$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce96e977-24a5-3392-bb8e-2afe8cedb0e0.roa File: ce96e977-24a5-3392-bb8e-2afe8cedb0e0.roa (raw, json) Hash identifier: yNKLw0w6TtIAop/VEkqBufGgcS0cnen9BEGMMQmm9J0= Subject key identifier: 01:5A:3C:17:F6:EC:AA:82:0B:E8:BE:AC:F9:E8:DC:24:A8:EA:5D:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76012237CCFE663BB86CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce96e977-24a5-3392-bb8e-2afe8cedb0e0.roa Signing time: Thu 19 Jun 2025 14:38:39 +0000 ROA not before: Thu 19 Jun 2025 14:38:39 +0000 ROA not after: Wed 17 Sep 2025 14:38:39 +0000 asID: 22773 IP address blocks: 72.206.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:01:22:37:cc:fe:66:3b:b8:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:39 2025 GMT Not After : Sep 17 14:38:39 2025 GMT Subject: CN=1c2beb46-4bda-475c-81d7-55da44644371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fc:76:38:54:c6:db:20:e6:4e:04:6e:07:92: 61:af:5d:b4:02:d6:e9:1c:bf:eb:c4:e1:a0:18:5c: 8b:2b:84:59:b1:50:b7:a3:23:f0:f6:bf:2c:fd:ee: b7:a4:8d:b0:b0:c6:3c:f5:2f:f6:d8:0e:a6:c1:62: 0c:e3:e2:0d:96:3c:9f:35:8c:9c:72:c0:ba:91:a4: 7c:79:97:29:e0:78:c5:a1:a4:54:b1:e7:52:db:eb: d7:04:f0:f2:7f:fd:3c:e2:36:e5:25:b1:1c:c4:7f: 38:a8:f1:df:e9:76:97:3c:57:bc:13:5b:9a:b1:7a: aa:b8:13:2b:90:df:cd:2e:c9:20:07:d4:c3:02:ad: ed:99:93:13:f9:cd:6b:e7:0c:06:e1:6e:72:17:f8: 34:4f:5d:e3:ef:84:68:48:6d:9b:96:07:94:c5:58: 3e:c4:d9:30:95:8f:87:b1:23:e2:a9:37:6f:cf:61: de:8c:57:3e:f7:cc:84:cc:4d:c0:f8:62:9a:c8:1c: f3:93:95:8e:4c:3c:4f:c5:94:06:84:0c:de:3b:b3: 52:32:3f:1d:62:c8:32:63:4e:cd:87:a8:53:b2:81: 7a:38:94:c8:91:ff:22:37:86:4c:fe:24:6b:41:f3: 21:80:4a:fd:86:66:39:36:d8:58:c4:cd:22:a9:f2: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5A:3C:17:F6:EC:AA:82:0B:E8:BE:AC:F9:E8:DC:24:A8:EA:5D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce96e977-24a5-3392-bb8e-2afe8cedb0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:16:ef:e7:16:78:66:b0:8a:53:87:1d:ec:7d:ea:09:ab:65: ff:72:cd:92:22:63:49:10:3d:1d:d2:06:95:3f:f3:bc:ee:1a: 2b:cb:69:2a:0e:95:1a:42:cd:9b:8c:c8:bd:d6:04:53:2d:f4: ac:ed:8d:fa:8c:f3:9f:d9:da:ed:5e:c0:6c:39:a3:5d:df:f3: 31:6d:a9:f6:ae:77:6e:14:43:7a:96:d7:80:d2:4e:95:33:e4: 6e:aa:83:34:37:1f:86:2e:49:51:66:3d:d7:8f:e6:de:d2:12: e4:9a:17:33:6d:20:f1:d6:c7:31:57:7d:af:2c:8e:a5:12:f0: 6e:08:e2:fd:1b:40:fa:cc:1f:ed:1d:61:64:59:09:cd:11:e5: 70:0a:c8:cf:c5:53:ee:68:08:45:8d:c5:de:5a:b7:15:b9:ad: ba:0d:00:81:ec:7a:13:4b:7e:57:7b:1d:7c:7c:92:ff:8a:e1: 9f:d1:e0:fb:11:f2:7a:92:09:62:e7:2f:0e:2e:4c:15:a5:48: d5:3b:98:8e:aa:1b:0f:b5:0c:64:ba:92:4a:c4:56:c4:a7:97: c7:84:34:ef:77:d7:6d:3a:43:5a:d9:7a:39:21:3c:dc:fd:08: 9a:02:ea:f0:69:56:ac:b1:84:f7:af:99:93:26:95:6a:b9:6e: d8:33:74:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dgEiN8z+Zju4bMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgzOVoXDTI1MDkxNzE0MzgzOVowLzEtMCsGA1UEAxMk MWMyYmViNDYtNGJkYS00NzVjLTgxZDctNTVkYTQ0NjQ0MzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/x2OFTG2yDmTgRuB5Jhr120AtbpHL/rxOGg GFyLK4RZsVC3oyPw9r8s/e63pI2wsMY89S/22A6mwWIM4+INljyfNYyccsC6kaR8 eZcp4HjFoaRUsedS2+vXBPDyf/084jblJbEcxH84qPHf6XaXPFe8E1uasXqquBMr kN/NLskgB9TDAq3tmZMT+c1r5wwG4W5yF/g0T13j74RoSG2blgeUxVg+xNkwlY+H sSPiqTdvz2HejFc+98yEzE3A+GKayBzzk5WOTDxPxZQGhAzeO7NSMj8dYsgyY07N h6hTsoF6OJTIkf8iN4ZM/iRrQfMhgEr9hmY5NthYxM0iqfIT2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFaPBf27KqCC+i+rPno3CSo6l08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2U5NmU5NzctMjRhNS0z MzkyLWJiOGUtMmFmZThjZWRiMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUW7+cWeGawilOHHex96gmrZf9yzZIiY0kQPR3SBpU/87zuGivLaSoO lRpCzZuMyL3WBFMt9KztjfqM85/Z2u1ewGw5o13f8zFtqfaud24UQ3qW14DSTpUz 5G6qgzQ3H4YuSVFmPdeP5t7SEuSaFzNtIPHWxzFXfa8sjqUS8G4I4v0bQPrMH+0d YWRZCc0R5XAKyM/FU+5oCEWNxd5atxW5rboNAIHsehNLfld7HXx8kv+K4Z/R4PsR 8nqSCWLnLw4uTBWlSNU7mI6qGw+1DGS6kkrEVsSnl8eENO931206Q1rZejkhPNz9 CJoC6vBpVqyxhPevmZMmlWq5btgzdEM= -----END CERTIFICATE-----Generated at Tue Jul 1 18:27:48 2025 by rpki-client