$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08d13c1a-38ec-3e7c-875d-6816f93c96f7.roa File: 08d13c1a-38ec-3e7c-875d-6816f93c96f7.roa (raw, json) Hash identifier: X/0uriKSPWgwHotdqrzPsKtl+unj4fv0WWnwbB0oWl0= Subject key identifier: B0:11:B5:31:FD:BC:11:F8:08:95:16:20:B6:99:F3:C4:B6:9F:84:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96362AAC013EB3F3CD1BD800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08d13c1a-38ec-3e7c-875d-6816f93c96f7.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.213.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:2a:ac:01:3e:b3:f3:cd:1b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d12b0b65-97f3-4e43-9242-3267093c38f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:4e:6f:55:74:a2:da:53:0a:52:98:3c:cc: c9:e5:4d:7e:da:16:d3:c5:15:06:6b:81:7b:47:24: a5:ad:4d:a1:11:04:fa:21:d9:19:95:af:39:88:07: 90:3c:96:a1:27:64:ee:ee:6d:02:8f:e6:de:bf:a0: 7f:3f:ab:a3:94:29:cc:ff:cb:cc:07:08:2a:94:f3: 32:95:a1:40:50:ff:ae:12:01:76:f0:44:12:82:94: 71:92:8c:83:29:ad:46:fe:70:ca:cc:c3:00:c5:95: 6d:e5:19:49:d9:2f:53:37:4f:bb:bc:a7:73:18:01: 5a:81:85:f9:8d:35:35:37:e2:30:b8:7f:6d:56:c2: e8:1b:f1:c8:0b:c8:bd:70:24:e1:fa:e2:c0:ef:09: 07:00:c1:46:ea:33:a5:ad:05:0c:68:eb:bf:01:7b: 72:18:d6:b1:a4:5b:a3:a9:15:3d:87:9a:78:fa:57: 8f:2f:fe:9b:7d:e9:f3:6a:f9:b5:dc:6c:82:7d:12: fa:02:d2:8d:8e:29:f1:a8:bb:59:16:4a:dc:39:4a: 3a:6e:3c:e1:72:2b:5c:ed:5d:d1:ce:25:7f:5a:c0: 29:da:7d:63:c8:63:45:e8:5a:72:65:25:0c:b5:86: b6:27:46:d2:ce:fd:49:1b:44:68:79:5e:fa:44:df: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:11:B5:31:FD:BC:11:F8:08:95:16:20:B6:99:F3:C4:B6:9F:84:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08d13c1a-38ec-3e7c-875d-6816f93c96f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.213.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:77:fd:de:b4:57:75:1a:19:77:26:dc:ee:bb:40:a1:65:0c: a6:a5:e4:c7:39:3e:11:4a:b5:55:b2:91:dd:46:01:4d:98:36: 32:7c:b3:86:b8:20:60:e7:da:f0:36:2a:3a:cb:98:16:7c:56: 39:14:11:28:28:9a:b2:98:70:cf:29:7d:d3:cb:89:18:3e:81: 6a:33:d7:a0:1d:23:98:ee:b0:ec:80:98:15:88:81:ff:77:13: 92:7a:eb:fc:9b:17:3f:b4:a3:28:b1:f8:01:b5:01:62:0a:4e: a1:e3:b9:68:0d:22:1a:50:14:c8:15:80:76:f6:a2:cb:fa:e6: 30:a3:cd:60:62:c5:72:a2:01:11:28:03:52:28:33:5a:73:3d: de:50:96:69:1e:01:75:b7:03:ce:77:30:13:1b:d1:b5:2a:64: e2:1b:d6:2a:d6:f9:01:3a:72:63:75:25:55:2c:02:69:9f:72: 8c:c6:2f:a9:08:17:79:31:ef:2b:54:e6:ce:2d:da:6d:2f:51: 8a:b3:07:90:7f:ea:9c:90:7b:46:db:45:c0:16:70:3f:af:46: 31:02:09:39:5c:8f:ea:17:a8:4b:33:bf:c0:5d:0b:d5:b3:39: b9:1d:96:35:5d:8d:c9:dc:bf:42:cb:cf:d3:bf:c1:35:42:92: 0c:58:25:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiqsAT6z880b2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDEyYjBiNjUtOTdmMy00ZTQzLTkyNDItMzI2NzA5M2MzOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAlOb1V0otpTClKYPMzJ5U1+2hbTxRUGa4F7 RySlrU2hEQT6IdkZla85iAeQPJahJ2Tu7m0Cj+bev6B/P6ujlCnM/8vMBwgqlPMy laFAUP+uEgF28EQSgpRxkoyDKa1G/nDKzMMAxZVt5RlJ2S9TN0+7vKdzGAFagYX5 jTU1N+IwuH9tVsLoG/HIC8i9cCTh+uLA7wkHAMFG6jOlrQUMaOu/AXtyGNaxpFuj qRU9h5p4+lePL/6bfenzavm13GyCfRL6AtKNjinxqLtZFkrcOUo6bjzhcitc7V3R ziV/WsAp2n1jyGNF6FpyZSUMtYa2J0bSzv1JG0RoeV76RN8J9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLARtTH9vBH4CJUWILaZ88S2n4RbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDhkMTNjMWEtMzhlYy0z ZTdjLTg3NWQtNjgxNmY5M2M5NmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR3/d60V3UaGXcm3O67QKFlDKal5Mc5PhFKtVWykd1GAU2YNjJ8s4a4 IGDn2vA2KjrLmBZ8VjkUESgomrKYcM8pfdPLiRg+gWoz16AdI5jusOyAmBWIgf93 E5J66/ybFz+0oyix+AG1AWIKTqHjuWgNIhpQFMgVgHb2osv65jCjzWBixXKiAREo A1IoM1pzPd5QlmkeAXW3A853MBMb0bUqZOIb1irW+QE6cmN1JVUsAmmfcozGL6kI F3kx7ytU5s4t2m0vUYqzB5B/6pyQe0bbRcAWcD+vRjECCTlcj+oXqEszv8BdC9Wz ObkdljVdjcncv0LLz9O/wTVCkgxYJcE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:13:55 2025 by rpki-client