$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3d85895-6399-3afc-b52f-52849ae0536a.roa File: d3d85895-6399-3afc-b52f-52849ae0536a.roa (raw, json) Hash identifier: bbUsIkXqt284P5lt3bbNj5ppUlBaR5LyBkOEVRq3D9U= Subject key identifier: 33:E1:5D:62:C5:2D:69:54:62:55:78:CE:98:D0:F5:1E:88:CA:03:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A96A98279A03B62191F900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3d85895-6399-3afc-b52f-52849ae0536a.roa Signing time: Fri 20 Jun 2025 09:33:51 +0000 ROA not before: Fri 20 Jun 2025 09:33:51 +0000 ROA not after: Thu 18 Sep 2025 09:33:51 +0000 asID: 22773 IP address blocks: 72.193.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:6a:98:27:9a:03:b6:21:91:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:51 2025 GMT Not After : Sep 18 09:33:51 2025 GMT Subject: CN=fc896382-94d1-4217-8b3a-6b8ca7ebd6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b3:63:b1:a2:13:b0:c5:1b:19:3d:97:ce:54: 9b:82:4f:f5:f4:62:79:85:72:73:10:02:b2:9e:8a: 01:b1:03:f4:11:98:4d:fb:08:24:77:53:c0:7d:ed: cd:37:9e:0e:a6:12:42:2e:87:49:ed:eb:ff:bc:41: 38:37:39:07:3f:8c:86:bc:bc:ab:01:26:e8:7e:b5: db:b8:b9:23:98:04:e3:8b:ce:d6:56:ab:8c:0c:0a: c0:74:7f:a0:ce:e9:58:ce:26:d6:c9:84:02:13:40: 88:cb:33:66:2f:f4:b7:02:41:4b:75:6d:f3:7a:d7: 37:0b:0c:e5:ae:85:71:94:d8:af:9d:34:98:7b:77: 62:42:53:0c:60:57:8c:17:4a:7d:83:aa:9f:1a:5b: 77:7a:08:a8:26:fe:bd:c9:d1:c6:3b:8f:83:e7:c7: 41:cc:5f:6a:d1:93:4b:93:a3:41:d9:de:18:83:7d: d5:10:15:e0:3f:32:2a:91:a9:fb:86:74:37:c5:7d: 26:26:6a:42:05:a5:b4:68:02:f4:1d:76:0d:72:74: 65:7f:38:9b:39:88:d9:10:98:a7:55:ab:c8:0c:d3: f2:79:42:38:6b:83:03:fe:86:37:ca:0f:a1:92:0d: 11:7c:ea:d8:11:86:02:cf:d8:9a:38:c1:bf:52:28: 45:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E1:5D:62:C5:2D:69:54:62:55:78:CE:98:D0:F5:1E:88:CA:03:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3d85895-6399-3afc-b52f-52849ae0536a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ac:fe:b7:90:9e:c0:14:44:0a:41:5f:13:91:9a:1b:21:78: 70:3d:a8:a7:63:02:62:4d:39:e6:ff:f1:20:fe:a9:1c:09:f8: 71:dc:e9:76:3f:dc:7d:fa:03:80:5e:6c:d6:fd:dd:a9:b0:14: a0:52:e5:6d:9d:b0:76:9e:4c:84:8c:d8:3a:3b:24:38:24:4e: 56:d5:65:b9:e7:dc:a9:6a:aa:5a:34:c8:ad:c4:7c:a4:3c:11: eb:24:73:88:42:3e:70:a7:f0:8a:29:b4:8d:15:12:68:c0:78: 2f:1d:b5:1d:82:1f:02:fa:41:6b:30:38:89:6d:85:ec:50:0a: 33:1d:34:ef:94:ef:81:ae:70:e6:07:20:25:9b:27:ec:cb:e0: 79:c8:10:7f:61:e8:1c:3e:65:2d:df:70:96:db:72:5f:f5:c6: 36:91:2f:e6:f4:87:e6:4a:ca:c9:a2:b2:d4:49:0a:b4:ad:5e: cb:e3:7f:85:1f:d5:c1:0f:5f:f4:14:c2:8c:f9:ee:e9:6d:3a: 1d:a3:0b:53:a1:e0:85:28:d8:18:74:5d:67:f4:28:40:33:2a: 1b:95:82:9f:1d:ef:df:b4:69:4c:4c:e9:7f:a7:17:79:a4:d3: 09:48:40:1d:77:e5:5e:a8:92:e1:4b:38:33:8a:f5:24:35:5c: a5:96:0c:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqWqYJ5oDtiGR+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzM1MVoXDTI1MDkxODA5MzM1MVowLzEtMCsGA1UEAxMk ZmM4OTYzODItOTRkMS00MjE3LThiM2EtNmI4Y2E3ZWJkNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbNjsaITsMUbGT2XzlSbgk/19GJ5hXJzEAKy nooBsQP0EZhN+wgkd1PAfe3NN54OphJCLodJ7ev/vEE4NzkHP4yGvLyrASbofrXb uLkjmATji87WVquMDArAdH+gzulYzibWyYQCE0CIyzNmL/S3AkFLdW3zetc3Cwzl roVxlNivnTSYe3diQlMMYFeMF0p9g6qfGlt3egioJv69ydHGO4+D58dBzF9q0ZNL k6NB2d4Yg33VEBXgPzIqkan7hnQ3xX0mJmpCBaW0aAL0HXYNcnRlfzibOYjZEJin VavIDNPyeUI4a4MD/oY3yg+hkg0RfOrYEYYCz9iaOMG/UihFqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPhXWLFLWlUYlV4zpjQ9R6IygMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNkODU4OTUtNjM5OS0z YWZjLWI1MmYtNTI4NDlhZTA1MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGms/reQnsAURApBXxORmhsheHA9qKdjAmJNOeb/8SD+qRwJ+HHc6XY/ 3H36A4BebNb93amwFKBS5W2dsHaeTISM2Do7JDgkTlbVZbnn3Klqqlo0yK3EfKQ8 Eeskc4hCPnCn8IoptI0VEmjAeC8dtR2CHwL6QWswOIlthexQCjMdNO+U74GucOYH ICWbJ+zL4HnIEH9h6Bw+ZS3fcJbbcl/1xjaRL+b0h+ZKysmistRJCrStXsvjf4Uf 1cEPX/QUwoz57ultOh2jC1Oh4IUo2Bh0XWf0KEAzKhuVgp8d79+0aUxM6X+nF3mk 0wlIQB135V6okuFLODOK9SQ1XKWWDC4= -----END CERTIFICATE-----Generated at Tue Jul 1 22:40:43 2025 by rpki-client