$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/63432ac4-2cd4-335e-b767-36cd2359a386.roa File: 63432ac4-2cd4-335e-b767-36cd2359a386.roa (raw, json) Hash identifier: P41F10rHQuVkBfMmLTl/SJ9yK2T36MhMyYFh2HA8oms= Subject key identifier: 3B:1A:23:AF:E2:D5:7C:0F:9E:8A:C7:07:FE:0E:D6:6D:4B:50:DA:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364C1A29ABADF3AF9DAA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/63432ac4-2cd4-335e-b767-36cd2359a386.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.218.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4c:1a:29:ab:ad:f3:af:9d:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8a8dc52c-9539-463f-9d55-74809717d828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:56:ec:38:1d:4f:a1:93:f7:a6:9c:dc:a9: 0b:48:f3:26:83:be:b2:9d:79:46:eb:23:29:65:28: a8:ce:5d:53:ba:79:1e:95:d1:ce:cc:b1:3e:02:ce: 8f:9e:3c:a6:ab:9b:81:52:ec:44:65:11:45:d9:87: ec:4b:a9:02:d6:f5:c9:66:11:05:28:39:cf:e3:f9: 5a:4a:9b:cf:fa:05:83:c8:1d:4b:de:73:8e:2c:99: fe:0f:d7:01:bb:1c:eb:86:f4:93:05:e7:0b:dc:29: 3f:a1:e9:b2:33:1d:c6:50:90:3a:cc:78:c4:af:fd: 55:7c:53:47:1a:eb:73:33:58:39:fc:3b:9e:64:96: a7:2e:ac:1c:a1:44:8d:f6:04:61:63:40:a4:71:72: 45:1d:2c:4f:00:1b:39:c2:36:b7:f5:70:36:80:38: af:ef:fe:e2:e0:e9:b7:69:f7:66:92:98:49:89:5a: 9f:ef:14:4b:d3:fc:f1:1f:fe:0d:9c:86:ba:65:0e: c5:60:7c:fb:b3:e2:81:c8:99:ce:5a:2a:b2:54:17: 54:99:c7:ba:7e:ea:fa:d8:6f:d6:e6:65:60:64:1a: e3:c5:84:71:0d:10:0a:92:20:8a:8f:d5:a2:0c:e6: d6:ae:af:36:d2:cb:b4:60:f0:25:be:17:e4:87:6f: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1A:23:AF:E2:D5:7C:0F:9E:8A:C7:07:FE:0E:D6:6D:4B:50:DA:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/63432ac4-2cd4-335e-b767-36cd2359a386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:80:37:23:24:e4:5f:89:d2:5a:58:0f:aa:c1:81:fe:50:6a: 3b:87:09:7e:90:48:f6:bd:97:e6:ed:c0:8b:81:9f:88:60:86: 4d:60:2c:8c:4d:18:4b:a7:04:31:4f:c1:c5:b9:93:a7:03:fb: ab:4e:c7:e0:a0:24:68:09:5c:21:37:c7:fd:39:48:3b:60:d6: 23:c3:27:c9:ee:6c:67:db:e6:2b:05:72:a9:55:78:a4:3d:8e: 15:3c:9f:48:3a:67:5a:4b:37:f0:95:c6:41:6c:df:93:bc:2f: e3:1a:24:59:b1:b4:72:6e:95:b1:14:83:7b:1d:14:0d:d1:7d: 4f:29:eb:20:4c:9f:01:2b:29:d6:f2:8a:cf:c6:3b:14:cd:90: 2a:13:98:e2:b6:a9:c0:01:54:28:39:d5:2a:3e:29:18:44:4b: 84:48:2f:dc:54:b8:4b:75:af:ec:5e:30:08:bf:d2:0c:1d:21: e3:f5:dd:63:80:50:ba:8b:48:78:20:b2:aa:7c:55:90:aa:5c: e4:30:fa:54:7f:18:16:d6:5e:33:c1:9d:e8:2a:9a:95:1e:ca: e2:87:e4:32:0c:87:c7:cd:05:77:1d:93:b5:20:1e:1e:7d:a6: 6e:f0:e5:41:c0:c9:c6:0b:13:7e:dd:22:14:0b:4d:08:47:46: 95:b8:42:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkwaKaut86+dqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OGE4ZGM1MmMtOTUzOS00NjNmLTlkNTUtNzQ4MDk3MTdkODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMxW7DgdT6GT96ac3KkLSPMmg76ynXlG6yMp ZSiozl1TunkeldHOzLE+As6Pnjymq5uBUuxEZRFF2YfsS6kC1vXJZhEFKDnP4/la SpvP+gWDyB1L3nOOLJn+D9cBuxzrhvSTBecL3Ck/oemyMx3GUJA6zHjEr/1VfFNH GutzM1g5/DueZJanLqwcoUSN9gRhY0CkcXJFHSxPABs5wja39XA2gDiv7/7i4Om3 afdmkphJiVqf7xRL0/zxH/4NnIa6ZQ7FYHz7s+KByJnOWiqyVBdUmce6fur62G/W 5mVgZBrjxYRxDRAKkiCKj9WiDObWrq820su0YPAlvhfkh28g6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsaI6/i1XwPnorHB/4O1m1LUNqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjM0MzJhYzQtMmNkNC0z MzVlLWI3NjctMzZjZDIzNTlhMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWANyMk5F+J0lpYD6rBgf5QajuHCX6QSPa9l+btwIuBn4hghk1gLIxN GEunBDFPwcW5k6cD+6tOx+CgJGgJXCE3x/05SDtg1iPDJ8nubGfb5isFcqlVeKQ9 jhU8n0g6Z1pLN/CVxkFs35O8L+MaJFmxtHJulbEUg3sdFA3RfU8p6yBMnwErKdby is/GOxTNkCoTmOK2qcABVCg51So+KRhES4RIL9xUuEt1r+xeMAi/0gwdIeP13WOA ULqLSHggsqp8VZCqXOQw+lR/GBbWXjPBnegqmpUeyuKH5DIMh8fNBXcdk7UgHh59 pm7w5UHAycYLE37dIhQLTQhHRpW4Qhc= -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:40 2025 by rpki-client