$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ac28f66-0254-3f65-b7d9-a76b7e372812.roa File: 9ac28f66-0254-3f65-b7d9-a76b7e372812.roa (raw, json) Hash identifier: F1PsEcaLyAblzh+Aw5LQLM1rAYAXnuNNa7FftQoAJ4s= Subject key identifier: 5A:8C:0D:02:C4:7A:0B:C4:1C:32:C2:48:FB:68:BE:ED:11:37:20:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77674C1F31F04D501E6600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ac28f66-0254-3f65-b7d9-a76b7e372812.roa Signing time: Thu 19 Jun 2025 14:41:28 +0000 ROA not before: Thu 19 Jun 2025 14:41:28 +0000 ROA not after: Wed 17 Sep 2025 14:41:28 +0000 asID: 22773 IP address blocks: 72.217.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:67:4c:1f:31:f0:4d:50:1e:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:28 2025 GMT Not After : Sep 17 14:41:28 2025 GMT Subject: CN=16a5d9b9-204f-4bde-aa0e-74259d4c90fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:2e:95:43:d4:1a:06:34:3f:04:e3:8b:6e: 92:8a:1c:20:31:95:67:7d:36:d6:40:ce:ab:61:a5: 7f:2f:3e:ea:8f:7c:d0:79:c5:9e:62:dc:35:fa:55: 67:a4:cb:5f:ca:2a:b3:68:e8:36:57:7a:ab:f2:0a: 3f:cb:fa:01:24:3f:e4:74:ce:66:d7:c0:01:f8:1a: d5:e5:6e:c3:44:0e:60:db:bb:4e:74:e2:a5:d4:40: 75:38:15:22:d0:61:4d:3a:a3:c5:ed:c0:8d:8c:57: 6a:bf:d2:e6:9e:0a:f6:26:dd:fa:be:04:68:2f:4a: 6c:35:05:b1:1a:c8:67:40:b7:83:04:a3:88:0e:d6: df:72:e3:48:75:c4:78:0a:38:e6:79:e9:8a:2c:61: e9:c4:b8:3d:fb:cf:42:d0:6e:74:01:ac:e2:06:55: c5:50:5c:01:e2:36:ee:a5:7f:d8:3f:51:dd:e3:cc: fa:76:f7:71:f0:13:df:ed:d1:c5:09:06:1f:00:08: 8a:be:ae:64:b4:be:e8:a4:61:be:cd:75:90:b3:47: ec:13:3c:02:4b:7b:02:54:4d:4c:3c:1b:22:9b:a3: 30:57:48:d4:44:d7:1e:d4:81:25:6e:83:c9:9e:95: d5:6a:ca:01:5b:e9:35:92:2c:e1:4c:7f:c0:73:9f: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8C:0D:02:C4:7A:0B:C4:1C:32:C2:48:FB:68:BE:ED:11:37:20:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ac28f66-0254-3f65-b7d9-a76b7e372812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b0:55:25:8e:56:3c:c3:b1:0f:f4:08:64:c9:c9:28:4e:85: e8:57:a0:06:98:d4:c0:ce:22:df:b5:9b:e6:98:a6:24:46:1f: a7:3b:dd:51:42:34:12:c6:33:aa:8c:30:77:13:44:a1:70:5c: be:4f:06:a7:86:ab:f7:43:c7:75:31:d4:0d:9f:db:12:fa:67: 52:f1:1f:c9:e2:09:a2:f9:7c:19:d8:61:10:8b:9f:93:cb:4f: c8:dc:14:51:e3:04:f6:39:ad:48:5b:92:93:bf:08:78:0a:70: 6e:7a:f0:ff:27:e4:d7:25:65:df:f5:09:2a:4d:9c:92:11:78: cc:27:a9:72:a3:61:e5:5d:a3:a1:83:47:48:43:30:18:e2:38: ca:ae:3c:33:54:f4:1a:b8:7e:38:03:86:70:78:92:70:26:4f: ba:1f:b7:69:75:90:1a:ca:15:d1:00:18:25:a7:c9:1d:c1:36: c5:7f:de:73:3c:f7:87:18:0e:65:f6:df:f2:62:0d:87:f6:c0: a0:9e:35:4b:8b:47:64:f0:8e:44:cb:b8:88:5a:d6:4d:36:f8: 0a:08:f3:c4:f1:16:d4:d8:cf:e8:c0:2b:22:0b:99:f5:e1:d3: 5b:14:ab:e6:11:6f:5f:59:98:3a:43:2e:b7:b4:61:9e:d1:dd: 68:c7:42:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d2dMHzHwTVAeZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDEyOFoXDTI1MDkxNzE0NDEyOFowLzEtMCsGA1UEAxMk MTZhNWQ5YjktMjA0Zi00YmRlLWFhMGUtNzQyNTlkNGM5MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi10ulUPUGgY0PwTji26SihwgMZVnfTbWQM6r YaV/Lz7qj3zQecWeYtw1+lVnpMtfyiqzaOg2V3qr8go/y/oBJD/kdM5m18AB+BrV 5W7DRA5g27tOdOKl1EB1OBUi0GFNOqPF7cCNjFdqv9Lmngr2Jt36vgRoL0psNQWx GshnQLeDBKOIDtbfcuNIdcR4CjjmeemKLGHpxLg9+89C0G50AaziBlXFUFwB4jbu pX/YP1Hd48z6dvdx8BPf7dHFCQYfAAiKvq5ktL7opGG+zXWQs0fsEzwCS3sCVE1M PBsim6MwV0jURNce1IElboPJnpXVasoBW+k1kizhTH/Ac5+zWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqMDQLEegvEHDLCSPtovu0RNyCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWFjMjhmNjYtMDI1NC0z ZjY1LWI3ZDktYTc2YjdlMzcyODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOwVSWOVjzDsQ/0CGTJyShOhehXoAaY1MDOIt+1m+aYpiRGH6c73VFC NBLGM6qMMHcTRKFwXL5PBqeGq/dDx3Ux1A2f2xL6Z1LxH8niCaL5fBnYYRCLn5PL T8jcFFHjBPY5rUhbkpO/CHgKcG568P8n5NclZd/1CSpNnJIReMwnqXKjYeVdo6GD R0hDMBjiOMquPDNU9Bq4fjgDhnB4knAmT7oft2l1kBrKFdEAGCWnyR3BNsV/3nM8 94cYDmX23/JiDYf2wKCeNUuLR2TwjkTLuIha1k02+AoI88TxFtTYz+jAKyILmfXh 01sUq+YRb19ZmDpDLre0YZ7R3WjHQgE= -----END CERTIFICATE-----Generated at Tue Jul 1 13:57:03 2025 by rpki-client