$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37dde10a-29ba-3517-88fa-bdfe2f4a19f8.roa File: 37dde10a-29ba-3517-88fa-bdfe2f4a19f8.roa (raw, json) Hash identifier: 0tLG+vd+HF1UhJMUywnTCbz3iGQw4xePheCUhI4KxWI= Subject key identifier: CC:EA:7F:B5:DA:94:14:87:0A:D2:D4:8C:90:6B:68:DF:EF:54:94:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA562DF40A692F79496968 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37dde10a-29ba-3517-88fa-bdfe2f4a19f8.roa Signing time: Fri 20 Jun 2025 09:35:42 +0000 ROA not before: Fri 20 Jun 2025 09:35:42 +0000 ROA not after: Thu 18 Sep 2025 09:35:42 +0000 asID: 22773 IP address blocks: 174.72.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:56:2d:f4:0a:69:2f:79:49:69:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:42 2025 GMT Not After : Sep 18 09:35:42 2025 GMT Subject: CN=d9904fef-f94c-4960-a60c-5097c16e6339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:12:3f:77:56:68:65:ea:36:36:2e:6a:8f:c0: 0e:e2:26:a7:36:35:3e:fe:ea:e3:03:c0:34:5e:7e: 02:62:cd:9a:01:40:e4:17:72:3e:29:d9:3d:df:bb: c0:e9:70:89:13:82:6e:11:95:f3:d7:b4:12:df:b4: 0e:05:ef:83:eb:79:80:65:28:27:07:27:88:62:de: 85:14:da:cd:ce:56:5c:86:f9:a2:81:ef:d2:f9:b2: 3e:61:51:24:36:d4:ed:b7:f7:53:d4:c1:9f:bd:96: 30:61:a1:e9:f7:28:66:62:7b:66:d9:1f:27:79:49: 8d:cc:53:de:7c:f2:a0:0a:d1:8d:6e:e9:12:77:7d: b4:41:16:76:22:db:7d:a2:14:3e:53:62:8f:80:45: db:f3:63:84:0d:50:e5:ae:ac:4f:54:0b:9a:b4:4a: d6:b6:68:da:11:68:c6:a6:23:a6:64:a7:f8:68:7f: 76:5a:a7:b0:f8:cb:fa:4c:90:6f:06:71:94:77:e3: 41:01:f1:12:21:9c:3e:7d:f3:90:10:a1:13:51:33: 0f:eb:e7:67:0b:6a:92:8a:3e:78:72:6a:ef:38:cf: ca:1d:f7:16:67:b4:b2:5c:04:c5:f5:eb:24:54:a2: 30:a0:d4:8f:60:1a:35:06:e7:43:6f:57:99:07:ea: 85:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EA:7F:B5:DA:94:14:87:0A:D2:D4:8C:90:6B:68:DF:EF:54:94:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37dde10a-29ba-3517-88fa-bdfe2f4a19f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:bb:bd:f2:ee:70:40:b0:69:c7:d9:83:a6:36:d8:e1:50:cc: db:75:a7:b5:bf:1e:f7:37:5b:1b:95:b8:6b:e8:b8:41:7c:2c: 2c:92:92:ff:09:5c:02:8d:a2:85:c3:ee:b2:74:2f:3a:dd:78: 59:96:61:e1:ee:67:47:be:7b:03:e5:67:9d:ab:79:2d:df:31: 77:51:d6:ca:4f:33:34:5f:41:34:44:39:b4:63:8b:17:69:31: 47:84:b1:77:dc:a6:2f:88:00:a5:75:6e:c0:ca:90:34:75:ed: ad:85:f9:3b:9d:ac:aa:de:c2:a8:f9:c2:88:73:e9:6c:d8:60: 60:1e:4f:80:d8:fa:34:12:e7:4b:80:11:bd:08:e1:27:ba:ff: 5e:01:5e:42:47:7d:2e:b8:5e:76:76:c4:84:61:df:ad:6a:47: 64:c5:a1:7a:52:35:b4:76:48:bf:80:d5:7b:2a:c5:be:51:98: 6a:4a:40:4c:02:91:c1:7a:47:14:dc:48:c2:ba:da:66:c3:11: 64:3b:a8:a9:ed:c4:d1:82:90:55:8d:5a:50:af:e2:4c:62:f0: 79:55:85:6b:cb:95:0a:b0:67:df:b5:30:93:6a:ee:59:c3:51: ee:f2:77:92:4e:56:44:2d:86:52:0b:63:59:c9:77:cb:7f:89: 80:71:bc:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqlYt9AppL3lJaWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzU0MloXDTI1MDkxODA5MzU0MlowLzEtMCsGA1UEAxMk ZDk5MDRmZWYtZjk0Yy00OTYwLWE2MGMtNTA5N2MxNmU2MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BI/d1ZoZeo2Ni5qj8AO4ianNjU+/urjA8A0 Xn4CYs2aAUDkF3I+Kdk937vA6XCJE4JuEZXz17QS37QOBe+D63mAZSgnByeIYt6F FNrNzlZchvmige/S+bI+YVEkNtTtt/dT1MGfvZYwYaHp9yhmYntm2R8neUmNzFPe fPKgCtGNbukSd320QRZ2Itt9ohQ+U2KPgEXb82OEDVDlrqxPVAuatErWtmjaEWjG piOmZKf4aH92Wqew+Mv6TJBvBnGUd+NBAfESIZw+ffOQEKETUTMP6+dnC2qSij54 cmrvOM/KHfcWZ7SyXATF9eskVKIwoNSPYBo1BudDb1eZB+qFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzqf7XalBSHCtLUjJBraN/vVJTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzdkZGUxMGEtMjliYS0z NTE3LTg4ZmEtYmRmZTJmNGExOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq7vfLucECwacfZg6Y22OFQzNt1p7W/Hvc3WxuVuGvouEF8LCySkv8J XAKNooXD7rJ0LzrdeFmWYeHuZ0e+ewPlZ52reS3fMXdR1spPMzRfQTREObRjixdp MUeEsXfcpi+IAKV1bsDKkDR17a2F+TudrKrewqj5wohz6WzYYGAeT4DY+jQS50uA Eb0I4Se6/14BXkJHfS64XnZ2xIRh361qR2TFoXpSNbR2SL+A1Xsqxb5RmGpKQEwC kcF6RxTcSMK62mbDEWQ7qKntxNGCkFWNWlCv4kxi8HlVhWvLlQqwZ9+1MJNq7lnD Ue7yd5JOVkQthlILY1nJd8t/iYBxvBA= -----END CERTIFICATE-----Generated at Mon Jun 30 19:58:52 2025 by rpki-client