$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03a33fb8-bdcb-33de-b0cd-9c0a7ff260f0.roa File: 03a33fb8-bdcb-33de-b0cd-9c0a7ff260f0.roa (raw, json) Hash identifier: 3v4wQTLvfbq0eNPauMXorGybcRHOGJr8Ar8PRFHvLDE= Subject key identifier: 59:20:C4:17:FD:84:91:F0:67:86:34:A0:A4:13:75:11:93:80:9D:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76D3732DFDD9DC392B2380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03a33fb8-bdcb-33de-b0cd-9c0a7ff260f0.roa Signing time: Thu 19 Jun 2025 14:40:18 +0000 ROA not before: Thu 19 Jun 2025 14:40:18 +0000 ROA not after: Wed 17 Sep 2025 14:40:18 +0000 asID: 22773 IP address blocks: 72.211.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:d3:73:2d:fd:d9:dc:39:2b:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:18 2025 GMT Not After : Sep 17 14:40:18 2025 GMT Subject: CN=b776b19d-d9b2-4ce8-af79-986daf9a638c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:a5:54:ba:2b:cd:08:99:cc:15:76:55:08: 85:a2:98:db:d3:3e:1d:e8:b8:c4:86:f1:54:1d:2d: cd:7d:a8:3f:36:ac:96:1b:96:c2:77:3c:e4:81:60: 58:2f:03:22:23:50:b0:e1:47:2b:74:b7:58:04:e0: e6:8d:2e:b4:e9:e4:26:4f:62:1f:89:d3:0e:50:d4: e3:47:3f:c1:7a:b6:8d:91:d3:18:91:d1:85:9e:02: fe:6f:a2:ba:ce:f4:1c:81:92:af:5d:d9:d1:83:8d: 5e:a8:e1:d3:1c:40:8a:99:31:d1:fa:93:bd:5b:ce: 06:42:2a:77:0e:e0:b2:cd:d8:17:61:fc:67:9f:d5: f2:ae:47:bb:c9:68:24:6c:b2:b8:e9:51:79:98:9c: 83:52:c7:bc:bd:2a:d9:73:b8:cb:4e:66:fd:2c:09: d2:b1:c8:50:5b:62:11:03:fc:7e:09:ae:79:6e:92: 1d:99:15:2b:bc:d8:c0:7e:fd:9e:e6:d0:65:b2:f2: 60:eb:8c:e2:ee:55:d0:94:d0:18:0f:57:b4:7b:24: 06:0b:35:79:0b:0e:3c:97:0c:47:80:5d:6c:39:cc: 95:0a:ae:a9:bc:89:fe:d6:33:80:d8:36:6f:86:f2: a2:0d:a4:91:2a:53:48:96:85:2b:a3:8a:02:b9:6c: a7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:20:C4:17:FD:84:91:F0:67:86:34:A0:A4:13:75:11:93:80:9D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03a33fb8-bdcb-33de-b0cd-9c0a7ff260f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b7:cb:96:60:36:51:71:d5:87:7c:49:c5:06:78:d8:3c:42: cc:c0:85:8e:6c:e5:9c:05:a2:9f:29:ef:80:8d:6e:ae:ef:19: c1:01:db:79:1d:16:6f:b3:a8:32:ce:a1:2c:03:98:57:ed:03: 6a:29:5f:f4:cd:00:06:47:02:db:93:fc:01:91:fe:de:e0:5a: 6f:01:84:43:c0:5f:45:d2:29:4d:cf:a1:10:0a:90:f7:c3:a0: 14:01:c0:f7:3b:76:42:2b:74:52:01:85:22:a9:97:61:44:e3: 54:fb:b4:8a:bc:20:8b:0a:55:96:89:dc:6d:7b:b9:9d:92:bd: 17:cd:04:52:47:af:4a:37:16:e5:ba:82:aa:2f:ce:db:22:c2: 95:b1:15:b6:73:31:06:86:61:e9:b8:f2:89:66:80:7e:3f:b2: a6:12:ef:79:b3:58:38:69:87:1d:c1:0a:48:fc:70:3d:59:9b: a1:8e:1e:3a:77:ba:f7:30:80:7d:33:45:e3:9f:0d:ee:13:8f: d2:04:d1:60:64:ac:c4:5c:94:5b:bb:1b:60:36:35:b2:b6:f2: 57:57:ba:b5:ff:22:14:cc:0c:6a:fc:0e:d1:cd:dc:35:45:dd: c1:50:69:5c:b0:6a:2b:5c:e8:b7:5b:80:86:c2:ab:d6:81:40: eb:aa:44:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dtNzLf3Z3DkrI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAxOFoXDTI1MDkxNzE0NDAxOFowLzEtMCsGA1UEAxMk Yjc3NmIxOWQtZDliMi00Y2U4LWFmNzktOTg2ZGFmOWE2MzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2elVLorzQiZzBV2VQiFopjb0z4d6LjEhvFU HS3Nfag/NqyWG5bCdzzkgWBYLwMiI1Cw4UcrdLdYBODmjS606eQmT2IfidMOUNTj Rz/BeraNkdMYkdGFngL+b6K6zvQcgZKvXdnRg41eqOHTHECKmTHR+pO9W84GQip3 DuCyzdgXYfxnn9Xyrke7yWgkbLK46VF5mJyDUse8vSrZc7jLTmb9LAnSschQW2IR A/x+Ca55bpIdmRUrvNjAfv2e5tBlsvJg64zi7lXQlNAYD1e0eyQGCzV5Cw48lwxH gF1sOcyVCq6pvIn+1jOA2DZvhvKiDaSRKlNIloUro4oCuWynwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkgxBf9hJHwZ4Y0oKQTdRGTgJ32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDNhMzNmYjgtYmRjYi0z M2RlLWIwY2QtOWMwYTdmZjI2MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC3y5ZgNlFx1Yd8ScUGeNg8QszAhY5s5ZwFop8p74CNbq7vGcEB23kd Fm+zqDLOoSwDmFftA2opX/TNAAZHAtuT/AGR/t7gWm8BhEPAX0XSKU3PoRAKkPfD oBQBwPc7dkIrdFIBhSKpl2FE41T7tIq8IIsKVZaJ3G17uZ2SvRfNBFJHr0o3FuW6 gqovztsiwpWxFbZzMQaGYem48olmgH4/sqYS73mzWDhphx3BCkj8cD1Zm6GOHjp3 uvcwgH0zReOfDe4Tj9IE0WBkrMRclFu7G2A2NbK28ldXurX/IhTMDGr8DtHN3DVF 3cFQaVywaitc6LdbgIbCq9aBQOuqRLg= -----END CERTIFICATE-----Generated at Wed Jul 2 06:07:23 2025 by rpki-client