$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/56ecbbfa-5a3d-359b-9258-53a7452aab9d.roa File: 56ecbbfa-5a3d-359b-9258-53a7452aab9d.roa (raw, json) Hash identifier: GiGE2Bg4hL5z6HNyK/m+tHLMfzFjsHbKL3KU+u0b0tU= Subject key identifier: 25:4D:A9:C7:33:00:2E:B2:1D:CB:AB:E7:A8:34:C8:DD:1A:59:3C:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7735857FEAAD06EA64AD40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/56ecbbfa-5a3d-359b-9258-53a7452aab9d.roa Signing time: Thu 19 Jun 2025 14:41:04 +0000 ROA not before: Thu 19 Jun 2025 14:41:04 +0000 ROA not after: Wed 17 Sep 2025 14:41:04 +0000 asID: 22773 IP address blocks: 72.216.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:35:85:7f:ea:ad:06:ea:64:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:04 2025 GMT Not After : Sep 17 14:41:04 2025 GMT Subject: CN=918d5f8b-f8f2-4371-a7cb-36b35e79bc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:20:4d:59:e3:51:f1:07:af:e3:1c:e1:31:d3: 0f:f4:81:f6:55:dc:82:92:5b:ae:cb:ea:d4:89:3c: a7:d1:79:09:5c:37:90:22:b1:8a:8d:b0:b2:c0:3c: c8:9c:f2:17:fd:e1:c9:18:a4:25:ee:26:53:e9:69: f6:e1:5c:6e:3c:7f:c3:5a:05:9d:67:0c:2a:06:6e: 3e:9d:c1:09:ca:5c:f2:6f:85:81:37:1f:87:4b:3f: b9:ac:73:03:44:46:01:79:70:0e:ce:db:b1:06:15: 0c:90:1c:b6:2a:81:aa:73:36:18:47:07:3c:4e:db: 28:38:d0:9a:d3:23:4e:26:4f:29:bb:44:3c:10:91: f4:4d:cf:16:ea:1a:07:39:c0:fe:8f:b7:47:e1:09: 05:c1:c6:e0:47:8b:28:ba:61:8f:d7:f7:ab:9f:c8: 4e:db:35:90:f7:9f:75:3c:ac:62:c8:e5:ac:64:ca: f7:d3:98:17:2c:c7:02:3c:ba:22:21:98:eb:74:a1: 48:7e:37:87:f2:7b:f1:2e:63:7e:f5:79:f6:39:99: ae:1a:2a:b7:cd:80:58:cd:7e:dd:4e:22:a8:7a:84: 3b:65:93:87:53:c0:ae:37:a3:d7:2d:27:3f:46:d4: 27:85:26:5e:f6:a9:ee:be:09:99:dd:fb:68:10:b2: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4D:A9:C7:33:00:2E:B2:1D:CB:AB:E7:A8:34:C8:DD:1A:59:3C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/56ecbbfa-5a3d-359b-9258-53a7452aab9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:13:db:02:f8:55:4f:14:c1:95:c9:38:80:d8:5b:fb:dd:89: a1:23:13:50:d2:e7:ba:06:5b:1e:fe:69:f2:90:28:21:6c:48: b6:c8:5f:b1:3d:34:05:0f:f0:3e:8e:11:fc:10:9b:e4:20:4b: e5:d9:e2:5d:18:be:9b:2e:f1:a2:30:4b:08:1b:66:8c:03:9e: 04:e1:00:f9:8d:39:fa:51:3c:95:19:e7:da:05:62:d5:a0:08: 44:1f:43:09:28:c2:2f:c8:e1:c4:65:ae:ed:f4:33:a8:b3:03: 3b:4a:f2:af:a7:50:2f:0e:ac:b0:64:04:e1:bd:dd:c7:aa:b1: 5f:66:0c:2d:89:d8:40:f1:3f:0c:8c:72:aa:24:8d:e4:96:03: bd:10:f2:c0:7b:89:cc:9a:42:ea:af:90:d5:43:6d:79:9c:ea: b1:65:d3:ee:d6:7d:1e:74:42:bf:d5:0e:8d:90:3d:95:a7:a8: bd:88:f6:7f:89:d2:1e:b2:20:d3:76:19:91:f2:f8:50:3d:b6: 34:66:9c:e1:33:58:73:3e:74:08:2a:a8:64:fe:ea:99:e7:fe: 91:e8:02:38:4c:58:f0:e0:38:79:1a:d7:17:39:e7:06:09:3b: 01:67:08:ca:28:c8:47:a7:2b:78:00:e9:b3:cd:46:01:59:cd: 7a:6c:89:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dzWFf+qtBupkrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDEwNFoXDTI1MDkxNzE0NDEwNFowLzEtMCsGA1UEAxMk OTE4ZDVmOGItZjhmMi00MzcxLWE3Y2ItMzZiMzVlNzliYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiBNWeNR8Qev4xzhMdMP9IH2VdyCkluuy+rU iTyn0XkJXDeQIrGKjbCywDzInPIX/eHJGKQl7iZT6Wn24VxuPH/DWgWdZwwqBm4+ ncEJylzyb4WBNx+HSz+5rHMDREYBeXAOztuxBhUMkBy2KoGqczYYRwc8TtsoONCa 0yNOJk8pu0Q8EJH0Tc8W6hoHOcD+j7dH4QkFwcbgR4soumGP1/ern8hO2zWQ9591 PKxiyOWsZMr305gXLMcCPLoiIZjrdKFIfjeH8nvxLmN+9Xn2OZmuGiq3zYBYzX7d TiKoeoQ7ZZOHU8CuN6PXLSc/RtQnhSZe9qnuvgmZ3ftoELL3MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVNqcczAC6yHcur56g0yN0aWTyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTZlY2JiZmEtNWEzZC0z NTliLTkyNTgtNTNhNzQ1MmFhYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMT2wL4VU8UwZXJOIDYW/vdiaEjE1DS57oGWx7+afKQKCFsSLbIX7E9 NAUP8D6OEfwQm+QgS+XZ4l0Yvpsu8aIwSwgbZowDngThAPmNOfpRPJUZ59oFYtWg CEQfQwkowi/I4cRlru30M6izAztK8q+nUC8OrLBkBOG93ceqsV9mDC2J2EDxPwyM cqokjeSWA70Q8sB7icyaQuqvkNVDbXmc6rFl0+7WfR50Qr/VDo2QPZWnqL2I9n+J 0h6yINN2GZHy+FA9tjRmnOEzWHM+dAgqqGT+6pnn/pHoAjhMWPDgOHka1xc55wYJ OwFnCMooyEenK3gA6bPNRgFZzXpsibY= -----END CERTIFICATE-----Generated at Wed Jul 2 07:08:32 2025 by rpki-client