$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba02f0aa-ffdd-326a-8c62-b3871f94dfc2.roa File: ba02f0aa-ffdd-326a-8c62-b3871f94dfc2.roa (raw, json) Hash identifier: YSFDET93MJmMexHzo7II7lH+9algPCPt+DIXo4RHSak= Subject key identifier: B2:84:2E:0A:1D:9D:F1:45:DD:DF:7A:F0:21:60:85:D0:8D:8D:9D:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364AC6414FDA4036009900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba02f0aa-ffdd-326a-8c62-b3871f94dfc2.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.218.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4a:c6:41:4f:da:40:36:00:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=110a1ec6-6310-4495-826d-befd90fc3d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:a0:27:e1:df:83:da:0f:8e:5e:58:d1:b6: 84:ab:71:c1:52:f4:a3:4e:61:b3:0e:e6:57:24:9c: 03:38:ef:49:b4:20:61:a2:46:14:b6:b1:08:c8:6f: 61:01:1b:d1:4b:8d:ef:d7:be:f2:61:c1:8e:c4:93: 26:71:72:d3:61:4b:61:ea:da:0f:58:40:ff:2b:3c: 3f:ef:b7:f7:ee:90:90:6f:83:4d:bc:09:6e:b6:31: fa:db:c6:cd:bf:76:7a:43:9b:0e:90:98:1a:88:9c: 12:8a:4d:ea:49:73:48:23:2c:90:31:d3:cb:14:aa: 8d:7f:32:a2:a2:53:d6:c9:15:34:d2:4f:26:90:9f: b4:fe:0a:cd:3e:cc:ef:90:6a:21:56:4d:a5:49:64: 52:1b:a3:1b:51:6b:ea:83:bb:e2:6c:eb:a7:05:c6: 6e:3c:cd:ed:51:34:7b:a0:3f:f8:0f:a7:6b:e5:19: 26:64:f2:f6:18:75:66:54:b6:40:81:ca:4d:53:67: 5d:e6:f2:4c:2f:1f:47:b0:38:33:75:82:2f:84:f9: 86:5b:7e:0a:95:76:2e:1e:29:00:42:54:0d:7d:17: c5:e7:88:a7:6a:5a:0d:1a:b1:00:8c:a8:00:e4:82: cb:05:27:33:04:b5:64:0d:a6:a0:28:7b:51:c2:0e: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:84:2E:0A:1D:9D:F1:45:DD:DF:7A:F0:21:60:85:D0:8D:8D:9D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba02f0aa-ffdd-326a-8c62-b3871f94dfc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:20:71:c2:e1:aa:2a:77:db:86:c1:d1:fe:40:58:9a:1f:ee: be:97:e5:d4:07:ee:ed:45:1d:2a:3d:dd:9d:fa:76:f7:20:a8: 64:f5:da:3e:e0:13:ae:fd:f9:3e:e5:b2:91:61:5b:a5:87:fb: d0:99:63:31:b7:87:48:f8:a3:96:8c:ec:39:2f:32:76:5c:62: 0e:4f:65:88:a3:4b:f7:e2:0e:43:c9:ff:bc:e9:7b:20:86:0d: ad:1b:e6:c1:f3:eb:8b:3b:be:5a:83:10:6b:50:d4:00:a6:d1: 49:7a:bc:6c:08:30:04:0d:a2:57:d8:16:9d:7e:cb:cf:dc:16: ab:ab:d2:c8:f9:a0:6a:90:d9:48:e4:b2:94:66:92:a1:ce:61: a7:87:67:b4:23:45:85:e1:e9:2c:1b:d9:eb:58:b0:4a:87:fe: 51:31:9c:8d:65:a6:ba:bc:52:5a:bc:bd:9d:46:ae:48:d8:ad: 13:41:45:d9:98:0b:6e:29:8c:e5:11:3d:a0:1c:e5:72:af:a2: 80:a4:3a:17:e3:2b:b3:c2:ae:8c:3c:64:30:5a:3b:9a:ba:a7: 1a:ca:3d:96:dc:c8:1b:81:78:5a:c0:9d:c0:94:8c:05:ba:46: 3a:73:31:37:48:d9:81:02:ce:6f:f1:3e:b2:77:c5:26:48:1c: 0b:6b:df:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkrGQU/aQDYAmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MTEwYTFlYzYtNjMxMC00NDk1LTgyNmQtYmVmZDkwZmMzZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEigJ+Hfg9oPjl5Y0baEq3HBUvSjTmGzDuZX JJwDOO9JtCBhokYUtrEIyG9hARvRS43v177yYcGOxJMmcXLTYUth6toPWED/Kzw/ 77f37pCQb4NNvAlutjH628bNv3Z6Q5sOkJgaiJwSik3qSXNIIyyQMdPLFKqNfzKi olPWyRU00k8mkJ+0/grNPszvkGohVk2lSWRSG6MbUWvqg7vibOunBcZuPM3tUTR7 oD/4D6dr5RkmZPL2GHVmVLZAgcpNU2dd5vJMLx9HsDgzdYIvhPmGW34KlXYuHikA QlQNfRfF54inaloNGrEAjKgA5ILLBSczBLVkDaagKHtRwg4/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKELgodnfFF3d968CFghdCNjZ0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmEwMmYwYWEtZmZkZC0z MjZhLThjNjItYjM4NzFmOTRkZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUgccLhqip324bB0f5AWJof7r6X5dQH7u1FHSo93Z36dvcgqGT12j7g E679+T7lspFhW6WH+9CZYzG3h0j4o5aM7DkvMnZcYg5PZYijS/fiDkPJ/7zpeyCG Da0b5sHz64s7vlqDEGtQ1ACm0Ul6vGwIMAQNolfYFp1+y8/cFqur0sj5oGqQ2Ujk spRmkqHOYaeHZ7QjRYXh6Swb2etYsEqH/lExnI1lprq8Ulq8vZ1GrkjYrRNBRdmY C24pjOURPaAc5XKvooCkOhfjK7PCrow8ZDBaO5q6pxrKPZbcyBuBeFrAncCUjAW6 RjpzMTdI2YECzm/xPrJ3xSZIHAtr3wo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:19 2025 by rpki-client