$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88cb9afe-96f0-3b4a-a632-17acfc8a8736.roa File: 88cb9afe-96f0-3b4a-a632-17acfc8a8736.roa (raw, json) Hash identifier: 5ugxswm+aVbTytXBueMLBF1BmzKjbpYjMPq5r/3WsT8= Subject key identifier: B8:A6:9D:DA:D0:DC:FE:A6:E6:CA:60:4F:DF:59:94:A9:D0:0B:B3:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23A5BA8D341108A5D3F40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88cb9afe-96f0-3b4a-a632-17acfc8a8736.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.218.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:3a:5b:a8:d3:41:10:8a:5d:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1bdd2ddd-6b88-4268-8a98-5ef276242e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:30:03:74:83:f9:5d:5f:fa:59:6d:57:3a: c7:64:9c:43:8c:88:39:e6:0c:b9:d0:4b:d1:b7:49: 53:48:c8:1c:9e:87:ad:fa:ee:30:ff:14:94:df:6e: 97:35:1c:8b:f1:e5:1f:81:68:e0:c5:3a:66:55:b3: 68:b1:5d:9a:ac:5f:10:9d:27:98:8e:7c:db:58:30: ac:a0:9b:7b:fb:77:05:55:5c:3d:da:1e:89:5b:01: e6:97:ed:c9:ee:a4:8e:62:57:f4:21:a3:ad:48:87: d1:ea:1e:5b:be:94:f1:3d:f6:39:c1:ac:82:c6:ea: 01:d0:4d:9a:26:24:ad:09:17:3a:6e:60:eb:f1:4a: f3:07:79:bc:46:86:4d:6b:2d:6f:c9:6a:bf:85:47: 85:77:5c:77:7e:1d:aa:9f:ee:27:9c:e6:ed:25:9e: 5e:6e:92:32:45:d3:b2:0a:c4:37:d1:22:0c:c6:e1: 20:bb:1a:5f:5f:4f:fe:5e:1c:41:4b:8b:75:88:56: cf:b3:bd:35:bf:84:fe:e6:ac:74:ba:88:ff:c6:7b: db:7c:9c:30:82:67:6e:9a:e7:0e:43:ba:ea:4f:bd: 94:51:4e:30:f8:37:d2:0f:10:da:d8:5c:a3:3d:83: 12:a6:30:bb:d8:33:a9:88:a3:87:2b:c3:25:37:af: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A6:9D:DA:D0:DC:FE:A6:E6:CA:60:4F:DF:59:94:A9:D0:0B:B3:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88cb9afe-96f0-3b4a-a632-17acfc8a8736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5c:ec:b3:c6:49:49:20:ab:c5:77:74:b1:4f:47:4c:19:e7: 87:4f:ca:19:3c:ed:32:e6:09:d9:a8:07:9c:6f:ee:97:1a:36: b3:e0:a2:ba:97:5c:27:d0:79:7a:bf:a7:34:2d:a3:be:a9:94: bd:5c:ac:46:7b:f6:d4:7f:1f:00:fc:d4:90:fe:ea:ec:8a:83: b2:24:62:b2:22:3d:20:53:78:ee:99:91:82:85:bb:b2:47:5e: 04:3f:de:bc:7f:47:8a:af:8a:39:c3:4f:00:4e:50:43:b0:19: 63:90:db:3f:0f:1a:ea:36:ad:1b:d7:92:99:44:32:87:d7:44: f0:69:fc:f7:7d:d6:fd:a0:12:64:2b:a7:49:2e:9e:d8:31:54: 40:f7:b7:40:54:fd:bd:71:1f:2f:d7:a6:6a:c4:8a:5c:a4:11: 96:90:82:79:f6:cf:4c:6e:bf:4c:7e:ea:54:c9:10:10:5e:e5: 5f:a7:b0:9c:e0:b5:12:7f:9f:a9:93:79:8a:45:7b:b2:97:de: 6f:ef:4f:e6:0f:65:b8:53:73:b1:52:e5:af:d9:24:02:46:07: 5d:27:8c:e3:48:8a:9b:89:24:86:34:9c:5b:53:2f:18:15:6f: 78:2a:7c:8d:59:ee:13:8f:d7:28:90:e9:2a:a0:54:36:96:b9: 0f:23:4d:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jpbqNNBEIpdP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MWJkZDJkZGQtNmI4OC00MjY4LThhOTgtNWVmMjc2MjQyZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTEwA3SD+V1f+lltVzrHZJxDjIg55gy50EvR t0lTSMgcnoet+u4w/xSU326XNRyL8eUfgWjgxTpmVbNosV2arF8QnSeYjnzbWDCs oJt7+3cFVVw92h6JWwHml+3J7qSOYlf0IaOtSIfR6h5bvpTxPfY5wayCxuoB0E2a JiStCRc6bmDr8UrzB3m8RoZNay1vyWq/hUeFd1x3fh2qn+4nnObtJZ5ebpIyRdOy CsQ30SIMxuEguxpfX0/+XhxBS4t1iFbPs701v4T+5qx0uoj/xnvbfJwwgmdumucO Q7rqT72UUU4w+DfSDxDa2FyjPYMSpjC72DOpiKOHK8MlN6/fNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLimndrQ3P6m5spgT99ZlKnQC7PvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODhjYjlhZmUtOTZmMC0z YjRhLWE2MzItMTdhY2ZjOGE4NzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVc7LPGSUkgq8V3dLFPR0wZ54dPyhk87TLmCdmoB5xv7pcaNrPgorqX XCfQeXq/pzQto76plL1crEZ79tR/HwD81JD+6uyKg7IkYrIiPSBTeO6ZkYKFu7JH XgQ/3rx/R4qvijnDTwBOUEOwGWOQ2z8PGuo2rRvXkplEMofXRPBp/Pd91v2gEmQr p0kuntgxVED3t0BU/b1xHy/XpmrEilykEZaQgnn2z0xuv0x+6lTJEBBe5V+nsJzg tRJ/n6mTeYpFe7KX3m/vT+YPZbhTc7FS5a/ZJAJGB10njONIipuJJIY0nFtTLxgV b3gqfI1Z7hOP1yiQ6SqgVDaWuQ8jTfE= -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:25 2025 by rpki-client