$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29280a59-c51a-309a-97d9-c4dec5a48f59.roa File: 29280a59-c51a-309a-97d9-c4dec5a48f59.roa (raw, json) Hash identifier: NVJpXMCY42IY3kmslejIMNLMzaBHQN8xZ1PY7CVuUy8= Subject key identifier: 8E:8B:38:33:70:FB:45:77:29:48:21:B1:26:93:64:D2:EA:CB:D5:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7616B412397BF440629980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29280a59-c51a-309a-97d9-c4dec5a48f59.roa Signing time: Thu 19 Jun 2025 14:38:49 +0000 ROA not before: Thu 19 Jun 2025 14:38:49 +0000 ROA not after: Wed 17 Sep 2025 14:38:49 +0000 asID: 22773 IP address blocks: 72.206.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:16:b4:12:39:7b:f4:40:62:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:49 2025 GMT Not After : Sep 17 14:38:49 2025 GMT Subject: CN=8ae83c2f-426c-4676-8369-8d62fe4f7977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:38:69:6c:c9:04:12:82:ff:5d:bd:b5:fd:2b: 47:c7:95:35:de:d8:e8:c3:60:24:34:d6:0f:6e:8e: 0e:b6:4c:40:b9:0f:c5:ff:2a:b4:a3:73:bd:1e:08: 6e:ba:bf:f9:93:ac:07:67:15:40:f0:3d:e0:de:81: 61:ba:bd:34:b5:3c:12:6b:80:3d:14:0d:0b:cf:2e: 10:a8:b2:b2:dd:72:99:b7:dd:13:d4:fa:6a:28:88: 15:03:b4:82:4c:42:2e:90:33:0c:22:55:c4:37:33: 9b:da:bf:66:bd:36:b7:35:d6:1d:99:8f:65:7e:ce: 71:94:ae:66:74:f9:9b:b6:9e:d7:31:e5:47:93:c5: 5b:c5:3f:be:2e:80:7c:fa:5b:74:18:74:26:df:f7: 38:de:f5:69:6d:43:da:d7:8f:5e:d5:c9:17:2d:ae: 14:aa:09:28:52:17:0a:4e:90:c2:11:f8:8c:47:2c: 71:b5:37:1f:65:14:bd:62:6b:6d:ea:71:56:80:66: 94:58:16:15:db:d1:d1:63:c0:f3:07:a2:20:6c:5a: 3d:e8:66:a3:a7:8d:e5:19:6e:70:6f:54:00:0b:74: bc:67:61:54:4f:0f:22:32:7b:a5:0b:a6:66:3f:24: f6:67:35:da:9c:6e:49:08:a6:99:d3:eb:0a:b8:fe: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8B:38:33:70:FB:45:77:29:48:21:B1:26:93:64:D2:EA:CB:D5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29280a59-c51a-309a-97d9-c4dec5a48f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8a:3d:f2:c9:63:37:7a:23:75:9e:4b:7e:b9:68:35:4a:e2: 7f:9f:61:71:66:7d:32:e3:e4:e7:6c:10:1f:73:18:66:46:1a: 65:02:e7:38:4f:81:f3:32:0c:60:af:8e:ed:40:56:10:af:43: 1d:c9:34:f4:f5:47:8f:57:73:e9:41:c3:ab:f5:92:b7:a4:4c: 9a:a7:2a:fe:62:2a:4e:41:1c:90:9c:14:d9:d6:a6:56:2b:0c: 16:6d:72:93:0f:c7:a3:50:82:a3:89:a1:78:c4:1f:5b:0c:9d: 86:ee:6f:fa:76:9c:5a:a3:99:ae:23:1f:3c:34:ac:73:cd:85: 6b:17:b6:b7:e8:62:30:18:c0:f3:ba:c5:0e:9c:7b:3f:51:7f: 2c:d9:f7:35:2b:8f:65:43:cc:18:2c:77:a6:be:f0:f3:f1:63: f6:97:57:c1:12:2e:1f:23:5f:5c:73:8e:a0:dc:59:9d:cc:a8: b9:2e:54:69:8e:79:e4:de:1b:d5:11:5e:70:1a:e2:c8:c4:d9: 14:2a:7c:8b:98:8e:88:21:23:f9:b8:d5:8a:5e:93:cc:b6:e3: 7c:b0:09:b8:31:3a:ae:a9:7d:67:34:35:e3:77:ae:ce:7c:06: e5:38:92:49:ca:30:24:81:9e:09:b4:88:13:cd:a2:66:bf:d0: 54:37:c9:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dha0Ejl79EBimYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzg0OVoXDTI1MDkxNzE0Mzg0OVowLzEtMCsGA1UEAxMk OGFlODNjMmYtNDI2Yy00Njc2LTgzNjktOGQ2MmZlNGY3OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjhpbMkEEoL/Xb21/StHx5U13tjow2AkNNYP bo4OtkxAuQ/F/yq0o3O9Hghuur/5k6wHZxVA8D3g3oFhur00tTwSa4A9FA0Lzy4Q qLKy3XKZt90T1PpqKIgVA7SCTEIukDMMIlXENzOb2r9mvTa3NdYdmY9lfs5xlK5m dPmbtp7XMeVHk8VbxT++LoB8+lt0GHQm3/c43vVpbUPa149e1ckXLa4UqgkoUhcK TpDCEfiMRyxxtTcfZRS9Ymtt6nFWgGaUWBYV29HRY8DzB6IgbFo96Gajp43lGW5w b1QAC3S8Z2FUTw8iMnulC6ZmPyT2ZzXanG5JCKaZ0+sKuP76gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6LODNw+0V3KUghsSaTZNLqy9VDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjkyODBhNTktYzUxYS0z MDlhLTk3ZDktYzRkZWM1YTQ4ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2KPfLJYzd6I3WeS365aDVK4n+fYXFmfTLj5OdsEB9zGGZGGmUC5zhP gfMyDGCvju1AVhCvQx3JNPT1R49Xc+lBw6v1krekTJqnKv5iKk5BHJCcFNnWplYr DBZtcpMPx6NQgqOJoXjEH1sMnYbub/p2nFqjma4jHzw0rHPNhWsXtrfoYjAYwPO6 xQ6cez9RfyzZ9zUrj2VDzBgsd6a+8PPxY/aXV8ESLh8jX1xzjqDcWZ3MqLkuVGmO eeTeG9URXnAa4sjE2RQqfIuYjoghI/m41Ypek8y243ywCbgxOq6pfWc0NeN3rs58 BuU4kknKMCSBngm0iBPNoma/0FQ3yY8= -----END CERTIFICATE-----Generated at Mon Jun 30 20:28:53 2025 by rpki-client