$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ace014a4-61a5-3005-a054-75f084057a6b.roa File: ace014a4-61a5-3005-a054-75f084057a6b.roa (raw, json) Hash identifier: mCGpb5TbsoRKNrqqeKVimvnCMibDbEtPCIKbuM7VxOE= Subject key identifier: 30:56:00:50:2B:4D:3E:34:35:CE:DE:D4:ED:83:DD:F5:62:14:8E:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E778C487A92C0EBD630E180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ace014a4-61a5-3005-a054-75f084057a6b.roa Signing time: Thu 19 Jun 2025 14:41:45 +0000 ROA not before: Thu 19 Jun 2025 14:41:45 +0000 ROA not after: Wed 17 Sep 2025 14:41:45 +0000 asID: 22773 IP address blocks: 72.217.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:8c:48:7a:92:c0:eb:d6:30:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:45 2025 GMT Not After : Sep 17 14:41:45 2025 GMT Subject: CN=432ac619-e569-4b60-ab5f-ab209033b499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:a1:3e:a2:8f:15:ce:78:9f:48:7e:2f:e0: 52:1b:8c:72:75:33:3e:d0:f3:3a:63:a5:38:c8:e4: 7c:d0:2c:f9:e7:b1:cd:ba:c6:cb:90:11:87:c2:eb: d7:bd:30:29:c6:2c:5b:55:85:fa:bc:6c:53:7a:48: 2f:e4:2b:93:f7:d5:cf:f5:c9:57:95:5d:38:71:8f: 09:5f:cc:bd:dd:9d:8e:11:7c:ea:f7:aa:5a:1c:61: 7f:c3:4a:de:03:bc:9a:77:c4:9d:26:c9:fc:4b:87: d0:69:51:19:8c:c0:bd:dc:ee:98:11:fa:fd:b8:a6: d8:4e:4b:73:fb:c1:aa:17:de:52:83:13:64:ac:3a: 9f:68:67:55:44:f7:bb:57:b0:d2:21:79:39:2b:be: fc:b3:52:14:0b:8e:44:49:07:07:8e:8e:5b:fd:30: 04:0b:fb:17:2a:a4:14:82:73:46:9f:58:45:17:56: 65:ba:dd:02:c3:95:69:4b:b7:92:55:82:01:72:2e: a8:7f:e2:42:df:d6:74:a6:cc:34:01:00:be:63:25: c8:b8:5a:14:fa:65:8d:4e:df:11:1d:d1:ef:f8:67: f2:b3:1c:63:a9:46:0d:00:fd:46:b2:e2:5a:15:8c: ee:a5:df:0f:73:06:e0:c5:de:28:11:74:96:f4:da: 56:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:56:00:50:2B:4D:3E:34:35:CE:DE:D4:ED:83:DD:F5:62:14:8E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ace014a4-61a5-3005-a054-75f084057a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ca:05:0c:60:c7:d0:06:a4:a0:d1:bd:fe:13:3b:c8:be:da: 21:dc:cf:6c:c2:b1:63:f6:da:2a:82:a0:38:f1:1d:1e:d9:04: 69:3a:a9:e6:85:cd:61:8a:31:4e:68:e1:46:d7:60:7d:b3:8a: f9:f8:5d:e5:70:7a:c9:bd:43:9a:54:f4:21:b1:dd:76:ef:de: 24:f3:a8:b8:8d:52:47:98:5d:45:5f:b5:be:d1:a9:e7:9b:be: df:eb:e2:40:57:3c:5f:3c:b7:eb:e0:14:24:70:c4:1f:a3:06: 19:e2:f3:a8:76:ff:06:c7:0d:4e:de:44:70:7b:6e:eb:b1:95: 82:72:8e:72:66:64:b4:6e:bf:af:d1:b6:29:d4:40:77:de:13: c1:d5:0b:b4:38:3e:f1:e9:cb:16:95:6f:03:3c:7a:bc:f8:4d: bd:ff:28:55:08:76:94:38:63:6c:d1:27:7d:c0:a9:28:e0:b1: 0c:3f:db:1b:c6:c4:46:ba:70:c3:4b:63:dc:5f:4e:a9:0f:f0: 3f:90:b3:3e:54:3d:14:fb:b2:c5:f5:bc:eb:ff:00:31:f0:e6: 7f:e5:98:a6:f3:7d:02:b2:4c:aa:a7:e2:96:9c:78:88:9e:0b: af:d1:77:61:52:15:db:2a:e3:43:4f:d1:33:9d:2d:19:d0:ba: d8:87:7b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d4xIepLA69Yw4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDE0NVoXDTI1MDkxNzE0NDE0NVowLzEtMCsGA1UEAxMk NDMyYWM2MTktZTU2OS00YjYwLWFiNWYtYWIyMDkwMzNiNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4uhPqKPFc54n0h+L+BSG4xydTM+0PM6Y6U4 yOR80Cz557HNusbLkBGHwuvXvTApxixbVYX6vGxTekgv5CuT99XP9clXlV04cY8J X8y93Z2OEXzq96paHGF/w0reA7yad8SdJsn8S4fQaVEZjMC93O6YEfr9uKbYTktz +8GqF95SgxNkrDqfaGdVRPe7V7DSIXk5K778s1IUC45ESQcHjo5b/TAEC/sXKqQU gnNGn1hFF1Zlut0Cw5VpS7eSVYIBci6of+JC39Z0psw0AQC+YyXIuFoU+mWNTt8R HdHv+GfysxxjqUYNAP1GsuJaFYzupd8Pcwbgxd4oEXSW9NpWLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBWAFArTT40Nc7e1O2D3fViFI7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWNlMDE0YTQtNjFhNS0z MDA1LWEwNTQtNzVmMDg0MDU3YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXKBQxgx9AGpKDRvf4TO8i+2iHcz2zCsWP22iqCoDjxHR7ZBGk6qeaF zWGKMU5o4UbXYH2zivn4XeVwesm9Q5pU9CGx3Xbv3iTzqLiNUkeYXUVftb7Rqeeb vt/r4kBXPF88t+vgFCRwxB+jBhni86h2/wbHDU7eRHB7buuxlYJyjnJmZLRuv6/R tinUQHfeE8HVC7Q4PvHpyxaVbwM8erz4Tb3/KFUIdpQ4Y2zRJ33AqSjgsQw/2xvG xEa6cMNLY9xfTqkP8D+Qsz5UPRT7ssX1vOv/ADHw5n/lmKbzfQKyTKqn4paceIie C6/Rd2FSFdsq40NP0TOdLRnQutiHe1w= -----END CERTIFICATE-----Generated at Mon Jun 30 19:48:33 2025 by rpki-client