$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5d580f0-add7-3350-8b9e-f30ec3e5140d.roa File: c5d580f0-add7-3350-8b9e-f30ec3e5140d.roa (raw, json) Hash identifier: 6UlPNnTPSzOaUhLl32MK/X7xtvNrOi5Zxawe6RJnZCc= Subject key identifier: 28:8E:1C:E0:C9:5E:EA:51:98:73:9A:7A:AB:FC:D4:EE:36:99:67:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76BD8BB1EB3E4C63C33E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5d580f0-add7-3350-8b9e-f30ec3e5140d.roa Signing time: Thu 19 Jun 2025 14:40:08 +0000 ROA not before: Thu 19 Jun 2025 14:40:08 +0000 ROA not after: Wed 17 Sep 2025 14:40:08 +0000 asID: 22773 IP address blocks: 72.210.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:bd:8b:b1:eb:3e:4c:63:c3:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:08 2025 GMT Not After : Sep 17 14:40:08 2025 GMT Subject: CN=0e9f631e-24ec-4b3d-a058-03be71446374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fb:cd:c7:72:07:1f:f4:10:19:dd:42:25:56: 59:da:f5:4e:ea:2d:4b:71:e8:53:b9:55:4e:29:3f: ec:51:33:67:5f:f1:9b:16:28:52:b2:1f:0f:cb:df: e6:7a:d0:2e:73:35:1e:c8:bf:f5:3a:6f:15:d1:64: cb:9e:93:93:d2:5f:7b:1f:a3:16:6d:9f:2f:d5:8c: ff:d4:cc:7e:39:ef:c6:3a:b9:36:99:18:c6:ef:66: c0:25:39:e8:2b:b7:6e:5d:74:8c:0c:6f:c2:af:cd: bb:7f:da:a6:66:fb:16:ab:09:1b:74:c5:d5:03:86: 18:1d:dd:5e:76:67:33:21:6f:9a:48:ac:2b:be:a5: 4d:49:43:c0:c5:e1:ce:89:81:22:8d:ad:8a:ca:e2: e5:eb:7e:85:df:9e:26:30:0d:b7:4a:fd:ac:45:0d: 2c:b4:52:0f:f3:eb:3d:98:d5:7d:31:8b:ba:fc:20: cb:6a:90:a1:ca:9c:28:ab:d6:47:a5:0a:19:ab:52: 69:db:10:25:eb:a4:3c:a3:7a:65:7c:a9:fd:b7:a4: ec:5e:1e:ff:6b:97:06:9f:60:49:4e:4a:04:2e:9c: 96:ae:d7:bf:2f:4e:d5:28:3d:83:2b:aa:00:31:be: 59:4f:4a:1a:71:03:db:fc:06:e7:b8:67:f4:e1:18: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8E:1C:E0:C9:5E:EA:51:98:73:9A:7A:AB:FC:D4:EE:36:99:67:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5d580f0-add7-3350-8b9e-f30ec3e5140d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ec:22:f7:38:43:47:d4:7a:28:1a:e3:c8:7f:2a:c6:56:c9: 89:af:0d:82:a3:5d:25:f9:93:5d:f5:88:6d:2a:93:52:7e:a3: ab:0f:e7:51:f0:24:95:e6:3d:6d:dd:6b:af:8f:6c:1a:a2:4b: 5c:e7:f7:06:43:11:57:57:0a:8a:f1:62:b1:38:0f:f9:4e:6f: ae:9c:35:59:c6:09:1e:8c:82:17:f2:f0:f7:30:f0:64:40:ce: 8e:9f:0a:6c:5b:84:1d:66:03:10:c5:b2:c7:2e:b1:be:72:f9: 96:79:69:89:5e:32:55:25:7e:3b:12:06:b2:68:d4:c0:31:61: bf:33:37:fd:60:d2:17:50:9b:7b:b4:25:df:5a:32:cd:01:fd: fc:37:57:f5:15:e3:4d:61:42:8b:2c:06:3e:3a:0a:99:e1:47: d6:07:1d:06:6e:80:17:5e:de:37:a0:87:93:d4:35:82:6f:08: df:0c:2b:db:e7:db:62:88:d7:cf:67:6e:ae:5d:f4:d2:5c:17: 56:85:19:fc:dd:30:ac:40:cb:ae:34:36:e2:d4:98:b6:93:34: 06:92:36:58:cf:6f:39:7e:23:7a:68:12:dd:36:21:74:68:54: 97:04:60:70:6b:55:a3:e0:8e:cc:82:14:5b:3a:58:fa:2f:cc: 90:c5:2c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dr2Lses+TGPDPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAwOFoXDTI1MDkxNzE0NDAwOFowLzEtMCsGA1UEAxMk MGU5ZjYzMWUtMjRlYy00YjNkLWEwNTgtMDNiZTcxNDQ2Mzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/vNx3IHH/QQGd1CJVZZ2vVO6i1LcehTuVVO KT/sUTNnX/GbFihSsh8Py9/metAuczUeyL/1Om8V0WTLnpOT0l97H6MWbZ8v1Yz/ 1Mx+Oe/GOrk2mRjG72bAJTnoK7duXXSMDG/Cr827f9qmZvsWqwkbdMXVA4YYHd1e dmczIW+aSKwrvqVNSUPAxeHOiYEija2KyuLl636F354mMA23Sv2sRQ0stFIP8+s9 mNV9MYu6/CDLapChypwoq9ZHpQoZq1Jp2xAl66Q8o3plfKn9t6TsXh7/a5cGn2BJ TkoELpyWrte/L07VKD2DK6oAMb5ZT0oacQPb/AbnuGf04RhPgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiOHODJXupRmHOaeqv81O42mWc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzVkNTgwZjAtYWRkNy0z MzUwLThiOWUtZjMwZWMzZTUxNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADsIvc4Q0fUeiga48h/KsZWyYmvDYKjXSX5k131iG0qk1J+o6sP51Hw JJXmPW3da6+PbBqiS1zn9wZDEVdXCorxYrE4D/lOb66cNVnGCR6Mghfy8Pcw8GRA zo6fCmxbhB1mAxDFsscusb5y+ZZ5aYleMlUlfjsSBrJo1MAxYb8zN/1g0hdQm3u0 Jd9aMs0B/fw3V/UV401hQossBj46CpnhR9YHHQZugBde3jegh5PUNYJvCN8MK9vn 22KI189nbq5d9NJcF1aFGfzdMKxAy640NuLUmLaTNAaSNljPbzl+I3poEt02IXRo VJcEYHBrVaPgjsyCFFs6WPovzJDFLCM= -----END CERTIFICATE-----Generated at Mon Jun 30 12:51:45 2025 by rpki-client