$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fac83408-b313-35a8-ac33-35669b7b7169.roa File: fac83408-b313-35a8-ac33-35669b7b7169.roa (raw, json) Hash identifier: hFm0yPBEo9ZwqVIB7sPE2YOXNuXXXjFnOOK4rSEB00k= Subject key identifier: D9:9D:0B:16:FC:97:4F:2F:6A:50:B8:5A:DB:6E:AA:67:1C:01:98:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A5AB8E25243E7DAE1E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fac83408-b313-35a8-ac33-35669b7b7169.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.206.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a5:ab:8e:25:24:3e:7d:ae:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=4d8efbc8-7cea-41e0-88ef-be833fdc1073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e7:b0:d0:73:f7:67:cf:24:e9:de:f0:8e:1b: 28:e9:7f:e3:95:cb:28:55:08:96:40:82:33:bb:8a: a2:c0:d6:e6:70:3b:53:0c:a4:e0:4a:90:39:b9:0f: 20:2b:08:f3:ae:99:0b:64:44:13:20:d3:3e:8b:c5: 5b:6d:a8:e9:0e:a1:85:64:da:ee:e3:f1:92:f8:c7: 30:ba:20:47:36:e1:29:ad:1a:9e:25:c5:76:32:fc: e2:e9:c8:63:9b:1b:55:48:5d:57:97:fe:29:2c:7a: 14:ed:27:d9:74:d4:32:bf:da:33:45:22:53:7c:45: 94:8f:89:48:88:74:53:d3:75:d8:c5:59:8b:0d:48: dc:25:20:b3:45:65:2b:f1:4d:25:d8:3e:a4:1a:3c: 58:e5:be:02:f7:4f:55:09:1b:61:05:37:ae:90:ee: 3a:71:6e:46:93:fa:73:93:24:4f:6c:13:8c:c4:de: d8:a0:91:cb:0e:d1:ba:a1:27:d9:64:6a:00:cd:08: 4f:da:6a:07:8a:44:78:cd:6e:2e:04:23:02:0a:95: aa:f6:d7:49:33:84:64:4d:0f:4d:a3:ee:8e:3a:a3: b5:55:8a:a8:33:ab:ab:ed:79:2b:e1:09:64:de:db: 57:ac:5e:c2:4d:d4:3d:bd:44:7c:96:ff:b1:40:b9: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9D:0B:16:FC:97:4F:2F:6A:50:B8:5A:DB:6E:AA:67:1C:01:98:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fac83408-b313-35a8-ac33-35669b7b7169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:4c:b2:c1:a5:48:1e:a8:0d:5c:8b:89:41:64:57:57:05:f8: 20:21:aa:7f:ed:1d:67:eb:b4:98:39:1e:4f:04:fb:aa:2a:0a: af:6e:ac:21:46:37:1e:ba:78:88:1a:92:2f:b0:ac:24:65:89: 5a:4c:04:b3:f7:5a:a2:8f:a9:bf:3b:4d:c2:ff:32:fc:b4:41: 89:83:4d:7d:22:87:f5:9e:65:c6:e2:50:6d:a1:70:30:13:5a: 49:81:d1:ae:3c:0a:3f:92:32:28:db:5b:99:1e:ae:65:2b:b4: fb:55:a0:6a:15:9d:fc:32:fe:63:d4:7e:3e:7c:d4:0e:37:6c: 0a:4c:00:ae:50:2f:15:10:41:91:30:d9:75:bd:47:d8:d8:dc: 1f:21:76:cc:7d:c0:3b:6d:d7:d4:25:42:96:2d:ea:a9:4d:15: a2:d7:e7:5e:48:20:51:41:48:a5:e8:21:83:78:64:3c:c3:b8: b8:c8:51:05:62:53:ae:17:b4:b1:31:21:68:28:59:8f:2a:2e: 04:9d:cc:c8:26:79:60:8e:e6:19:a6:4b:c4:44:2e:f2:16:a1: c7:d5:0e:9b:31:ac:8f:de:b5:58:ab:c3:2f:f8:22:6f:b2:ba: 80:0f:35:73:6e:97:03:55:85:48:aa:7d:06:cf:83:03:d0:dd: 1b:cd:04:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaWrjiUkPn2uHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NGQ4ZWZiYzgtN2NlYS00MWUwLTg4ZWYtYmU4MzNmZGMxMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOew0HP3Z88k6d7wjhso6X/jlcsoVQiWQIIz u4qiwNbmcDtTDKTgSpA5uQ8gKwjzrpkLZEQTINM+i8VbbajpDqGFZNru4/GS+Mcw uiBHNuEprRqeJcV2Mvzi6chjmxtVSF1Xl/4pLHoU7SfZdNQyv9ozRSJTfEWUj4lI iHRT03XYxVmLDUjcJSCzRWUr8U0l2D6kGjxY5b4C909VCRthBTeukO46cW5Gk/pz kyRPbBOMxN7YoJHLDtG6oSfZZGoAzQhP2moHikR4zW4uBCMCCpWq9tdJM4RkTQ9N o+6OOqO1VYqoM6ur7Xkr4Qlk3ttXrF7CTdQ9vUR8lv+xQLmJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmdCxb8l08valC4WttuqmccAZhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmFjODM0MDgtYjMxMy0z NWE4LWFjMzMtMzU2NjliN2I3MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdMssGlSB6oDVyLiUFkV1cF+CAhqn/tHWfrtJg5Hk8E+6oqCq9urCFG Nx66eIgaki+wrCRliVpMBLP3WqKPqb87TcL/Mvy0QYmDTX0ih/WeZcbiUG2hcDAT WkmB0a48Cj+SMijbW5kermUrtPtVoGoVnfwy/mPUfj581A43bApMAK5QLxUQQZEw 2XW9R9jY3B8hdsx9wDtt19QlQpYt6qlNFaLX515IIFFBSKXoIYN4ZDzDuLjIUQVi U64XtLExIWgoWY8qLgSdzMgmeWCO5hmmS8RELvIWocfVDpsxrI/etVirwy/4Im+y uoAPNXNulwNVhUiqfQbPgwPQ3RvNBGk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:26 2025 by rpki-client