$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1da88759-d993-35c0-a923-5f3a8a824150.roa File: 1da88759-d993-35c0-a923-5f3a8a824150.roa (raw, json) Hash identifier: rhlh63WvVzr9LhxgFz5KhseyXgmURXQXB5hBk4rVsmI= Subject key identifier: B9:8D:10:59:DF:50:65:4F:34:48:08:BD:E3:15:AB:5C:FF:2B:E5:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364BD6641E7FE530EEC800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1da88759-d993-35c0-a923-5f3a8a824150.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.218.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4b:d6:64:1e:7f:e5:30:ee:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=587d2681-f0d9-435b-b12a-fdb13cae0cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:65:45:23:a5:13:9c:26:db:68:67:57:95: 74:7e:c2:02:e7:19:94:26:51:c7:d7:79:76:03:e5: ac:0a:4d:3a:9c:8a:72:8b:8b:63:7b:2d:1f:c9:df: 53:c8:4e:f4:0b:a1:68:26:be:03:39:25:fc:6c:3b: ba:3d:33:03:3a:77:5c:2e:52:7f:eb:74:f4:ab:a3: 83:28:c0:34:03:81:53:af:ad:4c:a1:d3:24:42:31: 1b:cc:e8:b0:fb:89:85:84:04:da:99:39:ad:22:06: 0f:93:98:c5:96:1f:db:1a:e6:3c:10:ca:13:ee:68: b4:cd:f8:77:ad:15:26:03:09:9d:bf:28:26:35:cb: 18:3d:64:c0:ca:09:b7:1e:cb:ab:e8:58:4b:d9:af: 99:7f:13:ab:50:c2:c2:8e:35:7b:30:98:1a:35:cb: 0b:e7:b3:0b:25:b9:f7:14:c0:86:53:86:b1:e9:91: 30:5d:1d:3f:30:87:4c:26:db:19:b2:0f:a6:5a:f1: d4:cc:23:9c:d0:f6:99:02:7d:6e:87:ac:34:82:0c: c1:42:af:2c:df:54:f2:cb:a6:c8:25:98:f7:35:db: d6:e6:7d:98:12:eb:9c:1a:20:f2:ba:6e:95:e4:53: 96:e0:8f:29:c9:e1:46:a8:e2:f9:27:39:4c:48:41: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8D:10:59:DF:50:65:4F:34:48:08:BD:E3:15:AB:5C:FF:2B:E5:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1da88759-d993-35c0-a923-5f3a8a824150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d4:2c:eb:1b:b3:58:16:75:12:64:2d:34:0f:73:41:94:46: dd:93:98:aa:ca:d8:b3:fa:aa:91:2d:6d:b2:c5:59:4e:15:4f: 90:37:9f:1f:74:bb:00:76:9e:18:48:3c:04:8e:dd:8a:d9:b5: 62:27:b0:c3:0a:74:08:71:bf:7b:fc:03:59:51:1b:91:56:ef: cc:06:cd:01:be:bc:cb:d4:76:06:a3:59:f0:a7:26:d2:76:d9: 21:05:38:ae:a3:8d:50:22:93:0c:46:6f:41:d3:9a:8c:e0:ba: ee:16:a8:21:f3:f5:4b:69:18:71:a5:ff:2d:1d:3e:d6:22:97: 1e:68:64:f1:2a:e8:73:bb:48:49:15:2b:a0:c9:b4:08:9f:db: 56:31:e8:c9:86:72:62:11:09:08:a4:88:19:5f:89:ff:b9:7f: 2c:95:24:d1:10:39:73:4c:90:9e:fb:bf:57:a9:07:2d:46:d8: db:11:2a:65:00:56:73:15:19:fe:07:36:c5:69:31:18:86:9e: 89:1b:1c:50:5b:a0:1e:39:50:d0:f3:2b:6c:ea:8f:b6:4b:a5: fc:bc:17:85:93:84:58:ab:de:2a:07:27:92:ab:d1:e7:d5:48: 3f:15:e5:89:90:00:62:ef:37:52:66:87:ad:2f:af:1a:13:c2: 85:11:5d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkvWZB5/5TDuyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NTg3ZDI2ODEtZjBkOS00MzViLWIxMmEtZmRiMTNjYWUwY2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbxlRSOlE5wm22hnV5V0fsIC5xmUJlHH13l2 A+WsCk06nIpyi4tjey0fyd9TyE70C6FoJr4DOSX8bDu6PTMDOndcLlJ/63T0q6OD KMA0A4FTr61ModMkQjEbzOiw+4mFhATamTmtIgYPk5jFlh/bGuY8EMoT7mi0zfh3 rRUmAwmdvygmNcsYPWTAygm3Hsur6FhL2a+ZfxOrUMLCjjV7MJgaNcsL57MLJbn3 FMCGU4ax6ZEwXR0/MIdMJtsZsg+mWvHUzCOc0PaZAn1uh6w0ggzBQq8s31Tyy6bI JZj3NdvW5n2YEuucGiDyum6V5FOW4I8pyeFGqOL5JzlMSEFcvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmNEFnfUGVPNEgIveMVq1z/K+UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWRhODg3NTktZDk5My0z NWMwLWE5MjMtNWYzYThhODI0MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNq8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7ULOsbs1gWdRJkLTQPc0GURt2TmKrK2LP6qpEtbbLFWU4VT5A3nx90 uwB2nhhIPASO3YrZtWInsMMKdAhxv3v8A1lRG5FW78wGzQG+vMvUdgajWfCnJtJ2 2SEFOK6jjVAikwxGb0HTmozguu4WqCHz9UtpGHGl/y0dPtYilx5oZPEq6HO7SEkV K6DJtAif21Yx6MmGcmIRCQikiBlfif+5fyyVJNEQOXNMkJ77v1epBy1G2NsRKmUA VnMVGf4HNsVpMRiGnokbHFBboB45UNDzK2zqj7ZLpfy8F4WThFir3ioHJ5Kr0efV SD8V5YmQAGLvN1Jmh60vrxoTwoURXWM= -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:23 2025 by rpki-client