$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51d47685-3aaa-325e-8bf5-f9e53e29690d.roa File: 51d47685-3aaa-325e-8bf5-f9e53e29690d.roa (raw, json) Hash identifier: jMPYJC+2vmD5qz2Unbgspip0Xq/S2t1tOjWtjw4I7ks= Subject key identifier: BC:3D:D3:AC:10:60:07:D5:05:14:0A:CC:43:3B:CA:9A:98:80:B9:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E759179CA8C84402C654280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51d47685-3aaa-325e-8bf5-f9e53e29690d.roa Signing time: Thu 19 Jun 2025 14:37:46 +0000 ROA not before: Thu 19 Jun 2025 14:37:46 +0000 ROA not after: Wed 17 Sep 2025 14:37:46 +0000 asID: 22773 IP address blocks: 72.201.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:91:79:ca:8c:84:40:2c:65:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:46 2025 GMT Not After : Sep 17 14:37:46 2025 GMT Subject: CN=50e49a5e-ac10-416f-92d2-eb66ba22f662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:69:12:45:e6:04:2e:2c:b0:81:45:f4:af:0e: 43:5c:d2:c5:3f:a9:65:44:a2:55:e9:20:79:5d:68: 4d:73:56:3a:20:ac:32:f0:e9:77:fc:ea:53:66:63: fc:14:ce:ce:09:9e:8d:52:94:97:4c:af:2d:79:bf: 56:7e:7b:f6:b9:69:8c:26:ad:d6:ae:3f:12:4a:a7: 2f:6b:b4:e6:8e:e7:4a:7a:a4:85:a8:a0:ef:4c:9d: f0:99:6f:85:42:18:00:19:ce:5c:50:73:76:bf:5c: d8:08:bc:76:44:1a:4f:fd:4d:80:9c:b0:e2:d7:c3: 03:5f:16:40:2e:34:79:48:7a:c4:39:00:a2:90:5c: 36:31:bf:6c:dc:3e:22:c2:1f:67:43:ab:67:d4:15: 1c:fe:42:9a:78:18:3d:4e:c4:0d:18:1b:40:fe:ab: d9:40:72:b5:53:9f:43:ea:98:49:1e:f3:43:11:84: 65:d5:85:a2:a2:c6:82:17:e3:de:3d:c2:12:d3:31: 69:9a:75:29:27:98:b3:6a:eb:63:b2:09:fc:e6:3d: a6:ba:41:a3:08:3b:ec:3b:9c:06:06:bc:30:dc:f6: ee:02:10:96:56:f2:b6:62:6a:30:41:35:7e:af:a8: 17:69:7c:67:17:19:bf:ae:a3:73:20:58:4f:bd:c8: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3D:D3:AC:10:60:07:D5:05:14:0A:CC:43:3B:CA:9A:98:80:B9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51d47685-3aaa-325e-8bf5-f9e53e29690d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2d:20:7d:0b:58:77:a1:a7:a9:6c:05:16:43:78:24:7d:a4: fe:72:81:38:5c:2c:25:3e:fe:83:2a:04:b3:86:0b:05:f4:14: 16:6e:40:89:be:3a:9b:46:56:51:85:de:6d:45:4b:01:db:a9: fb:fe:1f:9c:c4:df:b4:a2:90:e5:8d:14:f5:c9:9e:6f:ed:30: ea:53:ea:4f:21:77:d4:26:d9:7e:02:7d:62:e7:01:7b:bb:00: 89:e3:75:e3:61:a1:7f:18:93:ff:13:df:66:c9:9d:6c:49:1d: f3:f4:bf:65:c4:75:5f:da:0c:8e:f1:19:ca:a7:00:19:78:46: 70:a7:8f:3d:51:11:74:c6:9b:1c:3e:6c:1f:3a:51:2a:3c:db: fb:d3:2f:13:f0:42:35:fe:2d:7b:5f:b6:8a:60:1f:89:88:82: 69:f9:db:65:d7:2c:ff:9f:91:b0:89:12:d6:06:34:ea:5a:ad: 0e:67:f3:15:6f:84:49:66:61:53:ee:2a:b8:79:0e:2a:e7:15: d7:16:98:d0:38:f6:ae:6b:89:59:11:8a:26:6c:b5:7c:79:d8: 76:88:36:76:10:2c:e6:e5:67:53:1c:66:ba:a6:29:b7:dd:d8: 9b:50:d1:34:8d:2a:e6:ad:1c:4d:c0:ac:d8:66:9e:53:04:15: ca:f4:8b:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dZF5yoyEQCxlQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzc0NloXDTI1MDkxNzE0Mzc0NlowLzEtMCsGA1UEAxMk NTBlNDlhNWUtYWMxMC00MTZmLTkyZDItZWI2NmJhMjJmNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GkSReYELiywgUX0rw5DXNLFP6llRKJV6SB5 XWhNc1Y6IKwy8Ol3/OpTZmP8FM7OCZ6NUpSXTK8teb9Wfnv2uWmMJq3Wrj8SSqcv a7TmjudKeqSFqKDvTJ3wmW+FQhgAGc5cUHN2v1zYCLx2RBpP/U2AnLDi18MDXxZA LjR5SHrEOQCikFw2Mb9s3D4iwh9nQ6tn1BUc/kKaeBg9TsQNGBtA/qvZQHK1U59D 6phJHvNDEYRl1YWiosaCF+PePcIS0zFpmnUpJ5izautjsgn85j2mukGjCDvsO5wG Brww3PbuAhCWVvK2YmowQTV+r6gXaXxnFxm/rqNzIFhPvchxAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw906wQYAfVBRQKzEM7ypqYgLm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTFkNDc2ODUtM2FhYS0z MjVlLThiZjUtZjllNTNlMjk2OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4tIH0LWHehp6lsBRZDeCR9pP5ygThcLCU+/oMqBLOGCwX0FBZuQIm+ OptGVlGF3m1FSwHbqfv+H5zE37SikOWNFPXJnm/tMOpT6k8hd9Qm2X4CfWLnAXu7 AInjdeNhoX8Yk/8T32bJnWxJHfP0v2XEdV/aDI7xGcqnABl4RnCnjz1REXTGmxw+ bB86USo82/vTLxPwQjX+LXtftopgH4mIgmn522XXLP+fkbCJEtYGNOparQ5n8xVv hElmYVPuKrh5DirnFdcWmNA49q5riVkRiiZstXx52HaINnYQLOblZ1McZrqmKbfd 2JtQ0TSNKuatHE3ArNhmnlMEFcr0i3g= -----END CERTIFICATE-----Generated at Wed Jul 2 12:48:30 2025 by rpki-client