$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c189b78a-6704-3132-97a1-8be3500c8124.roa File: c189b78a-6704-3132-97a1-8be3500c8124.roa (raw, json) Hash identifier: SQ3g2InibjpQObpr70aoXJyeLNF+Wz6q3Ygvl3xfnY8= Subject key identifier: FE:16:02:92:7A:C3:12:CA:5B:5E:DD:26:DF:4D:1D:88:D4:79:EE:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963629BBD8738B5A3525B500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c189b78a-6704-3132-97a1-8be3500c8124.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.209.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:29:bb:d8:73:8b:5a:35:25:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=c59f29fe-fb30-4943-b13b-126b192218a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:32:2c:58:42:0c:4e:56:4d:c5:3c:0d:d2: 7d:50:ad:de:21:f8:9b:70:ca:31:ad:e8:68:6e:64: 93:eb:cb:8c:61:f2:ff:24:af:c4:61:97:12:3a:07: e7:04:09:34:d4:ba:d8:92:0b:ac:77:1c:00:c3:95: dc:2f:68:17:0f:01:c9:59:44:49:8d:62:b4:7e:6c: c7:a1:b0:45:d9:49:d7:72:e4:92:67:11:7d:ee:4d: 7f:2f:95:22:6c:06:5b:6c:de:0b:e0:be:44:91:56: f2:3f:66:ae:d2:69:e0:35:32:1f:25:3b:b4:ad:a9: 43:37:29:f5:e8:d6:24:f1:8a:a6:03:dc:b4:a6:12: 93:32:f3:02:91:a3:cd:d4:7e:18:84:6f:b5:73:4c: 9e:a7:e8:80:08:ae:ab:e2:94:5f:50:77:20:ac:b3: 18:0c:e5:ee:44:6e:f5:d7:88:d6:49:3c:01:12:a7: 84:f7:9b:5f:34:35:20:68:b2:54:81:8c:a4:ba:36: 53:4e:f1:78:24:85:61:dd:89:74:48:b8:d3:46:f9: 78:8d:46:c4:c2:21:57:11:0e:ee:97:90:f4:cf:25: 5d:06:d1:e3:76:ed:f0:8a:4e:25:d3:ae:fc:82:51: 37:41:66:1a:16:3f:99:36:55:61:f7:13:51:48:45: 3a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:16:02:92:7A:C3:12:CA:5B:5E:DD:26:DF:4D:1D:88:D4:79:EE:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c189b78a-6704-3132-97a1-8be3500c8124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:14:85:07:56:f0:7d:4b:97:7e:7a:77:08:f6:ed:a3:ce:45: bc:f6:a1:67:d3:b5:35:04:6f:46:87:66:41:11:69:88:c7:17: 32:0f:4c:a3:c0:10:86:a1:6d:4d:51:87:9f:e4:42:1e:83:30: f9:fc:e0:1f:66:64:98:7b:47:0a:05:b2:a4:ee:2c:fa:e8:e0: fc:bb:2c:5b:93:c0:ae:bb:ef:bc:da:e4:e5:c7:19:2a:51:20: 39:10:94:67:31:ae:b6:cc:ad:2e:fa:b2:56:8d:c6:63:48:9d: 78:4c:72:39:c0:55:15:60:42:cc:be:c5:67:70:5c:a0:d8:92: 91:1e:a5:34:1e:36:0f:79:b0:53:0f:dd:8a:94:91:52:c2:32: bd:9b:b0:eb:d8:cd:33:37:2a:3b:8f:92:ba:1e:10:e1:b1:d3: 6e:2c:d0:5f:bf:e5:0c:c8:ba:c5:12:87:2a:68:17:da:56:87: c3:76:e7:95:ea:81:a3:55:a9:4d:86:c9:fb:e0:47:fb:9e:34: 1c:b1:0d:95:41:90:48:a5:a0:27:76:86:05:aa:c1:0f:a0:01: 4c:78:e6:ef:93:c9:69:be:ea:f9:96:28:1f:31:2f:50:20:9b: e3:37:ce:d6:e3:66:36:10:82:fe:da:17:29:c4:36:1f:a2:68: d8:09:0b:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNim72HOLWjUltQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YzU5ZjI5ZmUtZmIzMC00OTQzLWIxM2ItMTI2YjE5MjIxOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvkyLFhCDE5WTcU8DdJ9UK3eIfibcMoxreho bmST68uMYfL/JK/EYZcSOgfnBAk01LrYkgusdxwAw5XcL2gXDwHJWURJjWK0fmzH obBF2UnXcuSSZxF97k1/L5UibAZbbN4L4L5EkVbyP2au0mngNTIfJTu0ralDNyn1 6NYk8YqmA9y0phKTMvMCkaPN1H4YhG+1c0yep+iACK6r4pRfUHcgrLMYDOXuRG71 14jWSTwBEqeE95tfNDUgaLJUgYykujZTTvF4JIVh3Yl0SLjTRvl4jUbEwiFXEQ7u l5D0zyVdBtHjdu3wik4l0678glE3QWYaFj+ZNlVh9xNRSEU6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4WApJ6wxLKW17dJt9NHYjUee4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzE4OWI3OGEtNjcwNC0z MTMyLTk3YTEtOGJlMzUwMGM4MTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYUhQdW8H1Ll356dwj27aPORbz2oWfTtTUEb0aHZkERaYjHFzIPTKPA EIahbU1Rh5/kQh6DMPn84B9mZJh7RwoFsqTuLPro4Py7LFuTwK6777za5OXHGSpR IDkQlGcxrrbMrS76slaNxmNInXhMcjnAVRVgQsy+xWdwXKDYkpEepTQeNg95sFMP 3YqUkVLCMr2bsOvYzTM3KjuPkroeEOGx024s0F+/5QzIusUShypoF9pWh8N255Xq gaNVqU2GyfvgR/ueNByxDZVBkEiloCd2hgWqwQ+gAUx45u+TyWm+6vmWKB8xL1Ag m+M3ztbjZjYQgv7aFynENh+iaNgJC7U= -----END CERTIFICATE-----Generated at Sat Aug 9 01:18:36 2025 by rpki-client