$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43684d8c-1cde-3f0a-b38f-8f02d9cc8236.roa File: 43684d8c-1cde-3f0a-b38f-8f02d9cc8236.roa (raw, json) Hash identifier: ydT4uMR0ey9yO0ex4xJTKI7fLGbXkLySpqeXCFLQIc4= Subject key identifier: 3A:0D:06:AF:C7:7C:76:9B:D7:3C:CB:AD:24:62:F4:24:7A:B3:BC:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77B0DEE0A16DD3D105F840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43684d8c-1cde-3f0a-b38f-8f02d9cc8236.roa Signing time: Thu 19 Jun 2025 14:42:03 +0000 ROA not before: Thu 19 Jun 2025 14:42:03 +0000 ROA not after: Wed 17 Sep 2025 14:42:03 +0000 asID: 22773 IP address blocks: 72.222.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:b0:de:e0:a1:6d:d3:d1:05:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:03 2025 GMT Not After : Sep 17 14:42:03 2025 GMT Subject: CN=11e0f2ff-11d7-4987-a951-f40dff87efca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:84:58:48:5a:41:42:f8:95:f2:57:5f:56:ed: 0f:a2:33:20:f5:16:84:da:ab:7f:6a:7b:38:3d:c0: c7:6b:32:fe:1a:72:55:43:63:3f:f7:b9:c7:0f:a1: a0:fc:d0:0a:66:0b:7d:2a:46:09:cc:ba:4b:0b:f2: e0:49:06:da:4c:c2:37:94:3a:c2:84:e0:9f:e9:f8: 27:51:1b:f1:8a:d5:c5:40:ac:39:9e:7c:c8:95:55: 99:74:f6:aa:4b:71:ea:cd:d5:8f:0d:7b:94:ab:71: ce:1e:ed:7f:f4:2b:68:0c:04:c1:7d:77:97:ba:e1: f8:2c:d6:ca:a3:de:a3:34:48:00:78:7e:1d:59:a5: 03:83:8b:84:ed:aa:c4:f1:b0:62:dd:80:c2:73:93: d9:ab:15:aa:2f:e3:58:33:94:d0:2e:69:33:78:ca: 34:db:c2:42:f0:67:6a:b3:e3:97:5f:ef:43:b4:a8: 05:b9:28:c0:c8:70:87:2e:a0:99:c4:17:23:61:f2: 61:9b:fe:79:9c:5b:91:01:e9:51:66:9e:a5:fa:7a: 9b:ae:ac:b3:78:00:91:0b:0b:9f:cd:e1:4c:74:2d: 6a:75:1b:df:1d:8f:5c:c1:dd:03:90:b9:a3:ec:20: 15:96:02:8f:75:26:15:0d:d2:56:f8:4f:ae:29:cd: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0D:06:AF:C7:7C:76:9B:D7:3C:CB:AD:24:62:F4:24:7A:B3:BC:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43684d8c-1cde-3f0a-b38f-8f02d9cc8236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2b:b4:6b:7f:4f:6f:29:06:18:ac:e0:4c:45:94:83:02:17: c7:50:44:55:ef:c8:32:61:c6:de:43:ff:39:1a:e5:0d:c8:82: 56:77:15:3d:8c:29:b8:a9:5a:de:c4:91:bf:13:9c:cf:95:7c: cb:67:3b:04:f3:3e:d5:e1:18:ba:5f:8e:b8:54:fd:85:b6:b2: 41:d4:93:07:c8:f9:04:15:a7:6e:20:e3:93:5e:f5:ce:12:90: 99:90:31:32:fe:2f:91:d3:bf:eb:0b:a3:8c:c6:e0:e0:07:93: d2:18:b5:1e:17:7f:f9:60:29:d9:7f:b4:b8:76:5e:90:c9:e8: 64:a3:85:81:f2:5b:e1:42:18:0e:9f:63:5d:2d:2d:b4:36:d2: 73:0b:ed:1c:4c:49:5c:52:40:8b:07:ae:97:64:77:90:ef:60: bd:df:66:04:77:93:47:ee:83:9d:ee:7d:7d:7d:61:7d:a0:60: 31:af:12:5b:eb:42:e5:0d:d2:9c:5e:f3:2a:61:65:43:68:96: fd:0e:7a:2f:2f:46:4f:c5:b5:f8:96:f4:1e:88:bb:fc:d2:d9: 77:24:f0:d8:8a:c0:cd:d3:fb:0d:ad:32:48:d6:ef:ca:bc:ac: b5:15:b8:c4:5e:05:ad:84:25:52:c9:ca:9c:22:e2:f5:b1:47: 99:32:a4:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d7De4KFt09EF+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIwM1oXDTI1MDkxNzE0NDIwM1owLzEtMCsGA1UEAxMk MTFlMGYyZmYtMTFkNy00OTg3LWE5NTEtZjQwZGZmODdlZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloRYSFpBQviV8ldfVu0PojMg9RaE2qt/ans4 PcDHazL+GnJVQ2M/97nHD6Gg/NAKZgt9KkYJzLpLC/LgSQbaTMI3lDrChOCf6fgn URvxitXFQKw5nnzIlVWZdPaqS3HqzdWPDXuUq3HOHu1/9CtoDATBfXeXuuH4LNbK o96jNEgAeH4dWaUDg4uE7arE8bBi3YDCc5PZqxWqL+NYM5TQLmkzeMo028JC8Gdq s+OXX+9DtKgFuSjAyHCHLqCZxBcjYfJhm/55nFuRAelRZp6l+nqbrqyzeACRCwuf zeFMdC1qdRvfHY9cwd0DkLmj7CAVlgKPdSYVDdJW+E+uKc1nDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoNBq/HfHab1zzLrSRi9CR6s7zVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM2ODRkOGMtMWNkZS0z ZjBhLWIzOGYtOGYwMmQ5Y2M4MjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADArtGt/T28pBhis4ExFlIMCF8dQRFXvyDJhxt5D/zka5Q3IglZ3FT2M KbipWt7Ekb8TnM+VfMtnOwTzPtXhGLpfjrhU/YW2skHUkwfI+QQVp24g45Ne9c4S kJmQMTL+L5HTv+sLo4zG4OAHk9IYtR4Xf/lgKdl/tLh2XpDJ6GSjhYHyW+FCGA6f Y10tLbQ20nML7RxMSVxSQIsHrpdkd5DvYL3fZgR3k0fug53ufX19YX2gYDGvElvr QuUN0pxe8yphZUNolv0Oei8vRk/FtfiW9B6Iu/zS2Xck8NiKwM3T+w2tMkjW78q8 rLUVuMReBa2EJVLJypwi4vWxR5kypD0= -----END CERTIFICATE-----Generated at Mon Jun 30 18:15:11 2025 by rpki-client