$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc6d7691-728e-3870-9775-b36aaf4283d9.roa File: dc6d7691-728e-3870-9775-b36aaf4283d9.roa (raw, json) Hash identifier: pGNTVNnKgC5XH3yTGm3LCErgs2nOOp0q632JfRo7m8Y= Subject key identifier: A9:9E:F9:40:7C:1D:94:2F:F1:CA:39:F7:92:5B:04:0F:BB:40:95:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96362A764CAE40373F36D108 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc6d7691-728e-3870-9775-b36aaf4283d9.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.213.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:2a:76:4c:ae:40:37:3f:36:d1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=322a8df6-ab5a-41b5-a2ba-327f0f152b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d3:59:53:1c:db:a3:1e:c6:10:de:d3:8d:cb: 5a:87:85:a0:c5:df:d0:d2:91:e6:d9:90:a9:34:00: e7:e2:42:8f:5b:0e:fa:3d:57:28:cb:a0:4e:c8:c6: 52:3f:5a:ea:18:e1:a1:33:f9:23:29:9f:4b:2c:cd: 51:92:0c:f4:de:77:0b:d3:44:6a:2a:17:61:98:9a: 9b:b9:1c:7a:68:10:fe:73:f5:f4:5c:4e:82:e2:c7: 91:88:bc:44:ce:33:2a:7d:d3:ee:1e:b9:84:92:68: 02:ff:76:76:ed:89:21:ae:60:34:1b:d2:b7:df:4a: 50:49:0e:76:9f:c8:3e:5d:06:8b:a6:4a:9d:c7:54: 18:2b:f3:00:de:b9:6a:d9:44:3f:d4:8c:cd:6a:13: e3:c6:08:dd:f4:69:d6:53:d5:f6:8e:df:01:91:bf: c9:b0:e5:bb:87:54:30:ce:c3:90:6a:f7:ec:49:2f: e0:68:be:17:1a:11:c5:02:c2:4a:b4:4e:fa:25:43: ab:a6:22:da:e1:0f:29:ef:d9:88:83:e1:d7:09:9c: a6:05:d3:ad:c6:94:19:24:43:f8:03:1f:1c:34:36: 42:09:df:b5:a1:d0:ae:f4:69:f5:ba:67:77:50:58: 20:65:8b:2d:8e:f2:7c:4b:2d:22:fe:80:4a:02:ae: 17:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9E:F9:40:7C:1D:94:2F:F1:CA:39:F7:92:5B:04:0F:BB:40:95:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc6d7691-728e-3870-9775-b36aaf4283d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.213.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a5:e3:ba:86:90:ec:73:96:a5:41:82:5d:bd:12:4e:a7:ce: 79:f7:bf:4d:c0:12:5c:89:79:a4:8c:d7:27:a3:56:e1:0e:f4: f7:65:89:e6:1a:79:37:c1:92:d6:2d:da:16:7a:8a:37:01:ac: ad:34:70:d3:6b:cf:d4:95:01:dd:7f:74:db:42:40:26:30:bc: b8:55:18:62:49:ea:9a:25:0a:33:2c:13:e3:23:f4:f2:29:5b: 2d:37:7c:e4:6d:7b:9c:26:c5:f6:67:e5:d5:1a:f4:59:91:10: 62:54:f3:2d:b8:6e:ee:05:00:04:56:f5:9e:01:89:b9:74:5c: 14:f0:3e:73:88:2a:9b:d7:c2:fd:62:ee:94:da:7e:5c:2a:bd: 7c:44:7a:01:67:67:f7:a3:47:78:7d:ab:2a:28:35:ab:50:13: 15:36:72:54:cb:23:40:83:cd:17:9a:bc:e1:3a:32:f6:67:d0: a2:b3:ed:41:64:07:3e:41:5b:d8:7d:80:36:79:01:0c:a4:5e: 2d:bf:80:39:ab:e8:e0:fd:ad:7c:b8:09:cd:28:56:fd:49:a2: ad:bf:14:16:75:cb:b5:3f:85:b0:b5:57:ab:6a:c6:9d:85:84: 99:8c:c1:1c:f5:94:5b:21:48:1f:38:6d:18:b0:5c:26:22:5a: f6:9e:5f:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNip2TK5ANz820QgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzIyYThkZjYtYWI1YS00MWI1LWEyYmEtMzI3ZjBmMTUyYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidNZUxzbox7GEN7Tjctah4Wgxd/Q0pHm2ZCp NADn4kKPWw76PVcoy6BOyMZSP1rqGOGhM/kjKZ9LLM1Rkgz03ncL00RqKhdhmJqb uRx6aBD+c/X0XE6C4seRiLxEzjMqfdPuHrmEkmgC/3Z27YkhrmA0G9K330pQSQ52 n8g+XQaLpkqdx1QYK/MA3rlq2UQ/1IzNahPjxgjd9GnWU9X2jt8Bkb/JsOW7h1Qw zsOQavfsSS/gaL4XGhHFAsJKtE76JUOrpiLa4Q8p79mIg+HXCZymBdOtxpQZJEP4 Ax8cNDZCCd+1odCu9Gn1umd3UFggZYstjvJ8Sy0i/oBKAq4X6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKme+UB8HZQv8co595JbBA+7QJW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGM2ZDc2OTEtNzI4ZS0z ODcwLTk3NzUtYjM2YWFmNDI4M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNXjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyl47qGkOxzlqVBgl29Ek6nznn3v03AElyJeaSM1yejVuEO9PdlieYa eTfBktYt2hZ6ijcBrK00cNNrz9SVAd1/dNtCQCYwvLhVGGJJ6polCjMsE+Mj9PIp Wy03fORte5wmxfZn5dUa9FmREGJU8y24bu4FAARW9Z4Bibl0XBTwPnOIKpvXwv1i 7pTaflwqvXxEegFnZ/ejR3h9qyooNatQExU2clTLI0CDzReavOE6MvZn0KKz7UFk Bz5BW9h9gDZ5AQykXi2/gDmr6OD9rXy4Cc0oVv1Joq2/FBZ1y7U/hbC1V6tqxp2F hJmMwRz1lFshSB84bRiwXCYiWvaeX4Y= -----END CERTIFICATE-----Generated at Sat Aug 9 01:18:55 2025 by rpki-client