$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df96130a-2961-3138-962d-0311d6972968.roa File: df96130a-2961-3138-962d-0311d6972968.roa (raw, json) Hash identifier: 2U5MqgoCmfqAyj/mL0IkUsKQ4ncvUknJZb0lD2zJ78Q= Subject key identifier: 77:CF:EA:98:2D:98:79:27:60:E9:DC:CD:6E:CB:B9:66:04:4F:67:B2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20671FF01158436E5DBD3E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df96130a-2961-3138-962d-0311d6972968.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.193.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:1f:f0:11:58:43:6e:5d:bd:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=b01980c1-0455-4952-a99d-f72826a792de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:12:5e:84:c1:9c:22:06:b8:c6:4b:08:9f:10: 4d:f0:a5:5e:59:d3:f1:62:a3:6f:75:e4:54:6a:b0: 76:30:15:cf:4f:7d:68:12:90:79:22:7e:32:63:a9: d5:d9:69:a1:03:96:23:e6:f2:b4:2f:1d:ed:c1:16: e3:eb:10:c4:82:4a:f6:37:da:c1:55:8a:7f:4e:ab: a3:14:99:84:4f:38:79:e7:26:8c:31:92:78:64:c7: 8f:45:2a:a9:ab:10:81:c4:31:ce:33:23:20:92:11: 18:c0:80:14:39:58:7c:18:f2:d7:3d:91:28:69:04: cd:7b:1b:41:32:32:16:7e:83:11:88:9f:93:68:a2: 52:75:33:f5:ec:b7:5b:8f:47:77:db:7f:b4:af:d1: 06:42:b6:ef:66:3d:41:62:37:2d:c9:b8:c8:0f:36: 24:08:37:de:bd:2e:e4:e2:f1:a4:f9:00:fc:b5:bf: 84:62:4a:72:a0:36:23:35:eb:cf:87:09:81:62:43: 3f:98:59:4d:0b:a0:13:dc:77:a3:a4:85:6c:ab:8f: 37:db:11:43:50:75:67:12:69:c3:c1:c5:31:8c:b7: cc:59:fd:ab:d6:69:85:c3:e8:c7:a6:9b:61:3b:97: e2:7d:19:df:2a:7c:91:ec:13:40:76:b7:ad:9a:9b: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CF:EA:98:2D:98:79:27:60:E9:DC:CD:6E:CB:B9:66:04:4F:67:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df96130a-2961-3138-962d-0311d6972968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:69:44:95:72:ee:06:f4:ee:b2:90:0a:74:65:30:8e:be:51: e6:fd:13:71:df:50:0c:c8:a8:07:69:7d:c4:13:9a:d8:ba:56: fe:c4:b2:a2:85:d1:fc:a9:c8:d8:1a:49:9a:80:b4:d3:ad:7f: a5:9e:bc:c6:4f:8a:95:f3:b0:61:c2:0e:f2:34:f5:d8:a7:2e: 38:3a:2b:cd:a7:d2:81:17:23:f5:39:0e:f3:79:3d:cc:2f:8f: ef:0a:96:8b:f6:6a:37:72:d5:46:33:09:b5:04:c7:d4:f5:9d: 0b:77:0d:f6:c4:7f:47:72:88:cc:e9:69:d8:af:76:9f:cb:2d: 8d:ec:73:c6:77:d8:18:13:e3:64:20:8c:62:d6:f3:f7:58:03: aa:3e:0f:2a:fa:9e:67:00:5b:4f:19:77:fc:41:e7:22:62:5a: f9:39:82:95:81:7c:37:5c:a1:0a:d0:fe:3e:e7:56:d6:ae:f5: a6:a3:da:13:93:1c:0b:83:c2:2b:6a:6c:d2:82:3b:f2:68:01: 6d:de:a6:72:06:b2:37:d1:a2:41:2f:f9:91:07:87:f5:17:ca: 3f:57:3a:88:8a:87:87:77:d5:13:62:a0:85:b3:38:77:22:8b: 60:6a:60:65:2b:82:c6:9f:7c:1f:52:9c:2a:96:26:b0:92:0f: b5:33:7a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZx/wEVhDbl29PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjAxOTgwYzEtMDQ1NS00OTUyLWE5OWQtZjcyODI2YTc5MmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihJehMGcIga4xksInxBN8KVeWdPxYqNvdeRU arB2MBXPT31oEpB5In4yY6nV2WmhA5Yj5vK0Lx3twRbj6xDEgkr2N9rBVYp/Tquj FJmETzh55yaMMZJ4ZMePRSqpqxCBxDHOMyMgkhEYwIAUOVh8GPLXPZEoaQTNextB MjIWfoMRiJ+TaKJSdTP17Ldbj0d323+0r9EGQrbvZj1BYjctybjIDzYkCDfevS7k 4vGk+QD8tb+EYkpyoDYjNevPhwmBYkM/mFlNC6AT3HejpIVsq4832xFDUHVnEmnD wcUxjLfMWf2r1mmFw+jHppthO5fifRnfKnyR7BNAdretmptdBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfP6pgtmHknYOnczW7LuWYET2eyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGY5NjEzMGEtMjk2MS0z MTM4LTk2MmQtMDMxMWQ2OTcyOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhpRJVy7gb07rKQCnRlMI6+Ueb9E3HfUAzIqAdpfcQTmti6Vv7EsqKF 0fypyNgaSZqAtNOtf6WevMZPipXzsGHCDvI09dinLjg6K82n0oEXI/U5DvN5Pcwv j+8Klov2ajdy1UYzCbUEx9T1nQt3DfbEf0dyiMzpadivdp/LLY3sc8Z32BgT42Qg jGLW8/dYA6o+Dyr6nmcAW08Zd/xB5yJiWvk5gpWBfDdcoQrQ/j7nVtau9aaj2hOT HAuDwitqbNKCO/JoAW3epnIGsjfRokEv+ZEHh/UXyj9XOoiKh4d31RNioIWzOHci i2BqYGUrgsaffB9SnCqWJrCSD7Uzegs= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:07 2025 by rpki-client