$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67c3b067-9a81-3572-a4be-92e7062402ae.roa File: 67c3b067-9a81-3572-a4be-92e7062402ae.roa (raw, json) Hash identifier: BPlIMlQgYHRw6G87gaJZnyBvVJLA30c1uaRQrmI9gBo= Subject key identifier: 05:03:E2:A7:59:9A:B4:1C:87:63:E7:56:E0:BF:7B:4D:03:56:D5:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625DDBD864F990417532C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67c3b067-9a81-3572-a4be-92e7062402ae.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 72.196.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5d:db:d8:64:f9:90:41:75:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=f97f8074-d970-4b23-ac91-372c79750d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a3:dc:14:c2:50:c2:45:b1:7a:c7:fe:86:ae: f5:02:61:a5:1b:4e:46:80:ce:b3:c0:d9:e0:7a:46: db:0a:37:6a:99:15:1c:66:c0:c8:bd:24:3b:72:63: da:f4:c9:44:a2:08:0b:4b:f5:e1:72:11:11:54:d3: 37:bf:f1:67:b8:64:ec:db:bf:f9:64:76:b4:9e:fc: b1:7f:ae:9e:f6:74:84:7b:70:5b:1e:9d:07:a8:6a: 32:73:b5:53:fb:fc:3f:1a:d1:24:00:c6:a1:de:b3: e8:14:b7:b2:38:30:ee:f1:02:f2:bf:3e:c8:7d:38: 10:08:77:f9:60:80:6c:2f:82:ed:96:fc:eb:04:21: 37:60:84:36:9c:fd:a9:92:81:e6:72:1f:a7:5d:e2: 5c:97:81:16:80:f2:a8:73:9e:bc:48:9b:35:a9:39: b4:6f:36:8c:da:1f:b8:a5:74:64:d7:bf:8d:4e:da: 36:e4:45:d2:fd:22:fc:e8:a4:55:e5:b9:8e:5f:58: 29:11:67:7a:fd:a7:37:17:19:da:8f:34:e0:d7:bb: 48:f1:9f:17:55:b2:25:3a:55:fa:d9:e3:be:cf:ed: 14:22:10:79:2f:b3:94:b3:31:9c:99:5d:15:42:da: 28:bc:f2:80:94:fa:42:95:c3:6e:16:1d:58:a3:a4: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:03:E2:A7:59:9A:B4:1C:87:63:E7:56:E0:BF:7B:4D:03:56:D5:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67c3b067-9a81-3572-a4be-92e7062402ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.196.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ac:b2:e9:e6:26:a5:f1:00:64:67:c1:f8:06:54:be:2d:18: 3c:39:46:1a:44:ab:a5:88:70:ca:36:fe:66:35:d1:92:46:c5: d7:68:e1:bb:cf:41:d4:20:97:76:15:4c:a0:0d:d0:53:46:a2: 26:83:52:c4:d6:b2:6d:79:ed:92:4b:09:78:5c:86:ab:f4:3e: 2c:bb:96:64:33:27:60:67:7e:b2:58:6d:46:33:d8:22:ea:de: e2:1c:7f:94:a9:6b:b8:5e:64:61:4b:fe:0e:83:ae:25:94:66: f0:01:ad:60:fc:dc:15:02:e6:c9:45:3d:d3:0a:52:01:4b:97: 00:64:05:8f:df:ec:15:68:17:57:66:40:6b:33:d4:8a:93:8c: 38:2e:4e:c8:0c:10:24:a7:67:1e:bd:f3:f3:75:37:bc:df:d6: b7:1c:4e:01:bd:f1:b9:95:e3:4c:31:80:6a:47:f4:f4:4e:bc: be:94:65:35:b8:a5:08:4a:90:01:67:b6:9b:bb:6e:f3:82:b3: 54:dd:18:f1:8d:5c:9e:f9:c5:23:45:84:3d:99:bf:89:4f:3b: 23:61:10:cb:d2:11:ef:fd:a6:9e:4e:42:e4:98:a0:62:10:18: f8:0a:4b:8e:68:90:7d:3d:f2:ea:89:3e:ca:80:91:26:b4:c3: 67:98:dd:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYl3b2GT5kEF1MsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk Zjk3ZjgwNzQtZDk3MC00YjIzLWFjOTEtMzcyYzc5NzUwZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6PcFMJQwkWxesf+hq71AmGlG05GgM6zwNng ekbbCjdqmRUcZsDIvSQ7cmPa9MlEoggLS/XhchERVNM3v/FnuGTs27/5ZHa0nvyx f66e9nSEe3BbHp0HqGoyc7VT+/w/GtEkAMah3rPoFLeyODDu8QLyvz7IfTgQCHf5 YIBsL4LtlvzrBCE3YIQ2nP2pkoHmch+nXeJcl4EWgPKoc568SJs1qTm0bzaM2h+4 pXRk17+NTto25EXS/SL86KRV5bmOX1gpEWd6/ac3FxnajzTg17tI8Z8XVbIlOlX6 2eO+z+0UIhB5L7OUszGcmV0VQtoovPKAlPpClcNuFh1Yo6TDBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUD4qdZmrQch2PnVuC/e00DVtXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjdjM2IwNjctOWE4MS0z NTcyLWE0YmUtOTJlNzA2MjQwMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMR+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+ssunmJqXxAGRnwfgGVL4tGDw5RhpEq6WIcMo2/mY10ZJGxddo4bvP QdQgl3YVTKAN0FNGoiaDUsTWsm157ZJLCXhchqv0Piy7lmQzJ2BnfrJYbUYz2CLq 3uIcf5Spa7heZGFL/g6DriWUZvABrWD83BUC5slFPdMKUgFLlwBkBY/f7BVoF1dm QGsz1IqTjDguTsgMECSnZx698/N1N7zf1rccTgG98bmV40wxgGpH9PROvL6UZTW4 pQhKkAFntpu7bvOCs1TdGPGNXJ75xSNFhD2Zv4lPOyNhEMvSEe/9pp5OQuSYoGIQ GPgKS45okH098uqJPsqAkSa0w2eY3do= -----END CERTIFICATE-----Generated at Tue Nov 4 16:32:53 2025 by rpki-client