$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3b9bbf4-a62b-32b6-9f36-32cf8a95a89e.roa File: d3b9bbf4-a62b-32b6-9f36-32cf8a95a89e.roa (raw, json) Hash identifier: S4IMdRSF3vZh6QXhZ9WK7rLWlQRCf5+yPgjGRlsQo20= Subject key identifier: 1A:82:57:AC:28:B8:00:49:59:B0:D5:03:17:39:6C:0B:AD:45:8E:BA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2830DF6930D25B1CE6998 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3b9bbf4-a62b-32b6-9f36-32cf8a95a89e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.199.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:83:0d:f6:93:0d:25:b1:ce:69:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=483b411d-a842-44b4-8f92-b013447d3b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4a:fc:90:b3:8b:6d:0e:95:23:4d:50:8a:78: f4:70:5d:07:45:c8:f7:4c:60:0e:86:4b:91:4b:bb: 99:d0:fe:ee:50:ab:5a:38:90:a6:0d:a8:a5:75:e2: 07:c9:f2:91:25:94:fb:77:f3:76:af:2a:79:49:c2: ef:55:b4:b0:f3:29:37:a9:a2:a6:66:40:b1:19:f7: 22:8f:29:0d:82:a9:10:5f:61:eb:da:91:28:6d:f2: 9c:bc:36:93:75:13:cd:6e:1d:01:6f:3f:2d:b0:6e: 99:0e:b7:dd:da:4f:22:b5:dd:c1:e9:bc:dd:ef:36: 26:71:08:59:a3:07:1b:27:29:04:48:01:5f:f3:2c: e9:c3:76:9a:03:4e:c0:c7:c2:14:d9:90:5b:a7:4f: 73:05:e9:fb:76:88:86:a6:ec:d7:be:8c:ef:ec:c2: 1b:b4:18:98:9b:0d:e8:5d:bd:13:c4:a9:5f:27:07: 76:91:40:7f:a4:53:b1:72:db:da:af:2f:54:8f:e3: 44:11:a9:27:70:25:8b:57:23:63:52:76:08:a6:d5: 3e:c2:82:c6:67:53:00:28:74:8d:71:56:24:47:44: 9e:f5:dd:6f:5b:45:5f:32:30:a7:01:53:28:33:79: e0:87:bb:b5:2a:74:35:68:30:40:44:6b:1c:ba:80: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:82:57:AC:28:B8:00:49:59:B0:D5:03:17:39:6C:0B:AD:45:8E:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3b9bbf4-a62b-32b6-9f36-32cf8a95a89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:46:9a:69:36:16:20:36:97:d6:9d:24:bd:a7:03:bf:21:15: 49:82:b4:b9:9a:f7:c5:14:0d:04:0e:2c:f5:84:c5:c1:91:3c: 65:18:10:6c:76:3d:b1:5e:8a:46:7c:28:3f:bc:b1:d9:83:fc: 80:20:ba:51:9f:37:29:83:b1:74:0e:12:47:13:8d:f2:46:b0: fd:2c:7b:a9:8e:30:95:38:29:0d:37:d9:d8:dc:44:59:44:a1: 34:05:64:c2:d5:4d:53:93:5c:84:ac:89:47:83:79:51:9e:e9: a8:48:be:e8:65:5c:98:6c:2f:a8:8e:06:5d:93:e7:4a:bd:96: a2:e6:7c:ad:78:71:1c:0a:31:8b:0f:90:28:d5:6a:90:0b:7b: fc:7b:41:46:3c:c5:63:ef:ba:ef:0d:49:2f:2d:52:28:80:06: ae:fb:3a:78:81:45:d4:b0:45:8c:a4:61:f3:a2:3a:bf:78:8a: 8a:c9:07:7d:db:9f:65:14:12:33:7a:bb:d0:54:87:ae:28:a2: e9:de:48:72:8e:be:a5:ac:ae:d1:a7:a0:09:3d:72:2a:7d:23: 4e:76:87:e0:fb:59:36:0b:4a:52:c9:0f:d7:52:95:7e:20:d8: 89:89:55:d8:00:d5:d9:73:68:a5:ff:88:1d:f7:6f:35:ac:b8: 6a:29:b7:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oMN9pMNJbHOaZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDgzYjQxMWQtYTg0Mi00NGI0LThmOTItYjAxMzQ0N2QzYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0r8kLOLbQ6VI01Qinj0cF0HRcj3TGAOhkuR S7uZ0P7uUKtaOJCmDaildeIHyfKRJZT7d/N2ryp5ScLvVbSw8yk3qaKmZkCxGfci jykNgqkQX2Hr2pEobfKcvDaTdRPNbh0Bbz8tsG6ZDrfd2k8itd3B6bzd7zYmcQhZ owcbJykESAFf8yzpw3aaA07Ax8IU2ZBbp09zBen7doiGpuzXvozv7MIbtBiYmw3o Xb0TxKlfJwd2kUB/pFOxctvary9Uj+NEEakncCWLVyNjUnYIptU+woLGZ1MAKHSN cVYkR0Se9d1vW0VfMjCnAVMoM3ngh7u1KnQ1aDBARGscuoCO1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqCV6wouABJWbDVAxc5bAutRY66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNiOWJiZjQtYTYyYi0z MmI2LTlmMzYtMzJjZjhhOTVhODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMe0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1Gmmk2FiA2l9adJL2nA78hFUmCtLma98UUDQQOLPWExcGRPGUYEGx2 PbFeikZ8KD+8sdmD/IAgulGfNymDsXQOEkcTjfJGsP0se6mOMJU4KQ032djcRFlE oTQFZMLVTVOTXISsiUeDeVGe6ahIvuhlXJhsL6iOBl2T50q9lqLmfK14cRwKMYsP kCjVapALe/x7QUY8xWPvuu8NSS8tUiiABq77OniBRdSwRYykYfOiOr94iorJB33b n2UUEjN6u9BUh64oouneSHKOvqWsrtGnoAk9cip9I052h+D7WTYLSlLJD9dSlX4g 2ImJVdgA1dlzaKX/iB33bzWsuGoptxI= -----END CERTIFICATE-----Generated at Wed Nov 5 06:11:03 2025 by rpki-client