$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2a8a3fb-9d93-3491-bb86-8c036b8f403d.roa File: c2a8a3fb-9d93-3491-bb86-8c036b8f403d.roa (raw, json) Hash identifier: k1Pp5xJumI2RUfMDT+PbCQCu1WMpop7ZKiXE95+JqT0= Subject key identifier: 1C:73:67:D1:3A:3A:03:CE:58:C3:B5:61:0F:D4:A9:8D:B0:D9:83:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01B11D0C58286350C46EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2a8a3fb-9d93-3491-bb86-8c036b8f403d.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.208.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:b1:1d:0c:58:28:63:50:c4:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=aadab5b9-6a2a-4156-b177-6386fa0833a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:46:49:6a:1a:90:73:1f:56:b3:89:1f:1c: 9f:46:81:5f:08:a9:fb:ce:44:de:6b:f4:50:27:a0: 9f:70:49:b1:5f:ae:28:34:d9:e8:eb:8b:89:c3:f3: 4a:72:52:ab:09:ea:60:b7:2f:7b:d1:00:69:ee:c7: 58:14:2b:6e:91:f1:f7:24:76:25:bd:d1:a0:66:1d: 24:ea:33:74:9a:f7:92:28:58:e5:7f:19:ef:34:38: 80:14:d7:1d:9a:f4:17:8c:d0:2a:08:8e:84:cf:ba: a7:f3:43:03:08:80:b5:e2:6e:e5:dc:68:d7:35:85: 7d:cf:db:a5:be:2f:ba:f9:52:ad:42:02:c5:18:e9: 1d:47:7e:50:af:e2:f3:44:3f:bc:fc:85:06:61:ad: d5:93:44:af:95:61:88:b2:f6:5c:03:05:e3:43:5e: fb:0e:24:35:7c:09:7b:ac:07:82:a8:e5:ee:de:13: 1d:fe:a4:6b:91:c7:5e:71:d7:73:62:ae:a2:e2:7f: 9f:fb:95:a2:c6:d4:d3:97:ea:fa:ed:11:47:09:7c: 67:c2:7d:2a:9e:7b:fb:3b:f9:38:c5:c3:ba:dc:d7: 61:27:c6:0d:e7:af:f8:1f:c0:de:63:6d:37:8a:ba: 15:f3:73:53:fa:f3:a4:b5:7c:eb:f4:f4:a0:61:59: 17:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:73:67:D1:3A:3A:03:CE:58:C3:B5:61:0F:D4:A9:8D:B0:D9:83:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2a8a3fb-9d93-3491-bb86-8c036b8f403d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:70:d2:a7:82:0f:46:04:d3:9b:92:e4:af:f1:54:6f:ce:75: 13:8b:4e:48:0e:64:d8:cd:05:f5:f4:68:5a:ec:9f:8d:8f:1f: 99:f4:97:c9:3b:8f:ca:7f:c2:3a:e9:88:66:b5:af:fd:e8:8c: 64:f5:dd:c5:5d:fe:11:86:3c:69:51:43:b3:1a:07:fb:2f:b7: 76:e3:81:d3:3e:1e:d8:77:bc:3e:9f:d5:6b:10:85:3d:b6:27: 16:f1:68:cb:26:07:69:7f:e7:9e:0b:72:4e:bc:ae:73:b9:a0: 24:11:b3:c3:c4:3f:bb:9b:df:c9:b4:14:56:f3:ad:6a:4a:6e: b2:88:1b:ff:3a:bb:67:9f:cd:49:59:71:75:ff:5e:3d:d3:81: fc:41:3a:79:65:f8:05:19:da:ed:ec:75:68:35:e4:61:b7:d7: 0b:fb:fa:b5:38:32:31:4c:d8:0b:4e:58:a5:f8:96:7a:0c:e6: bd:60:0e:32:9c:e4:d3:35:9b:f0:83:27:32:b0:cc:00:44:ae: 46:c8:6e:45:b9:db:36:64:d7:4e:a2:b7:eb:ba:23:37:a9:cf: f9:a8:b3:54:b2:44:07:bf:9b:98:57:0c:72:29:91:14:6a:b5: 99:96:37:cb:a1:29:06:58:ad:fd:83:86:20:f8:ad:0c:d2:e0: 1d:d1:4e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAbEdDFgoY1DEbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWFkYWI1YjktNmEyYS00MTU2LWIxNzctNjM4NmZhMDgzM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC1GSWoakHMfVrOJHxyfRoFfCKn7zkTea/RQ J6CfcEmxX64oNNno64uJw/NKclKrCepgty970QBp7sdYFCtukfH3JHYlvdGgZh0k 6jN0mveSKFjlfxnvNDiAFNcdmvQXjNAqCI6Ez7qn80MDCIC14m7l3GjXNYV9z9ul vi+6+VKtQgLFGOkdR35Qr+LzRD+8/IUGYa3Vk0SvlWGIsvZcAwXjQ177DiQ1fAl7 rAeCqOXu3hMd/qRrkcdecddzYq6i4n+f+5WixtTTl+r67RFHCXxnwn0qnnv7O/k4 xcO63NdhJ8YN56/4H8DeY203iroV83NT+vOktXzr9PSgYVkXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxzZ9E6OgPOWMO1YQ/UqY2w2YNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzJhOGEzZmItOWQ5My0z NDkxLWJiODYtOGMwMzZiOGY0MDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdw0qeCD0YE05uS5K/xVG/OdROLTkgOZNjNBfX0aFrsn42PH5n0l8k7 j8p/wjrpiGa1r/3ojGT13cVd/hGGPGlRQ7MaB/svt3bjgdM+Hth3vD6f1WsQhT22 JxbxaMsmB2l/554Lck68rnO5oCQRs8PEP7ub38m0FFbzrWpKbrKIG/86u2efzUlZ cXX/Xj3TgfxBOnll+AUZ2u3sdWg15GG31wv7+rU4MjFM2AtOWKX4lnoM5r1gDjKc 5NM1m/CDJzKwzABErkbIbkW52zZk106it+u6Izepz/mos1SyRAe/m5hXDHIpkRRq tZmWN8uhKQZYrf2DhiD4rQzS4B3RTjg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:55 2025 by rpki-client