$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20ca9fb6-15c9-32b8-baec-cdd3eab02d6b.roa File: 20ca9fb6-15c9-32b8-baec-cdd3eab02d6b.roa (raw, json) Hash identifier: OXBmg6dlonFPuLTG9o09pfm7up+fHYsd3pkYnauzfSg= Subject key identifier: 31:A3:5B:7D:AE:A5:A0:D7:8A:E8:D0:41:2A:45:7B:2C:C9:7B:C4:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76BBF3799815996E524200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20ca9fb6-15c9-32b8-baec-cdd3eab02d6b.roa Signing time: Thu 19 Jun 2025 14:40:07 +0000 ROA not before: Thu 19 Jun 2025 14:40:07 +0000 ROA not after: Wed 17 Sep 2025 14:40:07 +0000 asID: 22773 IP address blocks: 72.210.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:bb:f3:79:98:15:99:6e:52:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:07 2025 GMT Not After : Sep 17 14:40:07 2025 GMT Subject: CN=598fd57a-09f3-4845-ad22-8a42b1d09592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:69:d6:56:eb:e7:5c:8e:e5:48:84:3e:08: c6:82:a6:68:04:72:3d:25:d7:e1:7e:23:bc:1c:aa: b8:ff:6d:73:0d:da:44:47:5e:0d:52:b0:55:b5:6f: 36:f4:85:3f:37:84:c5:5e:3c:43:09:b5:a9:08:f9: b0:37:37:5e:76:f1:ac:5e:a4:ac:47:5b:24:74:cf: da:7b:04:a3:c9:f9:67:76:ab:c0:b7:fe:f2:d4:56: d1:d8:f9:2b:a2:72:2b:40:c2:08:3d:e9:70:9c:6e: 3f:66:79:13:79:3f:cc:cb:74:03:bc:19:01:ff:9b: ef:fc:03:35:95:1a:42:f5:d7:ed:e7:66:e8:4e:56: c9:56:74:d3:08:99:7a:9a:5b:74:68:49:d7:7e:26: f7:8d:17:4e:3d:49:e3:92:e0:6e:0b:37:ba:a5:d9: 90:f3:ae:4f:60:83:17:2d:bb:f9:95:1c:8a:51:a0: 97:c2:84:12:25:5e:61:ba:75:fd:5e:a4:62:26:d3: 5f:9c:3a:18:fe:c2:be:6a:6d:85:ab:63:74:0a:44: 22:35:2a:a4:23:ea:91:b6:1c:65:b8:dd:39:4b:cf: 25:9a:d1:8f:5f:43:cc:9f:4b:c9:e6:84:60:eb:26: 93:3d:11:40:d0:6e:5a:65:3c:e7:08:92:88:dc:d9: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:5B:7D:AE:A5:A0:D7:8A:E8:D0:41:2A:45:7B:2C:C9:7B:C4:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20ca9fb6-15c9-32b8-baec-cdd3eab02d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:58:69:53:bc:91:46:3e:25:f5:73:c0:0f:59:50:45:9b:bc: a4:4f:42:8b:a2:36:2a:82:45:ae:f2:12:f5:9c:e4:52:c0:47: f5:ff:cd:5c:75:c1:3e:b7:6b:d6:74:ec:41:cb:bc:21:34:3a: cd:8c:2e:6e:72:d3:59:8f:b1:d3:77:c2:08:3f:3c:aa:39:fd: fd:d7:79:e4:1d:f8:4e:d6:ed:2e:60:5e:f1:13:f8:c8:00:5e: fe:86:b3:c8:07:f5:a1:57:a3:19:30:2b:e7:17:b2:22:0e:12: c7:3f:43:0a:55:b3:05:07:ea:ab:a0:53:e7:a1:c5:0c:a3:e4: 38:60:25:ab:17:e5:4e:1c:78:0b:d0:d5:1a:eb:fc:93:7b:f9: f7:88:b9:f4:fc:0a:c0:53:75:7e:f6:58:f2:04:f4:2c:0d:a6: 9a:78:7a:53:fd:7a:84:e7:52:91:ba:01:26:7f:c7:18:b2:4b: 84:12:fe:d1:69:65:db:2a:84:55:ee:19:c0:40:4b:df:bd:09: a4:7c:12:49:49:a6:2b:2a:fa:03:b8:56:8b:44:5a:bb:ec:42: b6:d2:72:54:da:fe:c2:72:4c:4c:7b:50:f5:c9:6c:f7:54:70: c4:67:37:f8:ae:fd:5d:e5:ca:62:6f:10:02:7d:73:91:8c:c0: d5:72:1f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+drvzeZgVmW5SQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAwN1oXDTI1MDkxNzE0NDAwN1owLzEtMCsGA1UEAxMk NTk4ZmQ1N2EtMDlmMy00ODQ1LWFkMjItOGE0MmIxZDA5NTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCtp1lbr51yO5UiEPgjGgqZoBHI9JdfhfiO8 HKq4/21zDdpER14NUrBVtW829IU/N4TFXjxDCbWpCPmwNzdedvGsXqSsR1skdM/a ewSjyflndqvAt/7y1FbR2PkronIrQMIIPelwnG4/ZnkTeT/My3QDvBkB/5vv/AM1 lRpC9dft52boTlbJVnTTCJl6mlt0aEnXfib3jRdOPUnjkuBuCze6pdmQ865PYIMX Lbv5lRyKUaCXwoQSJV5hunX9XqRiJtNfnDoY/sK+am2Fq2N0CkQiNSqkI+qRthxl uN05S88lmtGPX0PMn0vJ5oRg6yaTPRFA0G5aZTznCJKI3Nl7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGjW32upaDXiujQQSpFeyzJe8TVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjBjYTlmYjYtMTVjOS0z MmI4LWJhZWMtY2RkM2VhYjAyZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNKbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRYaVO8kUY+JfVzwA9ZUEWbvKRPQouiNiqCRa7yEvWc5FLAR/X/zVx1 wT63a9Z07EHLvCE0Os2MLm5y01mPsdN3wgg/PKo5/f3XeeQd+E7W7S5gXvET+MgA Xv6Gs8gH9aFXoxkwK+cXsiIOEsc/QwpVswUH6qugU+ehxQyj5DhgJasX5U4ceAvQ 1Rrr/JN7+feIufT8CsBTdX72WPIE9CwNppp4elP9eoTnUpG6ASZ/xxiyS4QS/tFp ZdsqhFXuGcBAS9+9CaR8EklJpisq+gO4VotEWrvsQrbSclTa/sJyTEx7UPXJbPdU cMRnN/iu/V3lymJvEAJ9c5GMwNVyHxs= -----END CERTIFICATE-----Generated at Tue Jul 1 09:15:56 2025 by rpki-client