$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8f07685-0067-3a1e-9787-54daae0b7a84.roa File: a8f07685-0067-3a1e-9787-54daae0b7a84.roa (raw, json) Hash identifier: KwDLSF2KNOsUd86FsHiBDjYnc9MUIch7Y4Pyjq7uGxE= Subject key identifier: 5C:D0:A9:DD:DC:67:7A:C9:8F:72:3A:11:39:5B:AB:35:52:C2:FB:3F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7679299809843A9691A6E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8f07685-0067-3a1e-9787-54daae0b7a84.roa Signing time: Thu 19 Jun 2025 14:39:35 +0000 ROA not before: Thu 19 Jun 2025 14:39:35 +0000 ROA not after: Wed 17 Sep 2025 14:39:35 +0000 asID: 22773 IP address blocks: 72.208.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:79:29:98:09:84:3a:96:91:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:35 2025 GMT Not After : Sep 17 14:39:35 2025 GMT Subject: CN=7baf3b6f-f5dd-4395-aefd-b3e5d310065d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:49:5a:0c:7e:c2:57:12:a8:d4:25:e0:31: 9b:b5:5e:ef:9c:fc:19:1a:2d:a5:f6:54:5e:7b:2a: 70:ef:45:0f:fa:d1:68:a9:62:be:aa:0e:eb:03:7e: 9f:02:52:f5:cc:e0:e6:bd:33:da:9a:be:96:0c:de: 1e:3b:bc:74:b8:74:61:11:81:92:bf:6e:33:77:5a: 24:82:e8:39:2e:2a:ea:17:09:71:0e:12:7c:dc:ce: 3d:cd:74:b0:c7:39:73:22:1d:b0:6f:dd:d1:a5:49: 28:1a:45:b3:b6:b0:de:76:10:fa:04:e1:33:c1:3a: 17:94:4d:d9:6d:0b:5a:7a:c7:42:f7:c3:0b:20:6e: 15:53:e4:cb:86:87:7d:af:82:06:5a:81:78:bc:b2: 01:7d:1f:f0:c0:59:a1:5b:f5:bf:7e:a8:19:20:a3: f4:66:a0:c6:41:70:e9:fe:60:64:b8:01:e6:8c:4c: 7f:6c:b1:f4:c9:8a:d4:30:90:50:a7:08:d0:e8:7c: c7:30:55:7f:b1:66:44:18:c6:2a:d3:77:f1:94:37: a7:a5:6d:36:c3:a6:ba:be:dd:8d:44:c6:8d:a8:d4: 76:69:73:da:c7:8b:75:b7:5b:1a:f4:dd:41:00:e5: c5:d9:d7:c9:9f:75:92:c1:3d:33:e7:b2:26:32:27: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:A9:DD:DC:67:7A:C9:8F:72:3A:11:39:5B:AB:35:52:C2:FB:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8f07685-0067-3a1e-9787-54daae0b7a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d8:0e:8a:a0:aa:8e:77:1e:6c:b8:26:0c:38:8f:8d:90:f2: 31:3c:f9:96:48:61:33:7c:e7:3a:a3:31:71:d5:ca:54:cc:73: 2f:fc:a5:b2:fd:06:4d:97:65:f6:6e:03:d9:2c:ca:96:54:07: 52:48:61:a1:5a:13:c4:74:e8:fb:08:97:40:94:b5:99:56:34: 87:37:97:4c:c0:b6:2a:cb:dd:ba:f2:14:a5:1a:ff:27:83:a2: 71:0b:43:49:89:a8:8d:2e:eb:a8:08:ab:55:05:47:5e:4f:16: 35:90:94:9a:5a:3e:60:a6:37:ce:e0:5d:93:67:b2:64:66:57: 7e:9e:39:01:38:77:f8:4f:9a:96:0f:49:6f:1c:cc:a5:93:b5: a8:43:24:01:80:c4:da:41:11:b8:0d:b8:86:9a:2b:be:58:74: 23:dc:33:57:d8:22:ec:ed:b7:16:26:7e:c2:4f:63:e0:95:77: d1:af:32:39:b4:b1:b3:d4:55:ec:b9:2a:7d:db:87:a7:e5:58: 81:de:47:9b:d0:3d:59:6a:f0:e1:a1:c2:87:fb:17:7c:a5:c3: 99:f3:85:e4:49:89:2e:22:3c:c5:2f:3f:c5:4e:1e:18:b2:93: eb:9f:c2:cc:e1:bc:ce:8f:18:88:ac:31:1a:76:80:bf:fe:5b: a7:f8:bb:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dnkpmAmEOpaRpuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkzNVoXDTI1MDkxNzE0MzkzNVowLzEtMCsGA1UEAxMk N2JhZjNiNmYtZjVkZC00Mzk1LWFlZmQtYjNlNWQzMTAwNjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosZJWgx+wlcSqNQl4DGbtV7vnPwZGi2l9lRe eypw70UP+tFoqWK+qg7rA36fAlL1zODmvTPamr6WDN4eO7x0uHRhEYGSv24zd1ok gug5LirqFwlxDhJ83M49zXSwxzlzIh2wb93RpUkoGkWztrDedhD6BOEzwToXlE3Z bQtaesdC98MLIG4VU+TLhod9r4IGWoF4vLIBfR/wwFmhW/W/fqgZIKP0ZqDGQXDp /mBkuAHmjEx/bLH0yYrUMJBQpwjQ6HzHMFV/sWZEGMYq03fxlDenpW02w6a6vt2N RMaNqNR2aXPax4t1t1sa9N1BAOXF2dfJn3WSwT0z57ImMicJQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzQqd3cZ3rJj3I6ETlbqzVSwvs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYThmMDc2ODUtMDA2Ny0z YTFlLTk3ODctNTRkYWFlMGI3YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPYDoqgqo53Hmy4Jgw4j42Q8jE8+ZZIYTN85zqjMXHVylTMcy/8pbL9 Bk2XZfZuA9ksypZUB1JIYaFaE8R06PsIl0CUtZlWNIc3l0zAtirL3bryFKUa/yeD onELQ0mJqI0u66gIq1UFR15PFjWQlJpaPmCmN87gXZNnsmRmV36eOQE4d/hPmpYP SW8czKWTtahDJAGAxNpBEbgNuIaaK75YdCPcM1fYIuzttxYmfsJPY+CVd9GvMjm0 sbPUVey5Kn3bh6flWIHeR5vQPVlq8OGhwof7F3ylw5nzheRJiS4iPMUvP8VOHhiy k+ufwszhvM6PGIisMRp2gL/+W6f4u5s= -----END CERTIFICATE-----Generated at Mon Jun 30 15:13:20 2025 by rpki-client