$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3dd98d5-a7fb-38d3-b188-2699645102bf.roa File: d3dd98d5-a7fb-38d3-b188-2699645102bf.roa (raw, json) Hash identifier: rlQwPPrxhscT1hGZuxuym1EBDthOToIieCjXeOm3Vcw= Subject key identifier: 39:EA:A5:D1:BE:F8:04:3E:F8:60:58:E6:E2:DF:F5:F4:95:69:9F:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA664FDE37A6496030C6680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3dd98d5-a7fb-38d3-b188-2699645102bf.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.222.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:64:fd:e3:7a:64:96:03:0c:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=5b1cf331-8c00-4969-95a0-738975d5d065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:e6:18:85:52:31:48:0f:40:e6:ad:5d:54: 19:25:7f:88:1f:65:37:eb:4f:67:eb:8c:d2:9f:98: 1c:1f:4e:79:e6:c1:ab:63:6f:0d:ea:ed:02:25:03: c5:90:80:47:57:ff:17:8a:2d:7d:1e:7a:75:e3:eb: bb:68:e5:6b:76:4d:21:53:24:43:97:7c:2a:af:c8: 36:f0:7d:d9:07:f3:3a:75:bd:25:62:a7:f4:9a:67: 4e:34:21:79:c5:0c:4e:0e:43:9b:de:45:7a:80:45: 25:70:79:8c:ad:28:4e:a4:89:4f:14:a7:76:14:91: 91:f2:1d:27:ad:95:4e:90:32:65:a8:cb:74:d7:79: 27:fc:36:e4:b4:48:04:e0:0a:f6:df:64:eb:20:f7: 9d:6b:df:7c:ae:b5:03:07:a6:83:df:bd:38:58:d6: 22:fc:29:3e:33:d5:5c:3d:48:ed:d0:87:e8:48:fd: 5a:ec:1d:9d:7e:87:33:a2:78:3f:83:49:f1:5b:22: f4:26:a7:3f:11:87:13:ac:93:0b:10:f2:d0:1b:5a: 09:c7:23:0e:e4:21:c5:7a:48:eb:6b:fe:a0:71:0c: 84:6d:14:8c:f7:37:fd:34:ba:bc:39:6b:8a:b4:73: aa:f5:1c:5e:7d:2f:68:50:a4:ab:00:94:e7:c8:ab: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EA:A5:D1:BE:F8:04:3E:F8:60:58:E6:E2:DF:F5:F4:95:69:9F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3dd98d5-a7fb-38d3-b188-2699645102bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:74:dd:9f:86:b3:06:9e:ae:a2:84:3c:f0:0b:cd:1f:0f:ed: c5:5b:8d:65:8b:c1:93:fe:59:a5:09:ba:f6:29:bc:c9:59:94: 48:be:bc:b1:be:5b:86:21:4f:f4:4f:f8:fc:ee:8f:63:3f:5f: 40:c4:ec:48:12:4e:74:e0:06:6e:36:cb:5d:76:f8:47:12:79: 79:a9:90:9b:64:4c:dc:f3:79:07:ed:03:51:a7:e7:0d:c2:a4: ef:f1:9b:f9:73:e4:10:49:10:c0:01:95:32:7d:e2:d6:a5:67: 5e:85:65:f1:05:f3:05:7d:bf:03:a2:6a:3c:4c:02:98:7e:2b: a4:31:bc:39:6c:18:3a:7e:3d:5f:e4:f1:27:6b:4b:7e:34:72: 94:14:ea:e9:fc:bd:89:42:f5:e8:3f:b4:81:30:8a:62:01:76: f5:f5:c7:2f:8e:bd:c4:ee:61:c3:f2:72:39:2b:84:3f:38:b2: 05:b1:9c:65:4e:fe:c0:80:1c:3c:c5:bf:67:e3:5d:29:56:a8: 87:7d:f2:59:c9:c8:90:81:0a:c2:ba:9f:51:93:ca:02:6e:6b: c6:3f:90:43:e8:b4:a4:cd:8c:d8:3f:bb:e7:6a:36:34:2d:09: 81:24:dd:79:6e:a4:7d:d1:62:a0:b9:09:ea:2d:37:4e:e7:99: b1:34:9f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmT943pklgMMZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NWIxY2YzMzEtOGMwMC00OTY5LTk1YTAtNzM4OTc1ZDVkMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7DmGIVSMUgPQOatXVQZJX+IH2U3609n64zS n5gcH0555sGrY28N6u0CJQPFkIBHV/8Xii19Hnp14+u7aOVrdk0hUyRDl3wqr8g2 8H3ZB/M6db0lYqf0mmdONCF5xQxODkOb3kV6gEUlcHmMrShOpIlPFKd2FJGR8h0n rZVOkDJlqMt013kn/DbktEgE4Ar232TrIPeda998rrUDB6aD3704WNYi/Ck+M9Vc PUjt0IfoSP1a7B2dfoczong/g0nxWyL0Jqc/EYcTrJMLEPLQG1oJxyMO5CHFekjr a/6gcQyEbRSM9zf9NLq8OWuKtHOq9RxefS9oUKSrAJTnyKtD5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnqpdG++AQ++GBY5uLf9fSVaZ+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNkZDk4ZDUtYTdmYi0z OGQzLWIxODgtMjY5OTY0NTEwMmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC503Z+GswaerqKEPPALzR8P7cVbjWWLwZP+WaUJuvYpvMlZlEi+vLG+ W4YhT/RP+Pzuj2M/X0DE7EgSTnTgBm42y112+EcSeXmpkJtkTNzzeQftA1Gn5w3C pO/xm/lz5BBJEMABlTJ94talZ16FZfEF8wV9vwOiajxMAph+K6QxvDlsGDp+PV/k 8SdrS340cpQU6un8vYlC9eg/tIEwimIBdvX1xy+OvcTuYcPycjkrhD84sgWxnGVO /sCAHDzFv2fjXSlWqId98lnJyJCBCsK6n1GTygJua8Y/kEPotKTNjNg/u+dqNjQt CYEk3XlupH3RYqC5CeotN07nmbE0n8c= -----END CERTIFICATE-----Generated at Sat Aug 23 16:21:50 2025 by rpki-client