7:f4:43:fb:88:aa:38:cb:9e:51:45:ac: c8:d3:c5:3d:03:1a:37:a1:3e:fb:89:7a:0d:24:17:b2:65:9c: 9d:47:c1:47:a4:c0:d7:7d:2a:f2:a0:aa:6b:6c:2d:3b:68:f7: 82:57:37:99:e2:b8:f5:64:46:d2:4e:d5:1e:84:d0:b9:fd:6f: a7:66:45:71:f7:e6:c6:00:8b:8a:9f:ab:cc:37:89:d9:35:61: 5f:c4:a2:9c:e6:b8:15:ca:04:41:ba:f6:aa:b0:16:79:29:33: b1:fc:5d:e1:b2:54:ff:e3:07:04:f5:4b:f8:b3:d9:90:9a:d6: cb:f4:50:c7:72:bd:40:a3:df:ad:d0:46:5d:11:38:90:51:0a: b4:9d:6f:3c:c5:41:eb:4d:2e:8b:0b:00:4c:71:88:cc:9c:88: 01:f5:3d:37:ec:b9:02:d2:18:a8:5f:a8:e2:e2:0b:36:ac:83: 30:76:26:72:d9:ef:27:ce:00:49:6c:48:fa:55:d2:de:2a:0f: 87:63:49:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAceq/c4xyQWHawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTU3ODdkZDEtNWMxNS00YmNiLWE1NDEtZWQ5N2EwMjNmNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozQjyABbt5VWhkVG6U+6xKDpH3gsFcU6vBQK oIBmI8Hpf3FI6U+uc2IHuDiN8g+oHV87AKebzlgM8vrJlnQ3t0uO6Hv2oQof7Ixg uEmAGoPIsdAXQT7YvIU/ACcmVI3hcXRUW+eVIJi6wHu0mAr+SmJmCeUQrQ8+0T29 b77SlxwAPBBokJKKq/6gpgvZptRsdnFD97TiXMxEMG9DZm8vZJC5ri8qJtYac9H1 4RW+D7Yxorn2vDYBg65xUokn12QMapZX9eohRhtkwMB/nw1H8jiow5VjydTvpw/w 0h3MA2LgY/drbHyoTCFIFnAr/QGVpLloKVYTGya/ktoBn7WT6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyJdsnVADl3KPKl+fULUPqrCw8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzE4YWI2ZTYtODBhZi0z Mzc4LThlNDYtM2EzN2EwNmI5YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABigc60kSE64yRLgAN6Y1fbEmb6hwLnqfhdZ+U5vdFHNW8yvnljJiQPr tRAWmbL+XvUiBaIwyqIWiat6Mdf0Q/uIqjjLnlFFrMjTxT0DGjehPvuJeg0kF7Jl nJ1HwUekwNd9KvKgqmtsLTto94JXN5niuPVkRtJO1R6E0Ln9b6dmRXH35sYAi4qf q8w3idk1YV/EopzmuBXKBEG69qqwFnkpM7H8XeGyVP/jBwT1S/iz2ZCa1sv0UMdy vUCj363QRl0ROJBRCrSdbzzFQetNLosLAExxiMyciAH1PTfsuQLSGKhfqOLiCzas gzB2JnLZ7yfOAElsSPpV0t4qD4djSQ4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:21:49 2025 by rpki-client