$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89d6052b-6ca5-3c8f-bce8-495ef1eda322.roa File: 89d6052b-6ca5-3c8f-bce8-495ef1eda322.roa (raw, json) Hash identifier: e6z0EJoRaLsWLQgKHkRy0OGrUM6XNm+Y2afpNimb1Oo= Subject key identifier: BC:06:BC:C3:19:37:15:C3:73:BF:35:FD:4B:F5:18:DA:04:0B:F8:CD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77FF3219701193DACBDE28 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89d6052b-6ca5-3c8f-bce8-495ef1eda322.roa Signing time: Thu 19 Jun 2025 14:42:40 +0000 ROA not before: Thu 19 Jun 2025 14:42:40 +0000 ROA not after: Wed 17 Sep 2025 14:42:40 +0000 asID: 22773 IP address blocks: 72.223.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:ff:32:19:70:11:93:da:cb:de:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:40 2025 GMT Not After : Sep 17 14:42:40 2025 GMT Subject: CN=8a873caf-bee4-4664-be3a-dd0bfaaed37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:df:a6:bd:35:df:ee:99:34:ec:ae:6e:f3: 3f:5d:d1:b5:38:50:a7:58:90:5d:46:34:7e:28:ac: 10:e6:ea:5e:4a:0b:7a:d2:e7:cd:e4:57:84:42:a2: 02:b8:c8:df:97:0f:49:80:d0:f7:8d:81:98:0f:f1: 2f:bb:7f:63:dc:ba:f5:ad:6b:ce:f8:5a:79:79:7f: 99:f1:28:e7:77:3b:f8:46:9b:5e:d1:f4:d6:7e:e5: 69:e1:c5:86:fe:ee:39:43:a4:25:9f:25:2b:08:a3: 19:99:94:d3:58:29:45:fa:75:50:ee:8f:f4:7a:ab: e2:74:68:bc:0c:7c:fe:f1:8c:49:12:67:bb:13:95: 07:c5:92:ac:12:11:8c:b5:0c:82:0d:19:32:f5:bf: dd:fa:27:bf:d5:be:e1:e4:75:89:e3:be:1e:83:c5: e4:25:e9:69:3a:41:96:f4:4a:00:76:ce:12:10:27: d3:5d:f9:03:ac:e8:03:8d:6f:b9:30:f3:8f:a5:02: 9d:7d:73:9b:44:79:ba:73:c4:0a:21:e4:46:c5:ca: d1:87:de:b7:bd:9f:b1:96:cc:b5:dd:ac:c3:c3:82: e1:12:d6:fa:f8:42:5f:84:22:db:94:9d:ea:81:45: fe:c0:19:06:cc:d8:e8:64:60:6b:1f:d3:89:1d:8d: 05:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:06:BC:C3:19:37:15:C3:73:BF:35:FD:4B:F5:18:DA:04:0B:F8:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89d6052b-6ca5-3c8f-bce8-495ef1eda322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:66:f0:70:d5:20:19:9d:7a:34:f6:7f:50:33:c1:6b:eb:ad: 26:f5:a7:3b:0b:2d:df:fe:6c:d7:dc:f7:c7:3a:f3:c8:51:45: 9a:7e:4a:f8:df:26:b9:1a:91:ba:1e:82:b7:1a:6a:71:32:a2: 9a:cc:e8:ca:ff:b5:0b:08:d4:d2:5a:f4:57:75:d7:33:cf:a2: 5c:a2:7c:13:91:3c:03:2a:ac:da:21:f5:d4:ac:58:35:f3:6b: 12:ab:b9:1b:9c:06:c1:a1:e2:ce:f7:02:5f:e9:73:e7:ef:c4: 64:25:ad:31:10:a9:a8:53:dd:1b:c1:65:62:98:3a:88:d1:de: 2f:64:d1:be:70:53:05:09:66:99:cd:cb:4d:8a:05:7c:c4:b7: 0c:f8:51:f1:e5:98:9f:ae:6f:7c:65:c3:23:8c:bf:dd:10:93: b0:7f:2f:36:67:73:29:7a:44:f6:92:16:2e:7c:d0:15:17:67: 5d:ed:a4:e2:e9:c0:9d:9f:1d:8e:8f:c6:65:76:da:6d:3c:b2: 14:31:27:86:c5:87:cd:3f:4d:ef:0c:8b:17:7b:60:6e:47:d4: 53:65:0a:2a:6f:f9:9c:a2:9a:84:b1:5b:e4:74:9d:f5:a1:35: 0f:ff:91:e9:0e:8e:a5:5e:a9:89:3d:3f:2c:5a:af:4c:7d:76: 69:b4:d3:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d/8yGXARk9rL3igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDI0MFoXDTI1MDkxNzE0NDI0MFowLzEtMCsGA1UEAxMk OGE4NzNjYWYtYmVlNC00NjY0LWJlM2EtZGQwYmZhYWVkMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG3fpr013+6ZNOyubvM/XdG1OFCnWJBdRjR+ KKwQ5upeSgt60ufN5FeEQqICuMjflw9JgND3jYGYD/Evu39j3Lr1rWvO+Fp5eX+Z 8Sjndzv4Rpte0fTWfuVp4cWG/u45Q6QlnyUrCKMZmZTTWClF+nVQ7o/0eqvidGi8 DHz+8YxJEme7E5UHxZKsEhGMtQyCDRky9b/d+ie/1b7h5HWJ474eg8XkJelpOkGW 9EoAds4SECfTXfkDrOgDjW+5MPOPpQKdfXObRHm6c8QKIeRGxcrRh963vZ+xlsy1 3azDw4LhEtb6+EJfhCLblJ3qgUX+wBkGzNjoZGBrH9OJHY0F/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwGvMMZNxXDc781/Uv1GNoEC/jNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODlkNjA1MmItNmNhNS0z YzhmLWJjZTgtNDk1ZWYxZWRhMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhm8HDVIBmdejT2f1AzwWvrrSb1pzsLLd/+bNfc98c688hRRZp+Svjf JrkakboegrcaanEyoprM6Mr/tQsI1NJa9Fd11zPPolyifBORPAMqrNoh9dSsWDXz axKruRucBsGh4s73Al/pc+fvxGQlrTEQqahT3RvBZWKYOojR3i9k0b5wUwUJZpnN y02KBXzEtwz4UfHlmJ+ub3xlwyOMv90Qk7B/LzZncyl6RPaSFi580BUXZ13tpOLp wJ2fHY6PxmV22m08shQxJ4bFh80/Te8Mixd7YG5H1FNlCipv+ZyimoSxW+R0nfWh NQ//kekOjqVeqYk9Pyxar0x9dmm005g= -----END CERTIFICATE-----Generated at Tue Jul 1 21:05:06 2025 by rpki-client