$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf3f7f59-a9b8-3987-8e81-cfdfeddc9272.roa File: bf3f7f59-a9b8-3987-8e81-cfdfeddc9272.roa (raw, json) Hash identifier: BiCKChH3LI+kpvOQJtsL3RRNfVcKDKDZnOUfmOsbGrc= Subject key identifier: 62:B2:72:67:CA:D8:AF:7C:99:8F:06:81:E0:A1:AD:ED:B8:09:C5:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9424600FD310731C07200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf3f7f59-a9b8-3987-8e81-cfdfeddc9272.roa Signing time: Fri 20 Jun 2025 09:33:32 +0000 ROA not before: Fri 20 Jun 2025 09:33:32 +0000 ROA not after: Thu 18 Sep 2025 09:33:32 +0000 asID: 22773 IP address blocks: 72.193.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:42:46:00:fd:31:07:31:c0:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:32 2025 GMT Not After : Sep 18 09:33:32 2025 GMT Subject: CN=6d914da4-513c-4c44-82e9-81641281c2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:eb:f1:22:51:d5:f9:0a:c0:1f:8a:ac:79: f5:8e:26:3d:6a:72:43:b1:1d:3b:d9:82:bf:08:ec: 55:e6:cd:a4:ae:56:93:7c:75:49:4a:36:fa:96:80: 36:02:5d:ab:de:78:91:1c:c3:74:dc:2a:1b:44:73: 13:96:c7:94:ad:4e:ec:15:2d:34:e3:7d:a7:6c:b1: 01:4c:ab:cd:ca:fa:fe:0b:59:0f:43:f0:97:a1:69: ee:25:6b:6c:fc:19:b9:19:3d:bb:ef:ff:3e:dc:b9: 79:f3:fd:7a:3d:62:bb:47:02:02:49:90:e0:31:59: 38:a3:2d:63:3e:50:74:cb:94:ad:4c:0f:f9:9e:53: b4:fc:d6:ed:21:8a:aa:77:67:c7:0f:29:48:e0:7a: fc:51:96:49:bf:b6:75:12:26:64:ef:15:6e:30:36: 92:a0:9e:12:09:c8:01:53:de:cb:3c:ac:7f:a6:e3: 58:9b:c4:5c:ed:b1:fc:4b:ff:6e:b3:19:bc:de:73: 4c:96:8c:c7:e0:74:58:f4:10:4c:ca:84:a3:3c:40: 26:07:08:98:2f:27:87:d7:d4:96:d8:01:bc:75:d9: a2:ae:7b:5b:da:15:03:52:d0:20:de:8f:2e:42:1e: 31:4b:a2:95:37:b2:36:a2:46:8a:ec:a4:3e:5a:5d: 12:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B2:72:67:CA:D8:AF:7C:99:8F:06:81:E0:A1:AD:ED:B8:09:C5:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf3f7f59-a9b8-3987-8e81-cfdfeddc9272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:cd:fc:e3:b2:2f:4f:5d:ec:84:73:36:8e:ca:a8:f6:a4:4c: 38:35:ea:8d:de:28:da:d7:52:b3:83:82:dc:37:4a:48:94:1a: b0:90:a8:67:40:1d:22:2e:a9:6e:54:8b:1d:c2:2a:54:ef:78: f5:73:04:35:fa:5f:cc:67:4c:a6:f5:35:8d:a2:43:fc:e3:0f: e6:d5:6b:e6:a1:a6:c5:d0:14:b4:ae:c4:d3:7f:ab:2b:6b:a9: a4:2b:39:c2:8e:b8:72:9d:af:30:86:e8:14:f2:7c:7d:38:e9: c9:2b:42:c2:60:7e:07:c8:90:1b:e9:83:00:7e:cc:50:db:a1: 1b:fa:74:6d:5d:7d:85:7b:2e:2d:ca:1c:47:01:40:75:d5:87: b8:ff:b7:b6:64:28:e8:33:52:11:51:7b:49:3d:50:6f:77:0d: 48:6a:44:6d:4a:c7:75:85:35:6f:7a:7c:2e:97:d1:04:6b:ec: 8d:27:99:a0:77:11:02:51:a6:53:ee:c0:12:e8:05:99:64:1b: 00:81:48:61:2d:13:a0:8a:f7:1f:1f:ff:5c:2f:23:8c:07:5f: 67:e7:5d:5e:8f:40:e2:71:d4:2f:4e:13:9e:4b:68:c2:58:97: af:26:0c:56:65:c5:4e:cf:c9:e9:5a:ff:e7:56:ce:bc:04:2e: 03:58:e0:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqUJGAP0xBzHAcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzMzMloXDTI1MDkxODA5MzMzMlowLzEtMCsGA1UEAxMk NmQ5MTRkYTQtNTEzYy00YzQ0LTgyZTktODE2NDEyODFjMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLjr8SJR1fkKwB+KrHn1jiY9anJDsR072YK/ COxV5s2krlaTfHVJSjb6loA2Al2r3niRHMN03CobRHMTlseUrU7sFS00432nbLEB TKvNyvr+C1kPQ/CXoWnuJWts/Bm5GT277/8+3Ll58/16PWK7RwICSZDgMVk4oy1j PlB0y5StTA/5nlO0/NbtIYqqd2fHDylI4Hr8UZZJv7Z1EiZk7xVuMDaSoJ4SCcgB U97LPKx/puNYm8Rc7bH8S/9usxm83nNMlozH4HRY9BBMyoSjPEAmBwiYLyeH19SW 2AG8ddmirntb2hUDUtAg3o8uQh4xS6KVN7I2okaK7KQ+Wl0SFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKycmfK2K98mY8GgeChre24CcX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmYzZjdmNTktYTliOC0z OTg3LThlODEtY2ZkZmVkZGM5MjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTN/OOyL09d7IRzNo7KqPakTDg16o3eKNrXUrODgtw3SkiUGrCQqGdA HSIuqW5Uix3CKlTvePVzBDX6X8xnTKb1NY2iQ/zjD+bVa+ahpsXQFLSuxNN/qytr qaQrOcKOuHKdrzCG6BTyfH046ckrQsJgfgfIkBvpgwB+zFDboRv6dG1dfYV7Li3K HEcBQHXVh7j/t7ZkKOgzUhFRe0k9UG93DUhqRG1Kx3WFNW96fC6X0QRr7I0nmaB3 EQJRplPuwBLoBZlkGwCBSGEtE6CK9x8f/1wvI4wHX2fnXV6PQOJx1C9OE55LaMJY l68mDFZlxU7Pyela/+dWzrwELgNY4M8= -----END CERTIFICATE-----Generated at Tue Jul 1 06:49:06 2025 by rpki-client