$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eba0cf1d-5ec4-3dae-81fb-1caf6533a855.roa File: eba0cf1d-5ec4-3dae-81fb-1caf6533a855.roa (raw, json) Hash identifier: gM1zZT9cSciFvv0Rq7F6qONwF9okqKy4xfn6trYTPxU= Subject key identifier: C2:19:6A:6A:C8:8A:B6:FE:CC:D9:6E:52:BC:E2:0E:71:68:81:A5:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76FE23E92E1C4187F3B070 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eba0cf1d-5ec4-3dae-81fb-1caf6533a855.roa Signing time: Thu 19 Jun 2025 14:40:38 +0000 ROA not before: Thu 19 Jun 2025 14:40:38 +0000 ROA not after: Wed 17 Sep 2025 14:40:38 +0000 asID: 22773 IP address blocks: 72.212.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:fe:23:e9:2e:1c:41:87:f3:b0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:38 2025 GMT Not After : Sep 17 14:40:38 2025 GMT Subject: CN=29230655-fefd-4028-b28c-9585812a37b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:2a:a5:53:08:0b:f9:ca:5c:68:65:c7:68: b5:f5:5e:64:de:89:ce:1d:2f:1f:f0:22:96:0f:74: 96:08:34:5a:ab:af:b5:d5:e1:58:39:5c:07:62:33: d1:be:c6:05:8b:9b:84:10:1d:e0:1c:2e:0a:65:b3: 57:3c:da:20:bd:31:6c:4a:9c:21:5e:6f:fd:ee:2d: d9:9e:a9:07:a5:90:79:24:5c:1e:64:d8:dd:79:2c: d2:57:b3:5c:79:7f:d2:2d:05:00:33:31:49:a8:7b: 96:f3:c0:e5:71:18:31:31:3e:16:bb:d8:f7:13:38: 68:b6:41:68:49:4d:67:85:f2:46:24:5d:2c:5b:6f: 07:47:73:46:bb:21:1f:6a:03:18:1d:af:31:5f:3c: dd:99:45:c3:9f:96:d4:07:91:43:49:f6:10:e2:57: 73:f1:62:a8:22:b2:23:15:c4:98:b2:8f:da:91:4a: 52:75:df:2c:c1:1d:56:8d:d1:c3:ca:ca:36:2f:e0: 04:20:4b:e5:22:d3:80:a0:a8:da:7e:40:9c:19:bc: 32:a6:e1:ba:7f:7d:1b:87:24:d4:cb:58:76:13:1c: 98:18:51:0b:a0:7a:7a:60:fa:88:dc:c3:52:25:21: 5e:0e:4b:7d:ba:2a:ce:36:fe:ba:ac:72:ce:16:96: 57:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:19:6A:6A:C8:8A:B6:FE:CC:D9:6E:52:BC:E2:0E:71:68:81:A5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eba0cf1d-5ec4-3dae-81fb-1caf6533a855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:10:75:17:07:20:4e:76:1f:d8:4f:8b:63:3c:84:ce:ed:ff: c6:e9:84:93:78:de:31:78:21:74:15:a3:75:c9:de:1f:8e:cc: e1:8b:d5:0d:46:9b:72:f6:98:95:6a:07:00:ed:73:a3:ac:f9: eb:21:4f:ae:18:d4:e9:ca:2d:5d:0c:12:74:ef:d8:a0:74:9f: 3b:69:49:14:ce:72:13:80:e3:5c:00:94:8e:0b:ae:0c:d6:33: 90:dc:d5:1f:11:c1:08:c0:50:64:ea:d5:21:00:81:21:2a:04: 74:1a:6b:c1:06:19:4a:ef:94:24:76:08:ec:43:c1:c6:12:3e: 6a:60:20:cf:c6:44:74:0f:fe:f2:ad:e4:32:1f:57:f8:d2:b1: de:5a:f4:2a:e9:32:2b:b0:20:2b:64:bd:48:96:db:2c:62:cb: eb:42:ab:aa:0f:9f:93:00:a6:0d:49:ff:a7:27:3b:1a:35:c5: 40:bc:a3:e6:8b:13:c8:f3:71:42:40:19:04:8c:b5:96:2a:19: e4:ba:2d:18:6a:44:94:1c:0e:77:ff:9e:03:81:47:59:47:e9: 65:ad:a1:49:c8:ce:d2:1a:d9:a5:ed:cc:fc:5d:df:37:b9:5f: 60:e6:b7:d1:53:fc:8f:ca:c1:51:32:7a:88:08:c8:23:25:41: 73:d6:34:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dv4j6S4cQYfzsHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAzOFoXDTI1MDkxNzE0NDAzOFowLzEtMCsGA1UEAxMk MjkyMzA2NTUtZmVmZC00MDI4LWIyOGMtOTU4NTgxMmEzN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDsqpVMIC/nKXGhlx2i19V5k3onOHS8f8CKW D3SWCDRaq6+11eFYOVwHYjPRvsYFi5uEEB3gHC4KZbNXPNogvTFsSpwhXm/97i3Z nqkHpZB5JFweZNjdeSzSV7NceX/SLQUAMzFJqHuW88DlcRgxMT4Wu9j3EzhotkFo SU1nhfJGJF0sW28HR3NGuyEfagMYHa8xXzzdmUXDn5bUB5FDSfYQ4ldz8WKoIrIj FcSYso/akUpSdd8swR1WjdHDyso2L+AEIEvlItOAoKjafkCcGbwypuG6f30bhyTU y1h2ExyYGFELoHp6YPqI3MNSJSFeDkt9uirONv66rHLOFpZXWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIZamrIirb+zNluUrziDnFogaWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWJhMGNmMWQtNWVjNC0z ZGFlLTgxZmItMWNhZjY1MzNhODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNRlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAQdRcHIE52H9hPi2M8hM7t/8bphJN43jF4IXQVo3XJ3h+OzOGL1Q1G m3L2mJVqBwDtc6Os+eshT64Y1OnKLV0MEnTv2KB0nztpSRTOchOA41wAlI4LrgzW M5Dc1R8RwQjAUGTq1SEAgSEqBHQaa8EGGUrvlCR2COxDwcYSPmpgIM/GRHQP/vKt 5DIfV/jSsd5a9CrpMiuwICtkvUiW2yxiy+tCq6oPn5MApg1J/6cnOxo1xUC8o+aL E8jzcUJAGQSMtZYqGeS6LRhqRJQcDnf/ngOBR1lH6WWtoUnIztIa2aXtzPxd3ze5 X2Dmt9FT/I/KwVEyeogIyCMlQXPWNEo= -----END CERTIFICATE-----Generated at Mon Jun 30 08:57:55 2025 by rpki-client