$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4964ee4d-54d4-30c7-93bc-d155da799fae.roa File: 4964ee4d-54d4-30c7-93bc-d155da799fae.roa (raw, json) Hash identifier: CY/Mxae/uIxCmj9zo9RgBhlh5Ipe3eMqDl+o2lO0K1Y= Subject key identifier: C3:58:73:C3:13:C2:FE:02:50:8C:90:56:32:6A:7A:0E:D9:7C:36:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77F736F14C2BA2F21574C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4964ee4d-54d4-30c7-93bc-d155da799fae.roa Signing time: Thu 19 Jun 2025 14:42:36 +0000 ROA not before: Thu 19 Jun 2025 14:42:36 +0000 ROA not after: Wed 17 Sep 2025 14:42:36 +0000 asID: 22773 IP address blocks: 72.223.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:f7:36:f1:4c:2b:a2:f2:15:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:36 2025 GMT Not After : Sep 17 14:42:36 2025 GMT Subject: CN=0d65b0a3-ec6b-459b-8363-8a2580b4ee0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:55:6e:9f:8e:ee:f9:dc:0e:8f:7a:46:60: 84:cc:a9:1e:18:ea:4c:19:e3:9d:23:5f:fb:ca:ce: 8f:bd:d5:16:cb:ac:6e:28:bc:4f:2b:c8:bd:06:b6: 2f:1b:23:f3:83:a5:49:45:de:5a:51:2b:f1:65:4d: 41:24:18:67:d9:4a:5d:8e:bf:e2:d2:4f:2b:70:d2: 22:fd:25:ca:85:99:04:19:a5:74:3e:b9:66:6b:60: 99:c0:ab:30:d6:62:50:35:e6:bc:91:ba:64:85:6a: 72:59:ae:40:b8:b4:ca:fa:8b:bb:d7:f3:a4:f4:dd: d5:5f:f3:c3:19:dc:e4:40:b5:9d:00:3a:c4:de:bb: 1a:f2:8c:4d:66:fb:e4:1f:0b:2f:ee:c5:49:0e:d3: e8:a9:dc:32:76:1c:ac:70:f2:57:f7:c7:27:f4:86: 03:6b:87:c0:18:4f:12:c7:31:0f:91:e2:fd:75:95: 5a:b2:12:0e:15:34:c9:a2:58:1a:1a:61:07:09:d2: cf:60:98:f8:1c:c9:08:c5:11:19:6c:c1:02:c4:c6: ce:5f:db:b2:6c:c2:1f:ce:97:7e:5a:41:f1:9a:8e: 2e:e7:c0:f2:af:1e:50:fb:a0:b3:64:82:a6:4b:7b: d9:27:a4:98:b0:c3:5c:31:2c:89:ee:26:ef:61:a2: f4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:58:73:C3:13:C2:FE:02:50:8C:90:56:32:6A:7A:0E:D9:7C:36:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4964ee4d-54d4-30c7-93bc-d155da799fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f8:22:57:2f:1b:92:e9:a0:e3:30:5d:b9:e6:34:ce:fd:a6: f8:0c:10:8c:d7:60:39:a8:14:4f:8b:8e:28:7b:a6:1b:57:8e: 1d:59:79:40:84:79:4d:34:e0:be:ec:fd:e9:a9:62:f2:73:4a: 53:00:01:1c:b3:33:7b:21:49:68:ad:ae:4d:95:60:ef:e7:c7: 2d:02:6c:8b:ab:5b:89:6a:df:08:92:46:26:50:fc:2e:f2:17: 48:14:cd:52:ef:9f:23:e5:32:c5:7b:56:25:65:81:e6:9b:08: 0b:7d:c8:c2:f0:1d:61:d2:b6:66:5d:b8:f9:f6:c9:45:4e:f7: 68:e2:28:34:eb:0d:f5:e4:6f:59:15:6d:e5:64:7f:7b:27:1b: ab:a6:f8:4d:c0:e0:8f:b4:72:1e:e8:03:86:b6:7a:f4:90:68: aa:e8:87:30:12:f1:00:ed:aa:71:e3:e5:ff:97:08:52:95:ec: cc:68:00:14:b4:07:6c:37:ad:e8:2c:11:46:41:cc:92:73:b7: 8d:a7:23:d3:04:08:9f:9c:a7:da:bf:cb:c5:2c:20:b7:45:ca: 18:a6:82:e9:32:01:d1:07:82:5f:6a:52:55:54:1a:5d:ae:38: d0:12:70:3c:12:df:9e:15:eb:6f:ee:04:ba:e0:f6:1b:8c:ac: 9a:a1:55:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d/c28UwrovIVdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIzNloXDTI1MDkxNzE0NDIzNlowLzEtMCsGA1UEAxMk MGQ2NWIwYTMtZWM2Yi00NTliLTgzNjMtOGEyNTgwYjRlZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRFVbp+O7vncDo96RmCEzKkeGOpMGeOdI1/7 ys6PvdUWy6xuKLxPK8i9BrYvGyPzg6VJRd5aUSvxZU1BJBhn2Updjr/i0k8rcNIi /SXKhZkEGaV0Prlma2CZwKsw1mJQNea8kbpkhWpyWa5AuLTK+ou71/Ok9N3VX/PD GdzkQLWdADrE3rsa8oxNZvvkHwsv7sVJDtPoqdwydhyscPJX98cn9IYDa4fAGE8S xzEPkeL9dZVashIOFTTJolgaGmEHCdLPYJj4HMkIxREZbMECxMbOX9uybMIfzpd+ WkHxmo4u58Dyrx5Q+6CzZIKmS3vZJ6SYsMNcMSyJ7ibvYaL0FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNYc8MTwv4CUIyQVjJqeg7ZfDZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDk2NGVlNGQtNTRkNC0z MGM3LTkzYmMtZDE1NWRhNzk5ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN9GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv4IlcvG5LpoOMwXbnmNM79pvgMEIzXYDmoFE+Ljih7phtXjh1ZeUCE eU004L7s/empYvJzSlMAARyzM3shSWitrk2VYO/nxy0CbIurW4lq3wiSRiZQ/C7y F0gUzVLvnyPlMsV7ViVlgeabCAt9yMLwHWHStmZduPn2yUVO92jiKDTrDfXkb1kV beVkf3snG6um+E3A4I+0ch7oA4a2evSQaKrohzAS8QDtqnHj5f+XCFKV7MxoABS0 B2w3regsEUZBzJJzt42nI9MECJ+cp9q/y8UsILdFyhimgukyAdEHgl9qUlVUGl2u ONAScDwS354V62/uBLrg9huMrJqhVdE= -----END CERTIFICATE-----Generated at Wed Jul 2 05:21:27 2025 by rpki-client