$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfbd8e68-d6f4-3875-a8f8-042ec7da6471.roa File: cfbd8e68-d6f4-3875-a8f8-042ec7da6471.roa (raw, json) Hash identifier: F0acbQ5Zh8kOH9y0aCeHP+pqsGc284ksMY9FGmBOStw= Subject key identifier: F9:E3:D1:C8:9D:38:79:5D:7C:B2:8C:1B:DC:FA:51:D3:C7:A5:0F:4E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206737763D1011CA75997520 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfbd8e68-d6f4-3875-a8f8-042ec7da6471.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 174.72.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:37:76:3d:10:11:ca:75:99:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=b502613b-b67a-498d-9ed2-05ef94cc51ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:b4:87:fe:94:ae:3d:74:61:8d:4a:b3:30: e4:de:b7:fd:8a:3d:4f:51:68:0b:11:ee:e0:0f:55: 4b:d9:60:5b:1d:c2:cb:20:01:37:03:c4:46:97:c7: 64:4b:59:cb:c6:60:10:6c:fd:4f:9b:ca:d7:e4:dc: 9a:36:24:c9:64:df:b9:53:38:af:79:19:ff:93:e3: b9:d0:e7:ee:93:65:1f:ed:1d:9c:97:1e:6d:c1:ee: ff:c9:45:fe:9b:07:99:ba:4f:88:9e:f9:98:d2:b8: 6b:67:27:6d:06:d4:3c:86:e3:c6:1e:e9:d4:1f:61: 30:cf:8f:3c:55:fa:05:80:ab:fa:16:38:0d:f7:7b: dc:73:4f:7d:e2:b8:31:97:46:93:9a:24:1c:e1:e5: b9:0a:63:66:56:e1:92:52:62:1e:fc:3d:86:34:9b: 66:75:b5:4f:d5:db:6b:f8:1d:27:9a:30:af:f2:9e: 53:71:94:cd:97:91:a3:9c:14:98:ab:b2:37:15:e0: 55:3c:e6:49:b2:cb:e7:8f:91:fd:4a:65:cd:b6:09: 4c:76:af:8f:fb:e0:62:02:a6:18:12:08:d2:b9:db: 82:4f:ab:72:06:1b:d5:f6:83:8e:2b:2e:b3:7b:24: 95:f6:04:c7:c7:10:83:78:a5:82:12:fa:68:a4:1f: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E3:D1:C8:9D:38:79:5D:7C:B2:8C:1B:DC:FA:51:D3:C7:A5:0F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfbd8e68-d6f4-3875-a8f8-042ec7da6471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ed:42:6c:97:ed:12:87:4d:46:89:e3:58:96:f2:de:2e:73: 28:46:e3:c9:32:ea:71:f0:0c:a3:ea:5e:a5:a0:ef:15:d5:5b: e2:ec:a3:42:b8:6f:86:73:f9:6f:96:d7:cf:d6:59:76:14:62: 12:f4:a0:e4:85:67:b2:6a:25:82:fa:9f:bb:43:a5:bc:3c:fe: 7c:a6:64:12:1c:fa:11:66:d2:61:ef:f5:e8:6e:ea:dc:3f:c2: 04:d2:0a:cf:b8:dd:57:a5:81:f4:53:ea:da:06:4a:1c:d4:b6: fd:ba:e0:b3:f4:d2:e5:4c:b7:b4:58:e9:44:6e:b6:43:45:e5: a7:2d:fb:65:2d:8d:03:63:e7:22:32:2f:1f:e7:9a:2e:d1:a5: fa:3c:e2:c8:20:61:49:68:9f:cf:3d:94:46:fd:66:8b:62:8c: 60:f1:13:1b:a8:76:d6:cb:01:0b:e3:7d:9e:98:35:75:af:46: a9:3c:6b:89:c4:b7:8b:4b:a7:39:70:df:b6:53:cb:6a:57:dc: 00:b4:0f:35:af:ce:f2:24:89:9d:e0:bf:7b:13:a4:7e:e6:72: 9d:09:5c:d9:69:e7:1e:08:d5:4d:35:4c:05:9b:cf:3e:e0:40: 77:58:1a:cc:20:b5:b3:e8:66:29:a6:2d:77:28:e8:5e:ba:95: 16:04:ad:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzd2PRARynWZdSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjUwMjYxM2ItYjY3YS00OThkLTllZDItMDVlZjk0Y2M1MWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz20h/6Urj10YY1KszDk3rf9ij1PUWgLEe7g D1VL2WBbHcLLIAE3A8RGl8dkS1nLxmAQbP1Pm8rX5NyaNiTJZN+5UziveRn/k+O5 0Ofuk2Uf7R2clx5twe7/yUX+mweZuk+InvmY0rhrZydtBtQ8huPGHunUH2Ewz488 VfoFgKv6FjgN93vcc0994rgxl0aTmiQc4eW5CmNmVuGSUmIe/D2GNJtmdbVP1dtr +B0nmjCv8p5TcZTNl5GjnBSYq7I3FeBVPOZJssvnj5H9SmXNtglMdq+P++BiAqYY EgjSuduCT6tyBhvV9oOOKy6zeySV9gTHxxCDeKWCEvpopB9BYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnj0cidOHldfLKMG9z6UdPHpQ9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ZiZDhlNjgtZDZmNC0z ODc1LWE4ZjgtMDQyZWM3ZGE2NDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrki8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHztQmyX7RKHTUaJ41iW8t4ucyhG48ky6nHwDKPqXqWg7xXVW+Lso0K4 b4Zz+W+W18/WWXYUYhL0oOSFZ7JqJYL6n7tDpbw8/nymZBIc+hFm0mHv9ehu6tw/ wgTSCs+43VelgfRT6toGShzUtv264LP00uVMt7RY6URutkNF5act+2UtjQNj5yIy Lx/nmi7Rpfo84sggYUlon889lEb9ZotijGDxExuodtbLAQvjfZ6YNXWvRqk8a4nE t4tLpzlw37ZTy2pX3AC0DzWvzvIkiZ3gv3sTpH7mcp0JXNlp5x4I1U01TAWbzz7g QHdYGswgtbPoZimmLXco6F66lRYErV8= -----END CERTIFICATE-----Generated at Thu Oct 16 01:34:40 2025 by rpki-client