$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60e57b5f-cdad-3b93-bca5-d8bdd542cba2.roa File: 60e57b5f-cdad-3b93-bca5-d8bdd542cba2.roa (raw, json) Hash identifier: PTWqOysS5lgayBl8KvzjlYIgjSw58qoikfHVz9sQ8xs= Subject key identifier: 66:02:6A:3B:5C:85:E0:63:5C:72:5E:16:45:5F:2D:5F:26:7F:39:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75DA41C9D95B6487403AE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60e57b5f-cdad-3b93-bca5-d8bdd542cba2.roa Signing time: Thu 19 Jun 2025 14:38:20 +0000 ROA not before: Thu 19 Jun 2025 14:38:20 +0000 ROA not after: Wed 17 Sep 2025 14:38:20 +0000 asID: 22773 IP address blocks: 72.201.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:da:41:c9:d9:5b:64:87:40:3a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:20 2025 GMT Not After : Sep 17 14:38:20 2025 GMT Subject: CN=d22bd3dd-2e28-4e83-a4d4-0de12b72bc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:77:92:06:c9:c2:e8:05:84:04:42:68:e7: 75:7d:6f:64:b7:ee:db:dc:2f:89:7c:ab:50:9d:05: 14:25:71:de:e2:b4:cd:78:2c:f5:32:7a:bb:4b:41: 86:b2:3b:63:e7:4f:c5:2b:80:c0:5c:32:e2:97:81: 62:ac:2f:18:aa:d4:9a:18:17:e1:f2:c5:ce:a5:cb: e8:d8:76:f9:17:95:77:68:74:42:cb:86:db:b5:10: 06:7c:6b:62:0a:7e:5c:71:f1:0c:da:ae:22:52:a8: e3:23:db:6e:7c:7e:f1:2d:e7:26:c4:b4:64:b6:90: 25:c8:67:19:96:1b:ed:2f:35:ac:2f:d4:c7:32:f0: 25:e5:61:21:d9:31:c8:6a:b4:74:4d:77:08:64:3d: 32:e5:f8:54:6a:c6:89:f9:52:1f:73:17:d8:e9:9a: d4:eb:75:08:5c:27:c2:78:00:6e:ce:c8:6f:d6:41: ef:ff:74:a3:15:ab:e5:b7:69:2d:12:12:8c:67:aa: a9:c8:99:c7:ee:cd:e3:3f:5e:0e:ba:5f:47:23:82: 68:95:f8:c1:43:9a:48:e8:ff:0b:f4:f4:e1:78:53: 70:d5:07:0f:c1:37:d0:dd:9f:4b:a6:5a:e1:d0:fd: 30:db:0f:64:9b:54:b0:bd:17:33:2c:0c:5f:65:26: ee:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:02:6A:3B:5C:85:E0:63:5C:72:5E:16:45:5F:2D:5F:26:7F:39:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60e57b5f-cdad-3b93-bca5-d8bdd542cba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e9:27:dd:72:4f:33:75:67:4a:dc:f7:a1:38:df:12:55:3c: de:0f:8c:69:0e:f6:c8:92:b7:83:30:82:bd:91:5d:29:43:e6: 8c:fc:b8:fc:ff:14:44:5c:c6:c6:8d:a7:a1:55:cd:d2:03:a1: 7a:44:ec:e7:53:4f:96:34:7e:f2:fe:7b:b9:e2:6c:1c:7d:93: 6a:74:ba:52:db:01:61:3a:b2:c8:c8:1e:e9:c3:6a:af:2e:6b: 2f:b9:76:bc:1b:30:2f:97:bc:12:b5:c7:63:79:53:8b:32:be: c4:a5:ad:37:2f:a2:49:ed:2b:1e:bf:b6:c6:d2:49:52:87:2a: e8:e9:e7:7f:9b:30:41:52:a5:0f:01:6e:f4:b6:78:95:7c:f7: a4:72:38:ae:5b:37:50:54:24:e1:51:05:de:b9:4a:46:26:7e: b5:5e:ae:f3:dc:70:ca:39:50:27:7c:ea:81:ea:75:b5:4f:43: 3b:3a:76:d9:32:6c:25:e3:50:66:13:46:23:30:49:f1:2a:2f: 8f:78:2c:27:11:62:f0:ca:f0:fe:02:3c:0e:a8:45:b8:c8:71: ba:36:6f:8a:32:cb:44:98:65:d1:b9:7f:48:f4:3d:ef:97:2e: de:5f:a0:67:a0:c1:ca:ab:c2:c0:38:e9:92:07:9b:36:b5:39: 32:41:6c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+ddpBydlbZIdAOuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgyMFoXDTI1MDkxNzE0MzgyMFowLzEtMCsGA1UEAxMk ZDIyYmQzZGQtMmUyOC00ZTgzLWE0ZDQtMGRlMTJiNzJiYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHB3kgbJwugFhARCaOd1fW9kt+7b3C+JfKtQ nQUUJXHe4rTNeCz1Mnq7S0GGsjtj50/FK4DAXDLil4FirC8YqtSaGBfh8sXOpcvo 2Hb5F5V3aHRCy4bbtRAGfGtiCn5ccfEM2q4iUqjjI9tufH7xLecmxLRktpAlyGcZ lhvtLzWsL9THMvAl5WEh2THIarR0TXcIZD0y5fhUasaJ+VIfcxfY6ZrU63UIXCfC eABuzshv1kHv/3SjFavlt2ktEhKMZ6qpyJnH7s3jP14Oul9HI4JolfjBQ5pI6P8L 9PTheFNw1QcPwTfQ3Z9Lplrh0P0w2w9km1SwvRczLAxfZSbuzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYCajtcheBjXHJeFkVfLV8mfzmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjBlNTdiNWYtY2RhZC0z YjkzLWJjYTUtZDhiZGQ1NDJjYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMn5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXpJ91yTzN1Z0rc96E43xJVPN4PjGkO9siSt4Mwgr2RXSlD5oz8uPz/ FERcxsaNp6FVzdIDoXpE7OdTT5Y0fvL+e7nibBx9k2p0ulLbAWE6ssjIHunDaq8u ay+5drwbMC+XvBK1x2N5U4syvsSlrTcvokntKx6/tsbSSVKHKujp53+bMEFSpQ8B bvS2eJV896RyOK5bN1BUJOFRBd65SkYmfrVervPccMo5UCd86oHqdbVPQzs6dtky bCXjUGYTRiMwSfEqL494LCcRYvDK8P4CPA6oRbjIcbo2b4oyy0SYZdG5f0j0Pe+X Lt5foGegwcqrwsA46ZIHmza1OTJBbKA= -----END CERTIFICATE-----Generated at Tue Jul 1 03:43:50 2025 by rpki-client