$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1e68e7a-1f6a-3597-a1d5-033b17d2bc25.roa File: a1e68e7a-1f6a-3597-a1d5-033b17d2bc25.roa (raw, json) Hash identifier: CI0sgn3wCFHGB5O93VdxhrKNJptaw1I9pt1oYl5SbMo= Subject key identifier: F5:14:8C:19:2E:A0:C2:D8:C4:53:E0:57:8B:A6:C6:17:D0:34:7D:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75AD21A51D0A02BCEF2900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1e68e7a-1f6a-3597-a1d5-033b17d2bc25.roa Signing time: Thu 19 Jun 2025 14:37:59 +0000 ROA not before: Thu 19 Jun 2025 14:37:59 +0000 ROA not after: Wed 17 Sep 2025 14:37:59 +0000 asID: 22773 IP address blocks: 72.201.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:ad:21:a5:1d:0a:02:bc:ef:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:59 2025 GMT Not After : Sep 17 14:37:59 2025 GMT Subject: CN=7702b1fe-d5fc-4cd6-a0cc-4d8528ec4549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:45:49:df:05:67:3b:15:80:8c:10:da:8f: 70:36:04:af:30:0b:a5:cb:b0:95:2a:82:b3:50:8c: 67:1d:c9:65:f3:f6:da:aa:c5:61:4f:c2:b6:9e:c4: f4:53:f8:b9:0d:8e:97:d3:5a:af:16:a6:28:72:f7: 5d:8a:56:5d:68:9f:aa:00:5d:77:2b:8b:97:52:c4: d0:61:e7:8f:62:cb:a0:51:7c:03:7e:3f:9e:5b:43: 50:4d:48:8a:77:25:6b:ab:42:ce:ed:5f:82:a1:52: 22:36:33:d7:aa:b1:70:ba:69:11:29:fc:81:a3:39: a2:89:3f:9c:bc:58:12:d4:79:e4:ec:a8:e9:26:0f: 83:c5:cf:fd:c3:34:a3:d9:4b:14:5e:11:30:08:45: 85:92:29:e3:b7:82:ff:74:c7:9e:f8:6e:5a:c6:e6: 5e:77:ee:74:a6:01:4f:83:9c:ad:5f:57:b9:32:51: e2:cb:39:d5:33:ad:ce:92:87:68:df:5c:25:0c:88: 7f:9a:c6:a3:0d:88:be:ac:9d:66:cc:6b:97:1d:ab: 5b:15:91:0b:dd:6d:36:9f:58:57:dd:f6:ea:d8:e5: 40:16:86:0e:d5:3b:22:69:66:76:d2:7d:e3:c8:f0: 24:17:36:d7:23:0c:9f:b8:24:81:55:81:51:ee:e7: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:14:8C:19:2E:A0:C2:D8:C4:53:E0:57:8B:A6:C6:17:D0:34:7D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1e68e7a-1f6a-3597-a1d5-033b17d2bc25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f3:d7:fe:9d:b1:e1:10:9b:4b:63:4c:24:22:55:ad:2e:24: 08:4f:a4:c7:16:83:d8:f7:53:3f:f0:56:20:62:33:fc:d3:be: 76:04:22:be:a9:8f:b7:ae:a6:fe:79:2e:8c:3a:d7:63:78:ba: bb:c3:31:bf:86:19:4e:36:28:7a:2c:6b:ab:e2:05:6b:22:1c: 1d:ac:ae:e7:bd:8d:25:56:2f:84:43:6f:12:d8:22:c9:45:8e: 12:21:c2:c2:a4:c2:f1:b8:67:b4:25:59:02:58:e2:ae:17:8b: 10:4b:b0:66:d0:a7:99:cd:e1:70:f7:aa:52:b5:af:e0:1c:df: 8d:39:c8:5a:d0:88:2d:9a:7c:8b:01:01:59:ba:c1:79:94:d7: 9a:f8:9f:00:53:61:13:55:10:98:4b:46:7e:8d:ba:27:05:1d: 75:d2:4f:55:32:f9:99:f7:fa:58:dc:a1:d3:29:2b:84:9a:83: 1d:18:75:92:92:26:3c:aa:b8:af:f5:8c:19:76:28:b5:03:f2: de:31:e9:cc:10:af:3b:a6:0a:1c:6c:10:0f:79:2e:08:b7:34: e8:ab:9a:e2:26:56:b7:8c:23:ba:b1:0e:e2:58:65:7f:17:fe: a2:59:2c:74:32:8f:a8:93:60:ac:38:5d:68:1f:d2:75:4a:98: 39:e4:be:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+da0hpR0KArzvKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzc1OVoXDTI1MDkxNzE0Mzc1OVowLzEtMCsGA1UEAxMk NzcwMmIxZmUtZDVmYy00Y2Q2LWEwY2MtNGQ4NTI4ZWM0NTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+FFSd8FZzsVgIwQ2o9wNgSvMAuly7CVKoKz UIxnHcll8/baqsVhT8K2nsT0U/i5DY6X01qvFqYocvddilZdaJ+qAF13K4uXUsTQ YeePYsugUXwDfj+eW0NQTUiKdyVrq0LO7V+CoVIiNjPXqrFwumkRKfyBozmiiT+c vFgS1Hnk7KjpJg+Dxc/9wzSj2UsUXhEwCEWFkinjt4L/dMee+G5axuZed+50pgFP g5ytX1e5MlHiyznVM63Okodo31wlDIh/msajDYi+rJ1mzGuXHatbFZEL3W02n1hX 3fbq2OVAFoYO1TsiaWZ20n3jyPAkFzbXIwyfuCSBVYFR7ud86QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUUjBkuoMLYxFPgV4umxhfQNH1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTFlNjhlN2EtMWY2YS0z NTk3LWExZDUtMDMzYjE3ZDJiYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMmLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbz1/6dseEQm0tjTCQiVa0uJAhPpMcWg9j3Uz/wViBiM/zTvnYEIr6p j7eupv55Low612N4urvDMb+GGU42KHosa6viBWsiHB2srue9jSVWL4RDbxLYIslF jhIhwsKkwvG4Z7QlWQJY4q4XixBLsGbQp5nN4XD3qlK1r+Ac3405yFrQiC2afIsB AVm6wXmU15r4nwBTYRNVEJhLRn6NuicFHXXST1Uy+Zn3+ljcodMpK4Sagx0YdZKS JjyquK/1jBl2KLUD8t4x6cwQrzumChxsEA95Lgi3NOirmuImVreMI7qxDuJYZX8X /qJZLHQyj6iTYKw4XWgf0nVKmDnkvlI= -----END CERTIFICATE-----Generated at Mon Jun 30 09:04:29 2025 by rpki-client