$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/143e0889-a535-3478-bf4f-ddcfbe152a42.roa File: 143e0889-a535-3478-bf4f-ddcfbe152a42.roa (raw, json) Hash identifier: +OiWuOtVDVnHPWJ+VbzpnFuxPxsY+r5Vgw0IqgXYuo0= Subject key identifier: AA:A9:06:C6:26:A0:30:EF:56:0F:15:CF:44:90:47:CC:30:4E:5C:94 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA5A18D72111BCC3628820 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/143e0889-a535-3478-bf4f-ddcfbe152a42.roa Signing time: Fri 20 Jun 2025 09:35:44 +0000 ROA not before: Fri 20 Jun 2025 09:35:44 +0000 ROA not after: Thu 18 Sep 2025 09:35:44 +0000 asID: 22773 IP address blocks: 174.72.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:5a:18:d7:21:11:bc:c3:62:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:44 2025 GMT Not After : Sep 18 09:35:44 2025 GMT Subject: CN=ecd79e71-d6eb-4270-be78-c111766f3e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bc:68:4a:6a:99:60:67:00:bd:65:34:53:92: c3:20:8d:a8:c0:eb:69:d9:d0:9c:18:e1:ca:cf:71: 15:84:24:b2:b2:d6:f8:3b:a5:9b:f6:72:00:2d:b3: 1e:74:5d:d5:de:c9:db:fe:71:33:59:47:c0:3b:1e: 2a:46:cf:8d:a7:3f:92:e7:4c:58:0b:a2:88:1f:76: 5b:6c:e1:0a:5e:88:e0:99:bd:b7:d0:87:65:ec:67: a6:0e:7d:81:21:54:a2:c2:ef:98:be:38:75:10:f0: 10:90:a8:72:2c:0a:aa:48:a0:13:9c:16:2b:f0:1e: 60:d0:3c:09:19:02:32:43:e6:ee:9a:ff:79:45:9c: 36:d0:3b:f6:f3:ec:9d:ab:ae:b1:75:29:71:53:7c: 00:95:fc:59:df:82:8e:6d:84:9d:d6:ab:48:75:9b: 68:24:32:32:22:37:a3:c3:08:8a:9b:c9:65:48:24: d1:78:21:1d:5f:07:bd:15:ae:c7:58:92:bf:ea:28: e5:af:80:24:89:97:c1:0f:f4:a2:6f:5e:6b:d1:b0: 20:51:64:58:ac:bc:58:5d:b7:03:70:6e:7f:23:a9: 6a:6f:58:11:5a:d0:a1:5c:fe:a2:7e:42:64:ce:c8: 92:21:25:7c:9e:9a:fa:11:23:23:60:14:19:07:d1: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A9:06:C6:26:A0:30:EF:56:0F:15:CF:44:90:47:CC:30:4E:5C:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/143e0889-a535-3478-bf4f-ddcfbe152a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4d:98:3f:90:7e:bd:10:cf:bd:dc:4c:30:ec:80:4f:53:26: 40:a1:2e:9e:7c:6b:37:31:c4:3a:7c:89:b0:00:db:fd:0f:48: a4:5a:0a:a9:29:72:0b:34:28:9f:1f:6c:b9:bf:39:2d:b5:0f: a7:3f:21:42:e5:b6:c1:71:43:b0:b1:b3:da:f1:28:59:ef:4f: 0c:c3:be:3f:25:91:36:23:c4:31:08:67:3f:ed:94:58:eb:de: 14:80:24:8c:ba:82:b9:67:a8:ea:cd:86:38:67:f7:41:81:b2: 51:e9:fe:be:4c:a7:58:60:b2:36:7e:14:fb:ce:f4:15:82:87: 70:09:25:82:91:2e:fe:e4:4b:bd:df:52:06:4c:0b:85:d7:b9: 65:f6:60:82:a5:4a:b6:a6:90:e9:19:9e:54:11:93:9c:dd:b8: ee:5f:51:59:d5:5b:d9:57:f3:00:b8:48:b5:d1:16:0f:9f:06: 3c:43:db:52:b6:a5:5b:db:59:a8:07:34:01:08:3d:0d:d6:c2: 0a:cb:83:13:04:bd:34:cd:ac:15:fe:ad:5d:e5:80:84:8e:74: 55:cf:50:a6:39:3b:ed:0c:bb:2b:01:d9:6e:48:32:20:24:80: bd:01:dc:f7:92:43:41:11:b7:b4:16:fc:28:81:d6:30:e2:93: a9:11:13:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqloY1yERvMNiiCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzU0NFoXDTI1MDkxODA5MzU0NFowLzEtMCsGA1UEAxMk ZWNkNzllNzEtZDZlYi00MjcwLWJlNzgtYzExMTc2NmYzZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47xoSmqZYGcAvWU0U5LDII2owOtp2dCcGOHK z3EVhCSystb4O6Wb9nIALbMedF3V3snb/nEzWUfAOx4qRs+Npz+S50xYC6KIH3Zb bOEKXojgmb230Idl7GemDn2BIVSiwu+Yvjh1EPAQkKhyLAqqSKATnBYr8B5g0DwJ GQIyQ+bumv95RZw20Dv28+ydq66xdSlxU3wAlfxZ34KObYSd1qtIdZtoJDIyIjej wwiKm8llSCTReCEdXwe9Fa7HWJK/6ijlr4AkiZfBD/Sib15r0bAgUWRYrLxYXbcD cG5/I6lqb1gRWtChXP6ifkJkzsiSISV8npr6ESMjYBQZB9G61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqpBsYmoDDvVg8Vz0SQR8wwTlyUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTQzZTA4ODktYTUzNS0z NDc4LWJmNGYtZGRjZmJlMTUyYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkj7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJNmD+Qfr0Qz73cTDDsgE9TJkChLp58azcxxDp8ibAA2/0PSKRaCqkp cgs0KJ8fbLm/OS21D6c/IULltsFxQ7Cxs9rxKFnvTwzDvj8lkTYjxDEIZz/tlFjr 3hSAJIy6grlnqOrNhjhn90GBslHp/r5Mp1hgsjZ+FPvO9BWCh3AJJYKRLv7kS73f UgZMC4XXuWX2YIKlSramkOkZnlQRk5zduO5fUVnVW9lX8wC4SLXRFg+fBjxD21K2 pVvbWagHNAEIPQ3WwgrLgxMEvTTNrBX+rV3lgISOdFXPUKY5O+0MuysB2W5IMiAk gL0B3PeSQ0ERt7QW/CiB1jDik6kREyg= -----END CERTIFICATE-----Generated at Tue Jul 1 14:53:36 2025 by rpki-client