$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dde972bd-5966-3ab6-ac6b-0dc49806892b.roa File: dde972bd-5966-3ab6-ac6b-0dc49806892b.roa (raw, json) Hash identifier: n5M6kxqnnpPo8e4hSxhn2dTxGlCfWXSHh5HKcpn/JzA= Subject key identifier: F1:E1:99:B6:C7:63:BA:7D:87:AC:07:E3:9A:11:38:63:C3:FD:34:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636800E0CF9DE8199734E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dde972bd-5966-3ab6-ac6b-0dc49806892b.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 174.66.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:80:0e:0c:f9:de:81:99:73:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=1ea3cd9b-26f9-40e2-93ed-03d3f56da8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:83:fe:02:b2:7f:01:4e:17:0d:97:af:0b: 87:e9:9a:33:fe:69:47:a3:45:ac:3a:19:48:54:20: d0:b5:36:75:d1:ca:8e:bc:f6:8b:a3:9d:df:30:42: 3a:04:ce:30:f6:6b:52:23:36:0a:da:83:78:b4:8c: 1e:cd:17:89:94:a0:bf:03:67:14:3f:85:91:3c:9a: 3e:a2:8b:7b:67:81:e0:b6:1c:7f:1d:b2:5a:4a:8a: bb:0d:93:bb:6f:79:a5:fe:d2:96:55:14:e3:a9:90: 75:db:fa:49:1e:a3:7d:a7:fb:45:9e:bb:dd:4f:f9: 2e:81:cc:25:08:b8:ec:69:e4:78:32:28:59:38:e2: 31:3b:f7:c6:bd:6e:86:af:35:ea:5c:26:55:e2:d5: ff:59:0c:ac:90:f4:fd:97:e6:30:45:2f:0d:85:7f: f8:8c:37:50:e6:65:b0:8a:d8:51:5b:07:6f:0e:a4: d8:d7:ac:41:36:21:4e:a1:19:1f:29:56:00:cb:83: 19:01:89:14:7e:fd:13:af:79:94:dd:49:66:52:19: 28:4a:f7:4c:2d:64:94:4d:92:36:a3:00:bd:1e:21: c1:cc:09:96:67:4a:32:c1:1e:9e:49:f4:3d:d6:8b: 33:ab:5b:c3:bf:f6:e6:ca:9b:1f:4d:52:0c:16:c1: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E1:99:B6:C7:63:BA:7D:87:AC:07:E3:9A:11:38:63:C3:FD:34:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dde972bd-5966-3ab6-ac6b-0dc49806892b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:62:50:1a:1d:b1:bc:8a:51:ad:ef:7f:cb:b2:ec:42:33:df: c4:23:85:6f:09:64:a8:17:c2:e2:8a:52:84:a4:21:dd:9b:d8: 00:bd:ba:c8:00:0e:3b:3f:5e:6b:23:d8:bc:02:e8:d1:b8:36: 8c:8b:97:17:c5:96:6a:42:e4:be:af:4e:aa:d7:77:74:01:92: 16:24:bb:15:08:b8:43:7a:0c:85:bf:2a:df:f3:c7:22:94:20: 34:ce:13:58:23:78:ce:63:f4:15:4e:e6:dd:e5:fb:72:26:ef: 94:64:7f:e2:98:82:9f:d3:59:1a:90:73:5d:a0:45:4b:9e:41: 96:27:e1:44:b6:75:7a:74:52:a9:fd:c6:d6:d8:f0:e6:3c:31: fb:33:f3:e9:d4:f4:55:ed:89:07:65:63:1e:dc:a8:ac:0c:0f: 11:a7:6f:a5:f3:b6:b5:72:c9:45:35:8c:42:3e:40:5d:e2:dc: 12:12:81:96:a8:3f:04:b4:20:6e:60:f8:ed:91:04:9d:ec:f9: d8:79:d6:b6:63:02:a7:fe:61:ba:29:58:b3:39:3b:dd:f6:83: 1f:06:c1:bf:ec:af:b1:14:39:df:3e:63:d7:56:cd:25:7f:76: c2:4c:a3:fa:11:cc:58:e9:a6:95:28:3d:fd:dc:76:4e:45:5f: e4:09:29:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNoAODPnegZlzTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MWVhM2NkOWItMjZmOS00MGUyLTkzZWQtMDNkM2Y1NmRhOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9WD/gKyfwFOFw2XrwuH6Zoz/mlHo0WsOhlI VCDQtTZ10cqOvPaLo53fMEI6BM4w9mtSIzYK2oN4tIwezReJlKC/A2cUP4WRPJo+ oot7Z4Hgthx/HbJaSoq7DZO7b3ml/tKWVRTjqZB12/pJHqN9p/tFnrvdT/kugcwl CLjsaeR4MihZOOIxO/fGvW6GrzXqXCZV4tX/WQyskPT9l+YwRS8NhX/4jDdQ5mWw ithRWwdvDqTY16xBNiFOoRkfKVYAy4MZAYkUfv0Tr3mU3UlmUhkoSvdMLWSUTZI2 owC9HiHBzAmWZ0oywR6eSfQ91oszq1vDv/bmypsfTVIMFsGLewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHhmbbHY7p9h6wH45oROGPD/TTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRlOTcyYmQtNTk2Ni0z YWI2LWFjNmItMGRjNDk4MDY4OTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1iUBodsbyKUa3vf8uy7EIz38QjhW8JZKgXwuKKUoSkId2b2AC9usgA Djs/Xmsj2LwC6NG4NoyLlxfFlmpC5L6vTqrXd3QBkhYkuxUIuEN6DIW/Kt/zxyKU IDTOE1gjeM5j9BVO5t3l+3Im75Rkf+KYgp/TWRqQc12gRUueQZYn4US2dXp0Uqn9 xtbY8OY8Mfsz8+nU9FXtiQdlYx7cqKwMDxGnb6XztrVyyUU1jEI+QF3i3BISgZao PwS0IG5g+O2RBJ3s+dh51rZjAqf+YbopWLM5O932gx8Gwb/sr7EUOd8+Y9dWzSV/ dsJMo/oRzFjpppUoPf3cdk5FX+QJKVo= -----END CERTIFICATE-----Generated at Fri Aug 8 13:06:44 2025 by rpki-client