$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d2c6fb0-035e-353e-9429-e5fc87e8ac3a.roa File: 8d2c6fb0-035e-353e-9429-e5fc87e8ac3a.roa (raw, json) Hash identifier: 4dVAn9o2MlsqYeRsJ9sLFXZqksWzWZ+zYO2RMJoP+2g= Subject key identifier: 03:DE:AF:6E:2C:EC:E7:FA:90:D2:FB:3C:49:E3:19:EA:73:3B:DC:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E775E82F5E8E7CB931EA200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d2c6fb0-035e-353e-9429-e5fc87e8ac3a.roa Signing time: Thu 19 Jun 2025 14:41:24 +0000 ROA not before: Thu 19 Jun 2025 14:41:24 +0000 ROA not after: Wed 17 Sep 2025 14:41:24 +0000 asID: 22773 IP address blocks: 72.217.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:5e:82:f5:e8:e7:cb:93:1e:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:24 2025 GMT Not After : Sep 17 14:41:24 2025 GMT Subject: CN=504c854c-7c66-476d-8fae-3d50cba953c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:aa:91:06:90:e0:11:0b:13:dc:ec:97:fc: 7b:f1:cc:6d:03:93:45:87:18:6a:23:cf:3d:a4:3d: 4a:ae:87:88:e4:24:89:07:5d:ef:26:c2:6d:c4:0a: b1:61:be:23:5b:62:27:26:3a:b3:61:1d:9c:4d:22: cb:3f:de:76:6b:39:b5:3c:55:97:7a:28:bd:12:0c: a3:a6:2c:8f:b6:85:4c:a8:73:cb:5d:95:4b:19:a1: e7:74:0a:a1:cf:9a:e0:d0:3a:c8:5c:30:ce:ae:e3: 81:d8:8e:70:b6:3b:b5:1e:ab:e1:45:56:d3:00:59: 98:2e:ee:e9:cc:c7:d9:b6:60:a7:e9:74:a2:cf:b6: 85:14:6b:e2:f6:d7:c2:82:03:20:02:4d:d1:3b:4c: 9d:7a:1f:7b:a9:c6:9c:aa:d5:c8:5a:ec:1e:88:66: 9e:c5:84:26:cf:e7:d1:96:58:2a:1b:00:96:87:52: 79:0f:84:16:3c:7d:d1:52:33:04:51:5d:96:0d:4c: 29:7c:4f:68:f8:42:b9:6a:3b:76:aa:b3:7f:28:6a: 4b:d7:6a:7a:14:2f:77:6e:e0:85:98:0a:71:4c:ae: 99:51:62:30:4d:45:f1:f9:a6:f7:9a:fb:21:03:3a: d1:a9:90:2b:f7:d9:37:07:73:a5:8a:10:22:fc:5d: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DE:AF:6E:2C:EC:E7:FA:90:D2:FB:3C:49:E3:19:EA:73:3B:DC:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d2c6fb0-035e-353e-9429-e5fc87e8ac3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:38:b0:29:3b:29:c7:b1:f8:c4:5d:cf:e9:cb:e6:92:7a:a0: 4f:9e:0a:08:4f:9e:69:8e:c2:47:d6:1e:94:68:41:f7:f1:c0: 27:6f:00:8f:d8:b1:6b:b3:b7:24:a1:8e:5b:22:af:c9:1d:8c: 0a:e7:f8:19:6f:1c:ce:61:f9:fb:0e:9f:b8:15:3b:e7:03:f5: 83:6d:a8:a6:fa:9c:91:1e:c4:1c:90:d6:08:cf:6e:19:af:42: d7:f9:fa:81:5a:92:03:54:ea:c4:46:ad:d9:ba:d6:86:f3:9e: 32:a8:99:f8:d3:76:12:b8:5b:95:3a:b9:86:9e:93:81:68:21: 89:c7:5f:27:df:47:88:f8:c7:f5:ad:82:4c:06:ba:18:b7:06: 54:3e:67:42:ee:b0:ac:47:57:bb:5c:98:b0:fa:d8:85:8e:e0: 1d:68:2e:3a:01:79:4b:45:54:46:52:e3:88:6d:55:d6:03:af: 54:c6:87:51:64:f9:c5:bf:f2:f9:83:fa:49:44:5d:85:a4:92: ae:bc:1f:c6:e1:f2:2d:4a:8a:3e:0f:88:26:27:f9:51:9c:f5: ad:3e:c2:55:33:81:26:26:b7:67:3d:f7:6c:9a:2d:bb:07:82: 7c:19:78:ea:b0:7f:1b:9a:c0:1e:4e:b6:f3:d6:3d:73:b1:ea: 33:23:b9:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d16C9ejny5MeogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDEyNFoXDTI1MDkxNzE0NDEyNFowLzEtMCsGA1UEAxMk NTA0Yzg1NGMtN2M2Ni00NzZkLThmYWUtM2Q1MGNiYTk1M2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeqqkQaQ4BELE9zsl/x78cxtA5NFhxhqI889 pD1KroeI5CSJB13vJsJtxAqxYb4jW2InJjqzYR2cTSLLP952azm1PFWXeii9Egyj piyPtoVMqHPLXZVLGaHndAqhz5rg0DrIXDDOruOB2I5wtju1HqvhRVbTAFmYLu7p zMfZtmCn6XSiz7aFFGvi9tfCggMgAk3RO0ydeh97qcacqtXIWuweiGaexYQmz+fR llgqGwCWh1J5D4QWPH3RUjMEUV2WDUwpfE9o+EK5ajt2qrN/KGpL12p6FC93buCF mApxTK6ZUWIwTUXx+ab3mvshAzrRqZAr99k3B3OlihAi/F1qMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPer24s7Of6kNL7PEnjGepzO9y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGQyYzZmYjAtMDM1ZS0z NTNlLTk0MjktZTVmYzg3ZThhYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc4sCk7Kcex+MRdz+nL5pJ6oE+eCghPnmmOwkfWHpRoQffxwCdvAI/Y sWuztyShjlsir8kdjArn+BlvHM5h+fsOn7gVO+cD9YNtqKb6nJEexByQ1gjPbhmv Qtf5+oFakgNU6sRGrdm61obznjKomfjTdhK4W5U6uYaek4FoIYnHXyffR4j4x/Wt gkwGuhi3BlQ+Z0LusKxHV7tcmLD62IWO4B1oLjoBeUtFVEZS44htVdYDr1TGh1Fk +cW/8vmD+klEXYWkkq68H8bh8i1Kij4PiCYn+VGc9a0+wlUzgSYmt2c992yaLbsH gnwZeOqwfxuawB5OtvPWPXOx6jMjue4= -----END CERTIFICATE-----Generated at Tue Jul 1 03:50:34 2025 by rpki-client