$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/caf8bb34-3daa-3b80-8047-b4a5d711a2ff.roa File: caf8bb34-3daa-3b80-8047-b4a5d711a2ff.roa (raw, json) Hash identifier: hfpPq/RN8wJi2JxrKui7zkdJf3dId4Znx3h2OXTg9AA= Subject key identifier: 49:50:EB:EE:51:1D:CE:3A:47:6F:1D:DA:F2:E3:40:7D:5C:81:10:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01BB29530B0F64D0D47980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/caf8bb34-3daa-3b80-8047-b4a5d711a2ff.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.212.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:bb:29:53:0b:0f:64:d0:d4:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=a9050467-37f8-4173-93c2-246998e09dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:5f:28:ea:c3:cb:56:7a:d3:49:a0:36:c1: 7c:bb:0f:64:a4:0d:9a:77:e8:06:0e:a8:d6:bb:3f: d8:ed:36:6d:6b:31:c7:99:0c:ca:78:ba:2d:c7:b1: b1:6f:6f:5b:a1:4c:5b:45:44:aa:b3:d9:c4:56:d0: 51:70:2b:46:64:f1:46:0f:fd:75:f9:b1:8e:41:3c: 5d:11:a7:5f:a1:e0:b1:51:7e:88:d8:4f:15:29:3c: bb:17:16:6b:53:37:57:52:0f:55:78:84:95:c2:bd: 73:02:37:57:09:34:69:3a:af:46:dd:9a:f8:8a:0d: 5c:53:41:80:6a:52:7b:97:94:44:65:4b:5d:d4:3d: 4c:06:53:3f:c2:4c:b0:85:b7:14:da:38:e5:7d:71: 0f:85:38:73:45:89:49:fa:da:ba:ae:bd:41:f8:7f: 99:30:5e:d2:d2:00:c9:8b:70:0b:d2:e8:29:37:48: 88:c4:1c:b3:6d:dc:d4:ba:44:12:c9:b8:42:f0:3a: 10:51:75:93:d0:d0:e6:e1:72:ba:f6:50:28:31:9c: b1:26:80:de:16:11:f1:9c:6e:46:5a:70:41:a8:6d: 57:ac:11:1c:bd:0a:1b:70:23:99:a9:24:5e:54:f2: 11:cf:94:ef:b1:5f:7a:72:5d:37:7f:b0:82:83:83: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:50:EB:EE:51:1D:CE:3A:47:6F:1D:DA:F2:E3:40:7D:5C:81:10:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/caf8bb34-3daa-3b80-8047-b4a5d711a2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:91:33:1b:a1:d6:a9:14:ff:0a:fc:fe:fc:c7:5f:f7:19:70: 91:91:3a:ab:62:7f:af:c4:fa:33:d0:e3:14:6c:3e:fe:98:0f: 2b:63:60:08:9e:81:5e:0f:05:1a:29:80:fe:18:68:26:94:af: 4f:38:ae:76:00:4b:10:c6:04:60:fc:7f:63:39:8d:8c:60:f4: 8a:87:16:f5:f3:57:44:74:35:a6:0d:81:69:01:04:6a:34:e1: ac:15:8b:1f:99:4e:7e:77:ff:e8:a9:77:91:30:c1:82:cd:a3: 61:ee:07:8d:08:1f:81:53:3e:9e:4f:37:92:82:b5:ff:07:29: 6b:74:da:cb:fd:59:22:d2:31:fc:92:e8:58:3e:9c:25:23:2a: c8:1d:95:1c:55:41:62:38:5b:fe:9e:3a:2b:8b:0c:9b:60:6b: ae:33:84:7c:eb:a1:39:d6:da:41:88:c9:bb:37:7f:84:73:d6: 33:93:c9:8d:5b:b1:2c:30:96:76:b4:a3:77:df:6f:af:08:08: b2:80:61:0f:e6:01:d7:f0:f0:e2:81:8e:85:98:c4:0e:39:5b: 2f:9a:cf:c4:8b:d7:38:3a:f1:60:a2:2f:6e:b0:b9:33:c2:7a: 75:14:83:30:e2:6b:c0:30:6d:a7:7f:90:41:96:d0:c8:c4:16: b4:36:01:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbspUwsPZNDUeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTkwNTA0NjctMzdmOC00MTczLTkzYzItMjQ2OTk4ZTA5ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3JfKOrDy1Z600mgNsF8uw9kpA2ad+gGDqjW uz/Y7TZtazHHmQzKeLotx7Gxb29boUxbRUSqs9nEVtBRcCtGZPFGD/11+bGOQTxd EadfoeCxUX6I2E8VKTy7FxZrUzdXUg9VeISVwr1zAjdXCTRpOq9G3Zr4ig1cU0GA alJ7l5REZUtd1D1MBlM/wkywhbcU2jjlfXEPhThzRYlJ+tq6rr1B+H+ZMF7S0gDJ i3AL0ugpN0iIxByzbdzUukQSybhC8DoQUXWT0NDm4XK69lAoMZyxJoDeFhHxnG5G WnBBqG1XrBEcvQobcCOZqSReVPIRz5TvsV96cl03f7CCg4MbbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElQ6+5RHc46R28d2vLjQH1cgRBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2FmOGJiMzQtM2RhYS0z YjgwLTgwNDctYjRhNWQ3MTFhMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNR1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKRMxuh1qkU/wr8/vzHX/cZcJGROqtif6/E+jPQ4xRsPv6YDytjYAie gV4PBRopgP4YaCaUr084rnYASxDGBGD8f2M5jYxg9IqHFvXzV0R0NaYNgWkBBGo0 4awVix+ZTn53/+ipd5EwwYLNo2HuB40IH4FTPp5PN5KCtf8HKWt02sv9WSLSMfyS 6Fg+nCUjKsgdlRxVQWI4W/6eOiuLDJtga64zhHzroTnW2kGIybs3f4Rz1jOTyY1b sSwwlna0o3ffb68ICLKAYQ/mAdfw8OKBjoWYxA45Wy+az8SL1zg68WCiL26wuTPC enUUgzDia8Awbad/kEGW0MjEFrQ2AcQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:56 2025 by rpki-client