$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f022a87-34c4-3da2-ad98-0ec61c466d5f.roa File: 2f022a87-34c4-3da2-ad98-0ec61c466d5f.roa (raw, json) Hash identifier: sr/z68/9VflhoEmaYqNmpSDyiGzWNlm4vfvivx/Bl0o= Subject key identifier: 8C:F7:76:E5:E2:B1:4A:07:50:B3:30:28:4D:2D:20:55:A7:F0:BC:67 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E763ADB63E11DA308B8EF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f022a87-34c4-3da2-ad98-0ec61c466d5f.roa Signing time: Thu 19 Jun 2025 14:39:06 +0000 ROA not before: Thu 19 Jun 2025 14:39:06 +0000 ROA not after: Wed 17 Sep 2025 14:39:06 +0000 asID: 22773 IP address blocks: 72.208.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:3a:db:63:e1:1d:a3:08:b8:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:06 2025 GMT Not After : Sep 17 14:39:06 2025 GMT Subject: CN=327635bb-93ac-49cf-8b0a-5e1ca0a15af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:5b:d2:6e:9f:47:68:a1:8e:9c:ee:58:62: d9:7c:52:6f:64:46:0e:cb:99:fb:7b:fa:c3:01:be: a6:77:76:23:5a:66:6b:6d:9d:bc:a4:0d:85:5b:3d: 0d:e4:fb:82:a6:dc:44:e5:ce:5b:8b:8e:2e:5a:b5: e9:ec:d2:38:09:8c:9a:13:88:9f:f5:21:0f:91:95: ad:4b:60:8c:44:b2:4f:1c:ba:92:dc:8d:4d:f4:35: 34:f4:09:59:6a:64:80:2c:17:37:3b:33:18:ae:5a: 51:e5:0c:b7:65:69:9c:9d:ea:7c:48:31:06:3c:19: 86:6a:10:53:c9:e9:1f:a9:ac:4e:63:3a:d1:c1:4c: d4:0b:87:37:39:72:6e:8f:30:3b:54:7e:65:ce:d0: c9:46:e0:d5:a2:4e:3b:23:b9:75:75:fb:63:58:ab: 64:09:33:22:56:35:5b:55:ec:8e:3e:f8:c1:2d:84: 1b:ea:59:49:b6:cc:e8:d8:87:67:07:55:32:a8:09: ae:f3:e4:22:fa:36:83:f5:c0:83:89:ab:07:fc:4e: 11:50:b0:25:d4:15:d7:67:0c:f8:e4:74:07:17:73: f5:ef:22:68:9d:a8:ec:d3:03:67:58:2f:3e:cd:a8: 34:ff:52:29:73:2a:c0:29:ad:01:11:55:9a:f0:21: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F7:76:E5:E2:B1:4A:07:50:B3:30:28:4D:2D:20:55:A7:F0:BC:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f022a87-34c4-3da2-ad98-0ec61c466d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a8:f4:29:d0:76:c2:90:03:70:8e:4a:d6:da:d1:bd:02:94: 23:d2:4b:14:71:95:b9:21:40:c2:49:64:bc:37:99:6c:22:92: 31:ed:42:29:ec:e4:89:a4:6d:7b:36:64:8f:f0:b1:bf:b5:a6: 84:5b:9c:79:5c:71:b1:de:4e:67:c2:6f:98:dd:fe:54:0c:5d: 82:03:e8:d8:f9:44:00:00:74:8c:f3:bc:f2:e8:98:68:59:84: ef:c8:28:d3:08:1d:d7:67:c3:5a:04:50:ff:a2:c0:e0:74:b5: 26:ef:66:e0:01:0d:11:12:61:79:66:97:95:2f:6d:e4:ca:84: 23:a4:ca:28:81:7b:e0:6b:1d:f3:d3:7a:6e:25:4d:59:e3:30: d1:0f:22:81:30:de:aa:d6:35:4a:c9:08:2c:84:f9:af:90:57: ef:48:74:ab:7f:48:5e:a2:d8:fd:d3:84:a3:0e:d9:25:06:80: 26:a6:85:63:40:69:0a:1e:84:cd:e0:a7:1e:71:a9:78:3d:02: fd:88:22:f5:7d:ad:b1:43:80:a3:a2:a1:e0:5c:b8:ab:0e:46: d1:96:e2:5d:20:e2:57:e6:44:ae:b8:d4:7f:ee:72:fe:9d:ac: bf:6a:5a:5c:7c:d7:07:f8:75:20:38:51:80:38:b1:e2:cc:fe: 30:85:e0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+djrbY+Edowi474AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkwNloXDTI1MDkxNzE0MzkwNlowLzEtMCsGA1UEAxMk MzI3NjM1YmItOTNhYy00OWNmLThiMGEtNWUxY2EwYTE1YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7tb0m6fR2ihjpzuWGLZfFJvZEYOy5n7e/rD Ab6md3YjWmZrbZ28pA2FWz0N5PuCptxE5c5bi44uWrXp7NI4CYyaE4if9SEPkZWt S2CMRLJPHLqS3I1N9DU09AlZamSALBc3OzMYrlpR5Qy3ZWmcnep8SDEGPBmGahBT yekfqaxOYzrRwUzUC4c3OXJujzA7VH5lztDJRuDVok47I7l1dftjWKtkCTMiVjVb VeyOPvjBLYQb6llJtszo2IdnB1UyqAmu8+Qi+jaD9cCDiasH/E4RULAl1BXXZwz4 5HQHF3P17yJonajs0wNnWC8+zag0/1IpcyrAKa0BEVWa8CFWzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIz3duXisUoHULMwKE0tIFWn8LxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmYwMjJhODctMzRjNC0z ZGEyLWFkOTgtMGVjNjFjNDY2ZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWo9CnQdsKQA3COStba0b0ClCPSSxRxlbkhQMJJZLw3mWwikjHtQins 5ImkbXs2ZI/wsb+1poRbnHlccbHeTmfCb5jd/lQMXYID6Nj5RAAAdIzzvPLomGhZ hO/IKNMIHddnw1oEUP+iwOB0tSbvZuABDRESYXlml5UvbeTKhCOkyiiBe+BrHfPT em4lTVnjMNEPIoEw3qrWNUrJCCyE+a+QV+9IdKt/SF6i2P3ThKMO2SUGgCamhWNA aQoehM3gpx5xqXg9Av2IIvV9rbFDgKOioeBcuKsORtGW4l0g4lfmRK641H/ucv6d rL9qWlx81wf4dSA4UYA4seLM/jCF4BE= -----END CERTIFICATE-----Generated at Tue Jul 1 15:35:01 2025 by rpki-client