$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cca82c43-4016-31c0-a33d-ba29eac16538.roa File: cca82c43-4016-31c0-a33d-ba29eac16538.roa (raw, json) Hash identifier: oIWOJglYmGeoYlBgv7z2DhrCS2oC1bvBUy++51tqSWk= Subject key identifier: 66:36:15:38:73:B1:30:88:F5:6C:CC:E8:6D:CD:64:C5:23:DE:92:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B345FFD18F3EE4A08A40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cca82c43-4016-31c0-a33d-ba29eac16538.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b3:45:ff:d1:8f:3e:e4:a0:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=8df60cce-d44f-49db-a9ac-9810b2f2c271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:37:46:dd:24:fe:6c:9c:46:7a:44:02:5f: 5f:70:d3:7a:9b:2e:54:fb:eb:fb:5b:74:7b:e9:67: eb:57:7f:4c:04:11:81:f9:ec:82:97:12:4e:5c:f7: f7:91:d2:01:12:8c:e9:9b:57:d8:80:a4:bb:de:d4: 2c:49:62:e1:5e:fe:47:eb:f8:76:fc:3f:4d:6b:29: d6:27:41:b9:a2:c3:8b:ec:63:72:82:2c:75:c0:1f: 63:63:07:6b:fa:bc:cd:02:c3:04:d6:33:4a:c7:5f: 68:f4:d0:6c:18:80:68:1a:b1:37:69:d8:77:8a:5b: 25:69:1c:d5:80:27:5b:90:b3:ca:f0:29:17:71:2a: b0:a1:7c:65:4c:37:05:a5:79:8e:93:a9:1f:e8:52: bf:b4:51:f9:ba:3a:96:00:8f:fc:6e:d4:81:60:ac: db:6b:60:90:7b:5b:c7:d4:30:ff:cc:27:60:b2:ac: 92:82:4f:98:d9:e0:7c:16:1d:3d:64:b4:26:a3:83: 2a:5d:2f:22:d7:ad:7d:e9:72:e4:d8:cb:48:ad:39: 2c:7d:90:4f:70:e9:22:d8:3d:ad:d3:3b:ee:3c:ae: 1a:06:8a:db:e9:50:51:3f:f2:b0:74:1e:32:a0:c7: 6e:1e:1e:74:ea:a8:12:db:18:f6:fe:ee:e4:8e:dd: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:15:38:73:B1:30:88:F5:6C:CC:E8:6D:CD:64:C5:23:DE:92:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cca82c43-4016-31c0-a33d-ba29eac16538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f1:a9:12:db:b1:b3:c9:43:be:bd:ac:91:ae:18:35:ca:0c: 1b:53:cf:2d:c3:82:63:ec:7f:db:8d:a6:32:9b:d8:ec:3f:29: 43:37:c7:a3:87:1a:5d:00:f4:c7:c6:94:84:8d:f6:68:00:d1: b0:d9:52:ff:27:7b:fa:cf:9a:a1:80:cf:78:17:51:85:8b:fe: 19:b9:0a:af:e6:81:9b:0c:61:8c:bc:65:06:b8:3c:9c:2e:2f: 03:db:5f:a2:38:03:25:e4:a1:c2:b7:93:b6:8b:5b:c8:8b:d7: 17:4d:15:32:c5:ad:26:9c:4e:17:0a:29:3d:a0:1d:b6:a4:79: 64:19:b9:a3:ac:af:0b:a0:8b:8e:14:bf:97:5d:bf:4d:49:35: e3:d6:9e:90:35:fd:0e:00:0d:9a:79:6b:ae:3b:fd:ec:42:f9: a8:6b:35:21:f8:7e:9b:00:79:05:4e:6e:bb:7f:46:35:98:d5: ae:ef:58:d0:c1:ed:5c:9f:2f:ad:14:35:50:83:17:4c:fb:92: 27:fd:06:10:99:1e:cb:c9:5c:7c:ab:59:d4:23:3a:63:5f:41: 6c:56:46:c5:ab:dd:6f:fa:ec:a1:61:f6:15:df:5c:47:7f:63: f0:79:bd:83:a4:3d:cb:ed:ba:c2:dd:da:f7:6c:9e:79:7b:e2: f0:94:5e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbNF/9GPPuSgikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OGRmNjBjY2UtZDQ0Zi00OWRiLWE5YWMtOTgxMGIyZjJjMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeI3Rt0k/mycRnpEAl9fcNN6my5U++v7W3R7 6WfrV39MBBGB+eyClxJOXPf3kdIBEozpm1fYgKS73tQsSWLhXv5H6/h2/D9NaynW J0G5osOL7GNygix1wB9jYwdr+rzNAsME1jNKx19o9NBsGIBoGrE3adh3ilslaRzV gCdbkLPK8CkXcSqwoXxlTDcFpXmOk6kf6FK/tFH5ujqWAI/8btSBYKzba2CQe1vH 1DD/zCdgsqySgk+Y2eB8Fh09ZLQmo4MqXS8i16196XLk2MtIrTksfZBPcOki2D2t 0zvuPK4aBorb6VBRP/KwdB4yoMduHh506qgS2xj2/u7kjt1hEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY2FThzsTCI9WzM6G3NZMUj3pKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2NhODJjNDMtNDAxNi0z MWMwLWEzM2QtYmEyOWVhYzE2NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSND+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrxqRLbsbPJQ769rJGuGDXKDBtTzy3DgmPsf9uNpjKb2Ow/KUM3x6OH Gl0A9MfGlISN9mgA0bDZUv8ne/rPmqGAz3gXUYWL/hm5Cq/mgZsMYYy8ZQa4PJwu LwPbX6I4AyXkocK3k7aLW8iL1xdNFTLFrSacThcKKT2gHbakeWQZuaOsrwugi44U v5ddv01JNePWnpA1/Q4ADZp5a647/exC+ahrNSH4fpsAeQVObrt/RjWY1a7vWNDB 7VyfL60UNVCDF0z7kif9BhCZHsvJXHyrWdQjOmNfQWxWRsWr3W/67KFh9hXfXEd/ Y/B5vYOkPcvtusLd2vdsnnl74vCUXq8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:23 2025 by rpki-client