$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dfcd94dd-5712-3ddc-9cbc-49a28b3dc151.roa File: dfcd94dd-5712-3ddc-9cbc-49a28b3dc151.roa (raw, json) Hash identifier: 3b6xO9PEtn1yf5W/LdS9ELdB2akJG6zXjbJlxyNfqBM= Subject key identifier: 6A:1C:9F:0F:38:CB:E3:A6:75:32:68:8D:D5:DC:F7:A8:54:93:61:7E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77EB62C7AC066FB70D9800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dfcd94dd-5712-3ddc-9cbc-49a28b3dc151.roa Signing time: Thu 19 Jun 2025 14:42:30 +0000 ROA not before: Thu 19 Jun 2025 14:42:30 +0000 ROA not after: Wed 17 Sep 2025 14:42:30 +0000 asID: 22773 IP address blocks: 72.223.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:eb:62:c7:ac:06:6f:b7:0d:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:30 2025 GMT Not After : Sep 17 14:42:30 2025 GMT Subject: CN=f961dd39-8fbe-4366-ab53-8ac47c376cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a8:28:e3:f0:6f:91:2f:e1:11:e4:cd:63:f5: 05:b8:f3:24:6f:3d:21:dc:f4:e2:aa:28:69:76:82: 85:1e:b8:f3:2f:3b:ac:38:b9:8b:c4:b4:f9:c9:7a: 39:f1:78:63:e3:06:3f:c9:59:cb:bb:ea:54:55:33: 6f:e5:69:27:61:fc:94:f2:3b:6d:f6:98:43:46:e4: 92:04:8a:04:46:66:b6:65:bf:5b:25:a1:65:7c:f9: 1c:ee:3b:aa:d3:8a:21:92:2a:6b:13:ff:01:e3:dc: 59:0e:f0:f3:ee:61:37:a7:12:dd:ab:bb:00:ed:39: 06:7e:a5:e5:d0:e4:8d:ab:9b:3e:8c:83:6b:96:d8: ee:7f:2d:4a:4f:37:99:7e:90:2c:5a:e1:9f:0a:e3: 92:29:3a:f3:51:a7:e1:09:67:03:f2:02:ca:d3:c1: 99:17:3f:fc:a8:7e:90:49:da:3d:e1:68:c3:e6:ed: 4c:33:6f:d5:c2:ca:f2:70:57:f4:bd:35:a0:96:b3: 47:f9:83:37:02:49:3c:fb:c8:0d:25:b1:ed:c5:dc: 98:c5:92:13:f1:c7:4c:5f:0d:33:01:63:4d:22:8c: c4:bc:54:6e:a0:24:34:8b:d8:32:02:80:0f:f3:1d: 95:e3:4b:dd:2b:68:31:8f:12:9a:49:3c:a3:9f:a9: a6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1C:9F:0F:38:CB:E3:A6:75:32:68:8D:D5:DC:F7:A8:54:93:61:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dfcd94dd-5712-3ddc-9cbc-49a28b3dc151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:53:e0:d7:77:cc:f7:8a:af:92:57:dc:20:5e:22:86:81:bd: 31:7c:c4:1d:a1:32:0b:ef:5a:d6:98:05:29:6a:dd:3d:aa:16: c1:00:58:08:35:61:cf:f3:55:19:c5:c9:a3:c7:f9:95:ee:e8: 35:e4:95:5c:a7:49:78:14:f8:95:bc:54:6a:0a:be:95:c8:d4: 93:2b:37:db:9f:c4:b1:25:c5:26:17:93:ea:cf:f1:c3:a1:6c: ac:6f:5d:ee:4e:8d:1f:f0:34:73:1b:9a:27:6a:28:17:7b:34: 03:b5:f2:8a:3d:06:f4:8b:74:7c:28:d9:05:77:7b:b8:ec:5d: ae:80:23:c2:8c:56:e9:09:52:10:cd:80:9b:83:dc:06:58:67: 7c:61:3c:ae:b5:90:3a:65:73:af:6e:4e:39:d3:4f:c2:03:ba: a4:2a:95:db:73:e3:9d:2a:a0:4c:42:1f:2f:0c:30:e6:2e:af: 5a:61:b5:ef:ef:c7:94:25:1a:0e:1b:c5:d8:6d:e4:c5:8d:9f: b1:f9:78:bf:b5:9f:aa:8e:bc:fc:53:5d:1e:46:97:4d:24:2b: b4:58:df:50:40:c1:46:19:53:0d:35:45:ae:ff:49:6f:6a:cc: 3e:a7:8f:b2:6d:fe:a1:96:48:a6:2d:ac:09:86:86:fd:b1:29: 9c:7d:e6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d+tix6wGb7cNmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIzMFoXDTI1MDkxNzE0NDIzMFowLzEtMCsGA1UEAxMk Zjk2MWRkMzktOGZiZS00MzY2LWFiNTMtOGFjNDdjMzc2Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKgo4/BvkS/hEeTNY/UFuPMkbz0h3PTiqihp doKFHrjzLzusOLmLxLT5yXo58Xhj4wY/yVnLu+pUVTNv5WknYfyU8jtt9phDRuSS BIoERma2Zb9bJaFlfPkc7juq04ohkiprE/8B49xZDvDz7mE3pxLdq7sA7TkGfqXl 0OSNq5s+jINrltjufy1KTzeZfpAsWuGfCuOSKTrzUafhCWcD8gLK08GZFz/8qH6Q Sdo94WjD5u1MM2/VwsrycFf0vTWglrNH+YM3Akk8+8gNJbHtxdyYxZIT8cdMXw0z AWNNIozEvFRuoCQ0i9gyAoAP8x2V40vdK2gxjxKaSTyjn6mmzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGocnw84y+OmdTJojdXc96hUk2F+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGZjZDk0ZGQtNTcxMi0z ZGRjLTljYmMtNDlhMjhiM2RjMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN8mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdT4Nd3zPeKr5JX3CBeIoaBvTF8xB2hMgvvWtaYBSlq3T2qFsEAWAg1 Yc/zVRnFyaPH+ZXu6DXklVynSXgU+JW8VGoKvpXI1JMrN9ufxLElxSYXk+rP8cOh bKxvXe5OjR/wNHMbmidqKBd7NAO18oo9BvSLdHwo2QV3e7jsXa6AI8KMVukJUhDN gJuD3AZYZ3xhPK61kDplc69uTjnTT8IDuqQqldtz450qoExCHy8MMOYur1phte/v x5QlGg4bxdht5MWNn7H5eL+1n6qOvPxTXR5Gl00kK7RY31BAwUYZUw01Ra7/SW9q zD6nj7Jt/qGWSKYtrAmGhv2xKZx95nI= -----END CERTIFICATE-----Generated at Tue Jul 1 19:09:30 2025 by rpki-client