$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd127800-2080-31c9-8a6a-ea80103242b4.roa File: fd127800-2080-31c9-8a6a-ea80103242b4.roa (raw, json) Hash identifier: ZnC9G2dEVFgvmLHRQrSrjsQOlVjSA/s6TX+2xE5TEVM= Subject key identifier: 13:B7:F5:14:A9:76:B8:B5:BF:8C:68:E1:E2:D2:1D:0C:16:7D:D4:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77D06BA5173E78D1093FC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd127800-2080-31c9-8a6a-ea80103242b4.roa Signing time: Thu 19 Jun 2025 14:42:17 +0000 ROA not before: Thu 19 Jun 2025 14:42:17 +0000 ROA not after: Wed 17 Sep 2025 14:42:17 +0000 asID: 22773 IP address blocks: 72.222.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:d0:6b:a5:17:3e:78:d1:09:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:17 2025 GMT Not After : Sep 17 14:42:17 2025 GMT Subject: CN=83a3e71e-c290-46f1-a41a-4ba708495dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:8a:ef:09:ee:45:d5:17:a5:f1:d4:0a:40: fc:35:b2:4e:30:4f:cb:99:04:b4:73:51:84:be:43: a6:f6:08:62:27:67:e2:e5:41:8e:3f:ba:08:e6:07: 03:90:35:e2:87:60:8a:9e:d7:e2:22:31:dc:28:de: 04:9c:69:d5:13:82:02:2b:1f:10:c5:39:08:43:6d: 25:9c:ad:3b:ba:6a:3a:4d:01:45:66:5a:c5:98:61: f8:99:20:de:1b:92:f1:0b:93:c2:0f:5d:96:87:a5: a2:9e:a6:d2:23:0a:cf:1f:21:69:90:87:68:7c:f8: 5f:43:11:00:dc:cb:33:83:ba:3e:f4:07:83:61:fb: d8:ed:a5:a1:e5:e9:11:3e:61:ee:ac:6b:e1:96:bf: 9b:04:b1:f1:30:e1:de:7f:af:fe:69:78:0c:82:e2: 2f:43:f2:ee:c0:b2:07:57:7f:58:a3:bc:50:5f:f7: 1e:ad:f7:90:da:46:ba:2f:33:f2:72:d6:21:de:25: ab:d3:af:fd:fe:98:bd:ac:69:44:72:f4:1c:21:90: 82:9d:03:5a:57:2a:2f:d1:67:bc:ab:24:29:e5:b0: c1:28:21:d6:a7:61:ec:e9:89:9f:9c:89:1a:bf:ef: 06:5c:32:51:fc:cd:31:e6:16:1f:b9:08:ef:e7:c8: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B7:F5:14:A9:76:B8:B5:BF:8C:68:E1:E2:D2:1D:0C:16:7D:D4:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd127800-2080-31c9-8a6a-ea80103242b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e6:48:2b:6b:bb:0a:89:66:04:71:92:b7:47:11:06:48:fe: 63:c8:50:eb:c3:be:87:f5:12:00:be:f7:74:9c:ad:18:93:c7: 84:b3:ff:5f:20:49:82:7c:15:21:a8:8b:57:34:b8:8c:d6:8a: 80:3d:ed:b3:3b:75:5b:57:23:32:1e:a2:61:37:86:ab:13:d6: c9:09:c3:54:e5:06:43:89:be:e6:34:07:8c:fb:2a:56:d3:ea: de:e3:01:c9:38:0a:e6:2a:1a:84:c6:45:5b:ac:4d:b8:dc:2d: 80:09:d3:9a:3f:68:bc:53:52:af:c2:a4:45:33:e2:71:87:75: c3:a0:f9:62:9a:cc:ea:5f:53:ea:3d:92:43:c0:46:4a:5f:3a: 82:28:d3:94:71:cc:39:25:88:9a:02:05:7d:95:f5:a5:7d:b0: 95:b6:f1:24:47:b3:05:62:3d:f5:47:51:f6:ee:d7:f3:13:a3: 17:e5:47:b1:08:50:7a:2b:e8:18:1c:fe:6f:e1:bb:25:28:1a: e6:08:ec:72:be:27:6c:de:0f:ac:94:bf:86:0b:2e:91:5a:3a: af:ac:a5:53:4e:b8:c4:19:28:9d:16:f4:bc:c1:c1:58:28:88: 3a:13:e5:b0:23:b7:3d:42:66:f0:44:db:5d:f5:35:6f:c8:23: 7c:8b:f9:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d9BrpRc+eNEJP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIxN1oXDTI1MDkxNzE0NDIxN1owLzEtMCsGA1UEAxMk ODNhM2U3MWUtYzI5MC00NmYxLWE0MWEtNGJhNzA4NDk1ZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDiK7wnuRdUXpfHUCkD8NbJOME/LmQS0c1GE vkOm9ghiJ2fi5UGOP7oI5gcDkDXih2CKntfiIjHcKN4EnGnVE4ICKx8QxTkIQ20l nK07umo6TQFFZlrFmGH4mSDeG5LxC5PCD12Wh6WinqbSIwrPHyFpkIdofPhfQxEA 3Mszg7o+9AeDYfvY7aWh5ekRPmHurGvhlr+bBLHxMOHef6/+aXgMguIvQ/LuwLIH V39Yo7xQX/cerfeQ2ka6LzPyctYh3iWr06/9/pi9rGlEcvQcIZCCnQNaVyov0We8 qyQp5bDBKCHWp2Hs6YmfnIkav+8GXDJR/M0x5hYfuQjv58ianwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO39RSpdri1v4xo4eLSHQwWfdSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmQxMjc4MDAtMjA4MC0z MWM5LThhNmEtZWE4MDEwMzI0MmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTmSCtruwqJZgRxkrdHEQZI/mPIUOvDvof1EgC+93ScrRiTx4Sz/18g SYJ8FSGoi1c0uIzWioA97bM7dVtXIzIeomE3hqsT1skJw1TlBkOJvuY0B4z7KlbT 6t7jAck4CuYqGoTGRVusTbjcLYAJ05o/aLxTUq/CpEUz4nGHdcOg+WKazOpfU+o9 kkPARkpfOoIo05RxzDkliJoCBX2V9aV9sJW28SRHswViPfVHUfbu1/MToxflR7EI UHor6Bgc/m/huyUoGuYI7HK+J2zeD6yUv4YLLpFaOq+spVNOuMQZKJ0W9LzBwVgo iDoT5bAjtz1CZvBE2131NW/II3yL+Tc= -----END CERTIFICATE-----Generated at Wed Jul 2 21:44:32 2025 by rpki-client