$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb7c471-594e-365d-89a0-91b381d16392.roa File: 0bb7c471-594e-365d-89a0-91b381d16392.roa (raw, json) Hash identifier: 6emOStusD5ZwcPprJ6T3mKBWiF7dDPnnLIH7o2j3LFM= Subject key identifier: 04:33:86:88:8A:13:CD:62:95:78:20:14:CB:04:03:87:54:AB:D0:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636288393CB93F3DF031420 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb7c471-594e-365d-89a0-91b381d16392.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.200.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:28:83:93:cb:93:f3:df:03:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ee2c6dab-f7fd-43c8-a730-49bf6d8e4693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2c:52:8b:8b:6c:d0:a4:aa:ad:1b:a3:ec:47: e0:23:87:52:b6:53:5d:55:26:51:e0:21:12:bb:c4: 2b:a5:b1:a3:cf:5e:c7:47:e5:de:9e:6c:0e:ba:ef: b1:83:b7:08:0a:75:bc:79:62:fc:75:1d:d8:62:db: 81:83:3d:33:6c:d1:5f:35:64:ac:71:ab:50:ad:c4: 1e:f2:ec:3c:9e:dd:cf:62:6e:d8:4d:73:d3:90:de: ce:5d:83:fc:0d:e2:30:db:5e:61:98:93:ef:6f:c8: 0c:f0:d7:91:73:46:99:5a:c6:74:b8:6c:60:15:bd: bf:7b:65:46:a3:14:ac:a8:cf:02:8e:7a:e5:3c:39: ce:af:ae:44:24:fa:f4:02:d4:f1:2b:03:03:a9:e9: c9:37:fa:00:e9:14:9c:66:c0:9f:c3:e7:1b:f0:35: 5f:d6:7b:2c:4e:7a:66:c6:47:ef:c3:40:13:6d:7f: 09:66:d6:35:a8:a4:5b:92:5d:4d:5b:8c:4e:01:36: 87:fb:77:5e:5f:bb:47:3f:4e:56:98:a7:ce:f3:eb: 1a:9a:ac:97:41:3f:a9:8f:96:3f:e2:b8:85:95:ef: f0:9d:fc:26:83:4d:19:c6:d6:db:95:5e:7b:ec:96: f7:0b:dc:61:2c:88:51:66:70:c0:2e:a5:9c:59:e1: 55:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:86:88:8A:13:CD:62:95:78:20:14:CB:04:03:87:54:AB:D0:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb7c471-594e-365d-89a0-91b381d16392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0f:5d:83:ab:36:0b:d5:16:90:12:11:c2:5a:c7:e7:66:7c: dd:59:54:23:48:70:82:8e:f5:af:3e:e6:35:9e:23:2c:f4:7f: e8:f4:90:c2:b4:15:da:4a:d5:c2:9a:c6:8a:01:42:40:1b:3b: a4:fc:9e:9d:7a:e8:e9:c3:9b:85:17:9d:3c:69:8d:9c:65:dc: 00:69:2d:ae:b4:48:10:ba:41:5b:b5:24:fd:b3:25:73:cd:6c: db:62:96:57:c9:35:70:d6:81:84:34:43:bd:ec:d0:2b:0b:e1: f2:f9:73:29:2e:d1:4c:7b:27:c7:29:35:35:e7:6b:0f:bb:e9: 9c:bb:61:64:fa:d8:89:83:d9:f4:bf:53:fc:42:d7:7a:2d:32: 6a:bf:7e:1a:68:29:0f:c0:00:c8:5a:b3:b0:f3:23:4f:e7:bf: 77:e4:87:4b:8d:8a:b7:53:c7:39:91:9e:70:3e:27:50:9d:eb: 01:f5:fe:fe:68:c1:9d:3d:79:fb:17:eb:d5:16:3e:ff:ea:17: a7:b5:1d:23:16:ba:0d:36:74:20:1c:ea:49:7b:64:46:35:89: be:08:95:79:c9:77:a3:82:46:eb:35:7e:5d:b9:9e:ee:03:fc: 9c:33:3e:d3:00:33:d8:27:2c:2c:71:58:20:c4:cd:8b:91:2f: 89:bc:3d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiiDk8uT898DFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWUyYzZkYWItZjdmZC00M2M4LWE3MzAtNDliZjZkOGU0NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSxSi4ts0KSqrRuj7EfgI4dStlNdVSZR4CES u8QrpbGjz17HR+XenmwOuu+xg7cICnW8eWL8dR3YYtuBgz0zbNFfNWSscatQrcQe 8uw8nt3PYm7YTXPTkN7OXYP8DeIw215hmJPvb8gM8NeRc0aZWsZ0uGxgFb2/e2VG oxSsqM8CjnrlPDnOr65EJPr0AtTxKwMDqenJN/oA6RScZsCfw+cb8DVf1nssTnpm xkfvw0ATbX8JZtY1qKRbkl1NW4xOATaH+3deX7tHP05WmKfO8+samqyXQT+pj5Y/ 4riFle/wnfwmg00ZxtbblV577Jb3C9xhLIhRZnDALqWcWeFV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQzhoiKE81ilXggFMsEA4dUq9A6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGJiN2M0NzEtNTk0ZS0z NjVkLTg5YTAtOTFiMzgxZDE2MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMiVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsPXYOrNgvVFpASEcJax+dmfN1ZVCNIcIKO9a8+5jWeIyz0f+j0kMK0 FdpK1cKaxooBQkAbO6T8np166OnDm4UXnTxpjZxl3ABpLa60SBC6QVu1JP2zJXPN bNtillfJNXDWgYQ0Q73s0CsL4fL5cyku0Ux7J8cpNTXnaw+76Zy7YWT62ImD2fS/ U/xC13otMmq/fhpoKQ/AAMhas7DzI0/nv3fkh0uNirdTxzmRnnA+J1Cd6wH1/v5o wZ09efsX69UWPv/qF6e1HSMWug02dCAc6kl7ZEY1ib4IlXnJd6OCRus1fl25nu4D /JwzPtMAM9gnLCxxWCDEzYuRL4m8PRE= -----END CERTIFICATE-----Generated at Sat Aug 9 01:08:58 2025 by rpki-client