$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f21403d-1dcc-3546-b787-7fac5058d52a.roa File: 0f21403d-1dcc-3546-b787-7fac5058d52a.roa (raw, json) Hash identifier: 0Dw9067T6f/HzOPVPYuOStQ1e9p0ziXnHivCNJ0mIlQ= Subject key identifier: 3D:24:28:17:A5:60:2B:C6:45:09:08:0F:1B:92:96:B6:3F:F3:51:C5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96362A5C5166D98D8C4EC080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f21403d-1dcc-3546-b787-7fac5058d52a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.213.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:2a:5c:51:66:d9:8d:8c:4e:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=cbdc2581-c037-465f-95fb-08ba48699036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:51:c3:a1:ed:13:57:6d:c0:e4:32:95:84: 7a:0e:2f:cd:48:dc:f9:56:29:dd:7f:16:4f:20:48: d2:5d:d4:0a:57:46:5c:ba:71:1d:39:ed:e5:16:f2: 11:fa:b3:aa:44:56:1a:65:3f:16:ac:54:81:2e:ae: 72:03:b2:02:55:1c:bf:81:62:89:d2:93:d5:9f:78: 04:8c:ab:c3:4b:a5:1c:3c:cc:5d:b6:6a:69:f6:c1: 7a:2e:97:3e:fe:9d:33:17:2d:e3:dd:83:c9:e8:68: f2:3e:a8:a8:44:d4:eb:0e:bf:e1:8b:01:ca:d9:d8: b7:40:26:37:b6:b1:d7:21:e6:7a:be:e9:80:fe:90: 72:af:4e:ef:24:bd:d5:7d:cd:25:5f:4e:a4:fa:58: 1d:68:1f:60:07:2a:bb:24:17:ca:12:48:38:98:03: 98:7f:8b:ce:7d:a8:ed:85:7b:7a:a6:d6:90:bc:af: ae:04:9b:0b:60:87:3e:2c:7f:08:17:3c:13:71:7d: 62:59:cd:25:08:83:16:ac:b9:d4:73:92:06:e8:e0: 57:07:f5:9d:84:69:a4:44:65:67:bc:f8:a2:76:92: da:6a:29:c1:e8:ae:d9:35:9c:6a:37:63:6e:9e:aa: 4b:38:cb:c3:c8:4e:b0:4c:dc:14:c5:9d:8e:fb:9e: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:24:28:17:A5:60:2B:C6:45:09:08:0F:1B:92:96:B6:3F:F3:51:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f21403d-1dcc-3546-b787-7fac5058d52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.213.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6a:97:f3:4f:8c:69:72:1d:3a:86:06:2f:72:05:ab:51:db: 1e:f2:3b:69:44:a3:d6:21:86:7c:3b:f2:74:19:69:53:de:83: 58:64:9b:ae:24:5e:e5:49:53:fb:dc:b9:a4:53:04:5e:35:7b: 68:5c:33:f9:15:c5:63:3c:30:59:2e:82:1f:e2:d3:82:a6:2d: 51:6a:d2:a4:4d:96:78:85:23:9b:41:81:74:fe:9f:64:77:5b: 9b:6a:0b:31:f9:58:9f:bc:00:79:3e:58:be:ad:76:e1:35:ed: 1c:27:6f:c2:91:0f:41:24:f3:5f:50:13:89:a3:32:80:04:a1: f7:11:e1:a3:cf:af:c1:1d:30:c9:50:40:b8:f3:f0:5d:a7:c2: 14:c1:b0:75:73:5c:e1:df:1f:15:d0:26:c9:cb:40:96:70:fa: 6d:c8:fe:16:5a:6e:15:2c:93:13:9f:09:91:ce:f3:8c:35:a0: ab:7a:d8:e1:b2:c5:0e:8f:36:1a:37:f3:50:61:50:ac:b1:e2: 29:a3:70:10:f7:79:59:ef:0c:3d:33:47:e9:53:39:6f:6b:87: f1:38:80:42:a6:78:d8:6a:11:a3:0f:4d:95:51:0e:cc:bc:2e: 55:d1:2d:77:08:5c:60:ba:f7:c8:4b:ed:1a:b3:02:fc:3c:72: 83:62:18:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNipcUWbZjYxOwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Y2JkYzI1ODEtYzAzNy00NjVmLTk1ZmItMDhiYTQ4Njk5MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMBRw6HtE1dtwOQylYR6Di/NSNz5VindfxZP IEjSXdQKV0ZcunEdOe3lFvIR+rOqRFYaZT8WrFSBLq5yA7ICVRy/gWKJ0pPVn3gE jKvDS6UcPMxdtmpp9sF6Lpc+/p0zFy3j3YPJ6GjyPqioRNTrDr/hiwHK2di3QCY3 trHXIeZ6vumA/pByr07vJL3Vfc0lX06k+lgdaB9gByq7JBfKEkg4mAOYf4vOfajt hXt6ptaQvK+uBJsLYIc+LH8IFzwTcX1iWc0lCIMWrLnUc5IG6OBXB/WdhGmkRGVn vPiidpLaainB6K7ZNZxqN2NunqpLOMvDyE6wTNwUxZ2O+55z3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0kKBelYCvGRQkIDxuSlrY/81HFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGYyMTQwM2QtMWRjYy0z NTQ2LWI3ODctN2ZhYzUwNThkNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRql/NPjGlyHTqGBi9yBatR2x7yO2lEo9Yhhnw78nQZaVPeg1hkm64k XuVJU/vcuaRTBF41e2hcM/kVxWM8MFkugh/i04KmLVFq0qRNlniFI5tBgXT+n2R3 W5tqCzH5WJ+8AHk+WL6tduE17Rwnb8KRD0Ek819QE4mjMoAEofcR4aPPr8EdMMlQ QLjz8F2nwhTBsHVzXOHfHxXQJsnLQJZw+m3I/hZabhUskxOfCZHO84w1oKt62OGy xQ6PNho381BhUKyx4imjcBD3eVnvDD0zR+lTOW9rh/E4gEKmeNhqEaMPTZVRDsy8 LlXRLXcIXGC698hL7RqzAvw8coNiGEQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:43:17 2025 by rpki-client