$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc847642-2529-3c34-bc78-5fb0a53b0004.roa File: cc847642-2529-3c34-bc78-5fb0a53b0004.roa (raw, json) Hash identifier: C/wTGmOHkxAvTON1mXfDfMXf9/VvXdKJfob96kkpMiE= Subject key identifier: 1C:24:15:6B:8A:EF:6D:01:DD:DB:94:00:C4:47:7A:0C:8A:1C:A3:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77F025F22BFA71104FD900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc847642-2529-3c34-bc78-5fb0a53b0004.roa Signing time: Thu 19 Jun 2025 14:42:32 +0000 ROA not before: Thu 19 Jun 2025 14:42:32 +0000 ROA not after: Wed 17 Sep 2025 14:42:32 +0000 asID: 22773 IP address blocks: 72.223.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:f0:25:f2:2b:fa:71:10:4f:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:32 2025 GMT Not After : Sep 17 14:42:32 2025 GMT Subject: CN=25a2c80d-5009-47d1-8a98-3297a062e8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:a8:fc:38:d7:b0:95:78:ef:1d:65:d1:51: c1:3c:78:60:6e:34:04:18:e3:e9:29:8d:e8:0c:ee: 66:99:33:27:02:a6:65:ce:b7:c2:0e:ea:b3:43:25: e1:39:54:3e:f7:88:aa:91:b6:24:aa:b0:52:30:33: 3c:0a:1c:a0:ff:fd:7d:d2:bb:e7:95:9a:9e:c3:26: 09:3b:5a:ed:8e:9d:56:71:29:6d:2e:f8:18:ea:79: 38:a4:59:f4:2f:fa:8d:93:f9:a7:c8:3c:a5:9f:76: 06:e3:53:fa:ca:a5:97:60:94:88:6e:dd:1c:d0:e0: dd:ee:a6:56:10:62:79:19:ca:0c:cd:6c:06:e7:26: 1e:e6:8d:15:78:fb:2d:98:fc:77:f3:7b:6b:39:f9: 84:87:55:4c:c2:99:44:20:5b:bb:49:c2:f9:c3:99: 80:b0:cb:e9:18:3d:af:bb:40:24:17:85:72:a0:91: ea:fa:61:dd:2a:8a:b1:70:d9:a9:dd:f0:9b:fa:d3: 98:ec:c2:54:41:70:1d:f3:11:ff:1d:e2:8a:07:7a: 8e:b2:db:cc:d9:a6:57:7c:6b:0e:53:ab:23:d8:26: e9:e9:20:9c:00:b9:a7:60:d8:5b:d5:c3:9d:6e:18: d3:7b:19:62:6f:15:50:37:fb:f6:05:34:a8:d0:1e: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:15:6B:8A:EF:6D:01:DD:DB:94:00:C4:47:7A:0C:8A:1C:A3:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc847642-2529-3c34-bc78-5fb0a53b0004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:88:7e:0d:50:0e:89:44:92:25:d6:85:40:81:f0:05:1b:bf: 4e:1f:3b:33:39:ae:c2:09:b2:f5:d8:c1:f3:b1:be:0b:2f:d0: 4e:fa:2b:11:3f:23:23:ac:fc:9a:e2:ea:9c:da:b7:d6:93:25: 60:72:b4:68:77:e1:22:0d:4a:75:02:96:d6:5f:91:82:72:93: 55:b6:91:0a:7d:f6:19:e4:80:45:7c:9f:8a:a2:5b:d5:9e:1a: a1:f7:c3:0f:96:4d:cc:b3:66:88:69:db:4a:44:ec:4c:bf:78: 99:ca:46:7d:11:99:b4:b3:86:f6:c9:36:bb:86:e5:24:99:2c: b0:e6:fd:9a:3f:85:f2:47:ca:90:92:8f:ad:5e:aa:45:4b:a2: 47:9e:1a:22:9d:5f:36:b0:43:d6:32:dc:d7:ce:75:d6:59:e1: 8a:12:03:70:d2:e3:25:26:57:28:e4:f3:7a:51:60:3d:53:d2: fc:b8:60:18:dc:5b:b0:ee:fd:3d:a5:2c:97:05:c3:d3:df:f6: 7c:b6:16:d0:c4:0f:27:e3:90:a4:dc:71:88:0b:ca:fe:c6:00: cf:03:83:59:60:80:29:6d:77:94:36:ec:d0:fe:99:f1:8f:5e: b2:48:77:65:d6:02:11:83:e7:e6:ef:23:78:d6:47:5e:65:9a: 89:02:67:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d/Al8iv6cRBP2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIzMloXDTI1MDkxNzE0NDIzMlowLzEtMCsGA1UEAxMk MjVhMmM4MGQtNTAwOS00N2QxLThhOTgtMzI5N2EwNjJlOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN2o/DjXsJV47x1l0VHBPHhgbjQEGOPpKY3o DO5mmTMnAqZlzrfCDuqzQyXhOVQ+94iqkbYkqrBSMDM8Chyg//190rvnlZqewyYJ O1rtjp1WcSltLvgY6nk4pFn0L/qNk/mnyDyln3YG41P6yqWXYJSIbt0c0ODd7qZW EGJ5GcoMzWwG5yYe5o0VePstmPx383trOfmEh1VMwplEIFu7ScL5w5mAsMvpGD2v u0AkF4VyoJHq+mHdKoqxcNmp3fCb+tOY7MJUQXAd8xH/HeKKB3qOstvM2aZXfGsO U6sj2Cbp6SCcALmnYNhb1cOdbhjTexlibxVQN/v2BTSo0B66cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwkFWuK720B3duUAMRHegyKHKNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2M4NDc2NDItMjUyOS0z YzM0LWJjNzgtNWZiMGE1M2IwMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN8uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGIfg1QDolEkiXWhUCB8AUbv04fOzM5rsIJsvXYwfOxvgsv0E76KxE/ IyOs/Jri6pzat9aTJWBytGh34SINSnUCltZfkYJyk1W2kQp99hnkgEV8n4qiW9We GqH3ww+WTcyzZohp20pE7Ey/eJnKRn0RmbSzhvbJNruG5SSZLLDm/Zo/hfJHypCS j61eqkVLokeeGiKdXzawQ9Yy3NfOddZZ4YoSA3DS4yUmVyjk83pRYD1T0vy4YBjc W7Du/T2lLJcFw9Pf9ny2FtDEDyfjkKTccYgLyv7GAM8Dg1lggCltd5Q27ND+mfGP XrJId2XWAhGD5+bvI3jWR15lmokCZ6Y= -----END CERTIFICATE-----Generated at Wed Jul 2 15:11:41 2025 by rpki-client