$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcb75476-51a4-3030-8e9a-c50ef4a7d553.roa File: fcb75476-51a4-3030-8e9a-c50ef4a7d553.roa (raw, json) Hash identifier: bk/gYBjW9xz0Rl0uOgDwBDHuiuIT44zliLU4MNEiz10= Subject key identifier: 59:D5:CE:B2:8C:F2:90:85:60:D3:27:09:B3:50:51:16:85:98:36:FD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7705700891EEAC583B0900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcb75476-51a4-3030-8e9a-c50ef4a7d553.roa Signing time: Thu 19 Jun 2025 14:40:42 +0000 ROA not before: Thu 19 Jun 2025 14:40:42 +0000 ROA not after: Wed 17 Sep 2025 14:40:42 +0000 asID: 22773 IP address blocks: 72.212.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:05:70:08:91:ee:ac:58:3b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:42 2025 GMT Not After : Sep 17 14:40:42 2025 GMT Subject: CN=17a3d0e3-43ce-496f-846f-3bcc98d822ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8e:4d:7c:90:8a:68:fd:5c:b3:c3:f2:64:e2: 8a:21:79:9b:ba:93:03:10:4f:0f:e1:42:04:04:71: 0c:6c:36:7e:7e:b7:cd:c6:fb:f8:1d:57:6a:a3:42: ee:f7:91:17:4e:0f:b8:29:8b:8f:90:f1:b9:5f:0e: 4d:34:0f:c3:ea:3e:e6:54:c9:56:64:54:41:d6:29: 72:40:71:01:ea:01:cc:a9:82:31:db:1c:ce:d5:a7: cb:8e:a3:cf:59:be:52:dd:db:21:db:37:0f:e3:d8: 6c:59:21:28:5e:5c:1e:9a:ec:aa:1e:66:fe:c3:0d: bc:f1:15:d4:6e:2e:d8:1a:d6:27:9b:b0:8f:c0:8c: 23:6d:36:89:ea:f2:9e:b9:36:0a:89:a1:c3:07:fa: 3c:81:38:0b:4e:98:ea:56:33:48:5d:c3:bc:04:dc: 72:6c:4f:c1:60:f6:76:65:d7:1c:9e:6b:e7:48:5c: 5c:9c:13:f7:9a:6e:5d:94:5d:36:37:c0:b1:40:93: bb:54:38:20:8a:7b:a9:f2:08:32:63:ee:a7:d8:ff: 78:ad:04:56:f3:75:d0:36:c8:e1:6e:fc:dd:29:ba: 6d:46:0c:50:42:13:90:c7:cc:00:70:3e:58:4f:b2: 27:1c:2d:39:e4:cb:d7:c6:08:4f:ce:d5:1e:62:ac: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D5:CE:B2:8C:F2:90:85:60:D3:27:09:B3:50:51:16:85:98:36:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcb75476-51a4-3030-8e9a-c50ef4a7d553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:10:79:5e:8d:b7:6d:b3:46:19:68:75:13:e1:80:7e:94:a2: 05:58:a9:d8:89:80:24:6a:0c:29:87:29:18:99:9b:aa:5c:c4: f1:d7:43:d8:2a:f0:71:97:63:97:80:7e:d6:99:96:3f:ec:1e: fc:8b:8a:9f:59:2b:df:14:96:0e:6a:d0:b4:82:23:a4:40:3c: b7:26:8c:fd:76:d7:2b:a9:8c:9c:f7:53:d9:7f:6b:1c:17:d5: 6e:eb:76:a7:88:81:90:38:fd:52:e9:0c:f8:9c:d2:f4:2e:9f: 09:7d:cc:1e:dc:23:e1:68:bb:74:10:d6:22:31:97:fd:ef:5d: 65:e9:8c:47:c2:a3:9a:48:47:8d:53:fa:0a:eb:81:8d:28:d7: f5:bb:ba:2f:48:67:e0:e0:f7:35:f2:8f:93:0e:c5:a3:32:ae: 0d:bb:2e:07:4c:52:1b:00:b1:79:f5:47:4e:df:71:46:a6:a0: dd:9b:7b:16:11:ae:f3:1a:20:f6:d4:c8:c5:41:78:cb:84:13: 1c:66:d2:49:4e:56:5b:4f:2b:9b:5a:2f:b8:20:75:34:f5:12: c2:b0:f9:cd:5e:aa:9a:c2:a7:a7:6d:c2:e3:9f:34:98:3b:90: ad:ce:4c:67:09:68:68:8d:d4:5c:9e:15:eb:30:86:14:18:0f: 8c:5a:9b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dwVwCJHurFg7CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDA0MloXDTI1MDkxNzE0NDA0MlowLzEtMCsGA1UEAxMk MTdhM2QwZTMtNDNjZS00OTZmLTg0NmYtM2JjYzk4ZDgyMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY5NfJCKaP1cs8PyZOKKIXmbupMDEE8P4UIE BHEMbDZ+frfNxvv4HVdqo0Lu95EXTg+4KYuPkPG5Xw5NNA/D6j7mVMlWZFRB1ily QHEB6gHMqYIx2xzO1afLjqPPWb5S3dsh2zcP49hsWSEoXlwemuyqHmb+ww288RXU bi7YGtYnm7CPwIwjbTaJ6vKeuTYKiaHDB/o8gTgLTpjqVjNIXcO8BNxybE/BYPZ2 ZdccnmvnSFxcnBP3mm5dlF02N8CxQJO7VDgginup8ggyY+6n2P94rQRW83XQNsjh bvzdKbptRgxQQhOQx8wAcD5YT7InHC055MvXxghPztUeYqynCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnVzrKM8pCFYNMnCbNQURaFmDb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmNiNzU0NzYtNTFhNC0z MDMwLThlOWEtYzUwZWY0YTdkNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgQeV6Nt22zRhlodRPhgH6UogVYqdiJgCRqDCmHKRiZm6pcxPHXQ9gq 8HGXY5eAftaZlj/sHvyLip9ZK98Ulg5q0LSCI6RAPLcmjP121yupjJz3U9l/axwX 1W7rdqeIgZA4/VLpDPic0vQunwl9zB7cI+Fou3QQ1iIxl/3vXWXpjEfCo5pIR41T +grrgY0o1/W7ui9IZ+Dg9zXyj5MOxaMyrg27LgdMUhsAsXn1R07fcUamoN2bexYR rvMaIPbUyMVBeMuEExxm0klOVltPK5taL7ggdTT1EsKw+c1eqprCp6dtwuOfNJg7 kK3OTGcJaGiN1FyeFeswhhQYD4xam7I= -----END CERTIFICATE-----Generated at Tue Jul 1 18:30:53 2025 by rpki-client