$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/464269e7-8aca-331c-a68e-0de34314256e.roa File: 464269e7-8aca-331c-a68e-0de34314256e.roa (raw, json) Hash identifier: JhsdYDIirpB9v94oKW25OFPj7C7ru2a7dQ6Br74J1aE= Subject key identifier: 8E:35:ED:34:0F:FD:97:86:BE:DB:06:7A:99:43:87:15:2F:2C:F2:4A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7782F7377029A9717542C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/464269e7-8aca-331c-a68e-0de34314256e.roa Signing time: Thu 19 Jun 2025 14:41:41 +0000 ROA not before: Thu 19 Jun 2025 14:41:41 +0000 ROA not after: Wed 17 Sep 2025 14:41:41 +0000 asID: 22773 IP address blocks: 72.217.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:82:f7:37:70:29:a9:71:75:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:41 2025 GMT Not After : Sep 17 14:41:41 2025 GMT Subject: CN=bf4a31f6-3f72-4e23-a217-d99e084f66f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:c5:d0:12:9b:22:69:5e:79:d7:d4:52:e2: 3b:ad:45:74:bc:e6:d1:77:44:25:87:09:6c:5e:c8: 4a:83:a0:2b:1d:3c:2b:46:a5:b4:b8:f9:0e:16:d1: df:cf:79:21:12:47:a8:a8:70:cd:99:9a:03:91:4c: 20:fa:b2:26:c5:53:cb:70:3c:07:08:da:83:89:15: 31:a8:03:d6:cd:cd:b4:a1:ad:34:4e:0f:d9:b2:75: 5f:e6:9b:d0:25:1f:85:54:36:6a:0a:05:de:e2:4a: 4f:18:56:47:72:6d:ba:b7:4d:40:5e:50:bc:aa:72: 54:e6:0b:d9:78:bd:90:55:c3:bc:d6:a3:05:0c:7f: 91:c7:2e:32:6b:6b:14:1c:61:ca:41:f1:02:03:3b: 85:ff:20:08:b0:39:4b:27:ab:9b:1d:25:a1:6b:83: 1a:cb:7b:97:c8:19:fb:52:ac:33:71:c6:8a:36:91: d7:83:cf:12:39:1d:ee:23:80:04:7e:12:17:33:1d: 63:2b:07:b2:ff:df:92:be:fa:94:22:30:fc:bc:e1: 39:ed:92:bc:f7:a8:75:7a:d2:36:0e:6c:5d:bf:ef: 2b:b1:f7:b3:9a:99:cd:c6:f6:86:87:f9:a2:e0:cf: 04:25:64:7e:f1:72:73:e6:78:ee:b2:09:c5:53:2e: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:35:ED:34:0F:FD:97:86:BE:DB:06:7A:99:43:87:15:2F:2C:F2:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/464269e7-8aca-331c-a68e-0de34314256e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ec:6f:b4:80:7f:bb:82:e6:c2:1c:f5:53:12:75:4e:3d:49: a2:b7:20:90:36:bd:d6:a1:74:fa:89:db:60:e0:29:1a:f5:06: 2a:fe:7f:2a:7b:dc:35:5c:e0:6b:05:9b:2d:b2:88:5e:31:37: 2c:76:8b:5a:dd:03:60:40:7b:ac:38:ee:ac:c0:f6:d4:5e:f9: b4:71:ad:cd:06:8d:32:90:5f:bd:70:76:51:04:c4:eb:c6:b0: 64:1d:32:62:0e:91:a5:66:46:27:1c:76:c0:fa:89:df:da:f1: 6a:7b:0d:4e:36:f9:b6:8c:04:13:b7:d5:9c:72:e5:7d:9b:22: 4a:0c:60:76:a3:f0:27:90:3f:3a:7b:91:14:51:66:12:7d:cc: da:82:42:10:f9:8e:27:cf:68:a2:0f:4c:02:c3:35:02:9a:3e: 2e:85:bb:64:74:07:a0:34:db:3a:01:c5:61:d7:03:e5:ed:4b: f0:b8:5e:92:d0:7d:01:cc:94:11:40:51:ca:a7:f8:ba:13:eb: a1:3d:b5:5c:25:7a:65:7b:9f:52:67:07:a8:f7:17:9d:b4:ea: 4d:25:10:28:b1:26:22:38:78:46:b2:8d:d3:4f:f0:c2:b5:64: 52:1b:89:33:a8:d0:e9:cc:cf:40:38:a1:b8:cd:10:67:01:4b: 6e:74:a9:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d4L3N3ApqXF1QsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDE0MVoXDTI1MDkxNzE0NDE0MVowLzEtMCsGA1UEAxMk YmY0YTMxZjYtM2Y3Mi00ZTIzLWEyMTctZDk5ZTA4NGY2NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZnF0BKbImleedfUUuI7rUV0vObRd0Qlhwls XshKg6ArHTwrRqW0uPkOFtHfz3khEkeoqHDNmZoDkUwg+rImxVPLcDwHCNqDiRUx qAPWzc20oa00Tg/ZsnVf5pvQJR+FVDZqCgXe4kpPGFZHcm26t01AXlC8qnJU5gvZ eL2QVcO81qMFDH+Rxy4ya2sUHGHKQfECAzuF/yAIsDlLJ6ubHSWha4May3uXyBn7 UqwzccaKNpHXg88SOR3uI4AEfhIXMx1jKwey/9+SvvqUIjD8vOE57ZK896h1etI2 Dmxdv+8rsfezmpnNxvaGh/mi4M8EJWR+8XJz5njusgnFUy6c+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI417TQP/ZeGvtsGeplDhxUvLPJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDY0MjY5ZTctOGFjYS0z MzFjLWE2OGUtMGRlMzQzMTQyNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7sb7SAf7uC5sIc9VMSdU49SaK3IJA2vdahdPqJ22DgKRr1Bir+fyp7 3DVc4GsFmy2yiF4xNyx2i1rdA2BAe6w47qzA9tRe+bRxrc0GjTKQX71wdlEExOvG sGQdMmIOkaVmRiccdsD6id/a8Wp7DU42+baMBBO31Zxy5X2bIkoMYHaj8CeQPzp7 kRRRZhJ9zNqCQhD5jifPaKIPTALDNQKaPi6Fu2R0B6A02zoBxWHXA+XtS/C4XpLQ fQHMlBFAUcqn+LoT66E9tVwlemV7n1JnB6j3F5206k0lECixJiI4eEayjdNP8MK1 ZFIbiTOo0OnMz0A4objNEGcBS250qd0= -----END CERTIFICATE-----Generated at Tue Jul 1 17:55:25 2025 by rpki-client