$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b680b1ed-a169-361d-b1d4-6c944dca1531.roa File: b680b1ed-a169-361d-b1d4-6c944dca1531.roa (raw, json) Hash identifier: 1PoBkAUijUNgA6t6TLZNkB348UoqLTI+/Gz/u0iaDGQ= Subject key identifier: 19:50:63:A0:47:3D:D4:44:92:C8:2A:03:85:6C:DA:C5:B9:18:6A:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75C3B1BA9A7E9813E49400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b680b1ed-a169-361d-b1d4-6c944dca1531.roa Signing time: Thu 19 Jun 2025 14:38:10 +0000 ROA not before: Thu 19 Jun 2025 14:38:10 +0000 ROA not after: Wed 17 Sep 2025 14:38:10 +0000 asID: 22773 IP address blocks: 72.201.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:c3:b1:ba:9a:7e:98:13:e4:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:10 2025 GMT Not After : Sep 17 14:38:10 2025 GMT Subject: CN=99ab3f7b-ef6b-4997-9018-44a3de1a6af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:98:d8:27:13:7b:9a:66:5e:bd:94:3c:cb: 65:5d:77:de:29:95:71:ff:ed:c7:8b:c6:92:ee:56: 43:fa:a1:4d:43:bb:a0:f6:cd:4d:0f:2f:9f:5c:f6: f9:ef:ba:e2:c8:c3:e2:e4:bd:92:90:27:5b:5c:0e: 21:c9:61:0d:0d:d3:0b:18:53:03:64:94:6b:37:0e: 70:16:9a:9f:7a:f6:f4:90:95:f1:e0:98:b0:de:78: 07:ca:20:fb:21:9d:19:9e:1c:11:11:4f:98:6e:4d: e3:44:8a:91:5c:89:c3:fc:b8:ea:48:b3:73:7d:27: 2b:13:70:b0:7b:01:d5:ad:19:8f:ae:20:d8:a1:b9: d0:ec:e6:91:1d:f8:1e:d8:c4:c6:62:5c:d9:de:8c: 47:4d:4f:88:8f:e8:9c:e5:d5:ed:57:3c:a8:72:b7: 41:73:06:a7:27:51:af:c7:5e:d8:0e:a8:3f:b2:23: 30:e7:83:bb:3a:ba:2a:8c:ed:69:72:41:81:da:ca: c0:6d:33:a6:f9:e2:9c:93:75:b5:98:29:70:74:25: 42:20:af:bd:31:1f:70:76:7e:52:b7:31:2e:98:aa: 4f:3c:fc:79:62:17:e8:8f:16:fa:c8:82:d3:fc:6d: 8b:2b:57:1a:73:78:98:51:a9:73:a4:65:7b:b5:12: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:50:63:A0:47:3D:D4:44:92:C8:2A:03:85:6C:DA:C5:B9:18:6A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b680b1ed-a169-361d-b1d4-6c944dca1531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:0c:2c:1b:89:6f:8e:ed:01:ab:fd:f3:8c:90:3a:e8:29:b3: 07:1a:11:d2:2f:fe:20:25:e0:e6:45:26:26:e1:0c:db:56:e3: 96:e0:97:a0:03:aa:25:fa:30:7c:0f:7f:ef:c8:28:b2:58:2a: 10:20:1e:e8:70:9a:c4:a5:75:ff:9d:a4:b1:4d:74:b6:8b:a9: 89:21:c9:ef:cd:26:c9:84:b1:ce:66:c7:b0:f4:91:a7:68:b6: 8a:1c:7e:b0:1f:11:3b:f5:d6:57:bf:72:13:4d:03:c0:c0:69: fa:61:fb:db:6b:91:52:77:94:86:b4:4d:84:c6:9f:1f:55:c5: 7d:02:8c:39:c0:ac:d0:6e:a8:c3:10:07:a4:a9:45:a0:02:95: bc:e5:63:d1:5f:6e:2b:2b:29:36:31:3d:42:94:36:9b:29:21: b5:7b:e4:2c:48:6f:99:28:96:56:30:05:af:f2:bd:1a:20:7e: 2b:d8:bf:cc:c7:09:8b:5d:da:54:4d:78:15:6f:32:14:d6:29: 10:8f:19:d3:ac:b2:b0:02:38:8b:a1:3e:09:3b:d8:6c:53:ca: d9:8f:b9:e8:63:05:03:58:2c:48:b9:2f:e3:a8:1d:2d:85:f7: d9:b2:74:0b:b3:62:19:a0:f3:30:27:bc:bd:c1:f2:13:40:6d: 3f:d3:15:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dcOxupp+mBPklAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgxMFoXDTI1MDkxNzE0MzgxMFowLzEtMCsGA1UEAxMk OTlhYjNmN2ItZWY2Yi00OTk3LTkwMTgtNDRhM2RlMWE2YWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeKY2CcTe5pmXr2UPMtlXXfeKZVx/+3Hi8aS 7lZD+qFNQ7ug9s1NDy+fXPb577riyMPi5L2SkCdbXA4hyWENDdMLGFMDZJRrNw5w Fpqfevb0kJXx4Jiw3ngHyiD7IZ0ZnhwREU+Ybk3jRIqRXInD/LjqSLNzfScrE3Cw ewHVrRmPriDYobnQ7OaRHfge2MTGYlzZ3oxHTU+Ij+ic5dXtVzyocrdBcwanJ1Gv x17YDqg/siMw54O7OroqjO1pckGB2srAbTOm+eKck3W1mClwdCVCIK+9MR9wdn5S tzEumKpPPPx5Yhfojxb6yILT/G2LK1cac3iYUalzpGV7tRK02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlQY6BHPdREksgqA4Vs2sW5GGoIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjY4MGIxZWQtYTE2OS0z NjFkLWIxZDQtNmM5NDRkY2ExNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMMLBuJb47tAav984yQOugpswcaEdIv/iAl4OZFJibhDNtW45bgl6AD qiX6MHwPf+/IKLJYKhAgHuhwmsSldf+dpLFNdLaLqYkhye/NJsmEsc5mx7D0kado toocfrAfETv11le/chNNA8DAafph+9trkVJ3lIa0TYTGnx9VxX0CjDnArNBuqMMQ B6SpRaAClbzlY9FfbisrKTYxPUKUNpspIbV75CxIb5kollYwBa/yvRogfivYv8zH CYtd2lRNeBVvMhTWKRCPGdOssrACOIuhPgk72GxTytmPuehjBQNYLEi5L+OoHS2F 99mydAuzYhmg8zAnvL3B8hNAbT/TFbY= -----END CERTIFICATE-----Generated at Wed Jul 2 15:20:20 2025 by rpki-client