$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dcae98bb-79b1-3a87-8f3a-4533f2327ebc.roa File: dcae98bb-79b1-3a87-8f3a-4533f2327ebc.roa (raw, json) Hash identifier: mgM9Dl+FHcGoWgLxpVHhURwrLM04QyFCEsSNFYg5BR4= Subject key identifier: 35:EF:BE:3B:53:4F:10:AE:15:63:69:73:2B:26:58:F8:A3:C7:27:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E764A6B43C7278B57A3A400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dcae98bb-79b1-3a87-8f3a-4533f2327ebc.roa Signing time: Thu 19 Jun 2025 14:39:13 +0000 ROA not before: Thu 19 Jun 2025 14:39:13 +0000 ROA not after: Wed 17 Sep 2025 14:39:13 +0000 asID: 22773 IP address blocks: 72.208.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:4a:6b:43:c7:27:8b:57:a3:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:13 2025 GMT Not After : Sep 17 14:39:13 2025 GMT Subject: CN=3197efb6-1b71-4433-86df-15f3b30bf390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:03:1f:f2:87:f7:8a:91:29:19:06:92:f8:96: da:94:23:ab:bf:c9:82:47:62:36:f1:87:a3:ab:60: 6d:aa:6c:ce:a6:18:1c:fe:f3:47:0c:a3:69:91:f6: b9:4e:73:42:d4:d8:04:dd:47:21:76:4b:de:86:bd: 0e:42:66:78:35:cb:d8:d3:7a:aa:54:2a:8f:7e:1d: 22:b9:3b:6c:26:dd:dd:6e:8e:48:d5:b0:c6:b6:8b: 3d:5c:7a:26:66:ea:f3:88:f1:e2:1d:f6:a6:ff:37: 1b:98:27:49:9f:49:89:4a:ce:d7:71:86:6b:a3:ff: 67:83:e4:bf:84:b0:2c:af:d8:2d:2c:95:92:12:34: 36:73:84:1a:e4:e0:05:dd:57:ec:52:5d:18:f5:9c: 6e:2f:8d:31:80:86:60:0d:59:19:26:1a:30:3f:3b: 4a:2e:be:3a:58:0f:1f:08:58:5e:4d:bd:f8:26:59: d7:b6:d0:7a:5f:a2:3f:ff:ad:2d:87:6e:81:3b:74: 6c:24:05:13:ee:a3:c1:b5:98:be:1b:05:83:ce:fc: c3:ed:77:05:9d:1f:84:05:05:32:90:2f:83:e7:65: 02:12:e8:ae:62:97:ba:62:cb:14:2f:50:09:cd:a7: 1d:02:bc:fd:b2:77:d2:6d:28:1f:9c:23:46:e6:81: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:BE:3B:53:4F:10:AE:15:63:69:73:2B:26:58:F8:A3:C7:27:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dcae98bb-79b1-3a87-8f3a-4533f2327ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:33:b9:4e:fb:9d:62:1d:da:66:e7:9d:3e:ee:ce:33:83:79: 41:0b:d3:5a:3d:b3:31:11:a8:44:e5:85:3b:1a:55:b2:1a:df: fc:fb:93:6d:50:1f:e1:16:76:f5:2f:5d:4e:dc:b3:36:f1:24: 31:14:40:b9:a8:55:5b:f1:cc:8f:e4:9e:01:52:5d:c1:f4:67: 75:fa:b2:82:c2:d0:e2:a8:06:84:4d:2f:d9:19:32:4b:4c:ec: 92:7c:d0:3a:9a:75:d4:e0:e8:21:16:9c:61:3e:2d:ae:38:5c: fb:a3:46:4b:07:55:04:91:28:86:16:38:29:42:c1:cd:a4:fd: 81:87:9b:79:68:04:ea:57:f2:e5:a0:cd:76:da:b0:03:9b:86: ad:b3:06:aa:1d:b0:08:f9:e0:b7:5a:9e:43:df:9e:d6:f0:0a: 45:9f:0f:36:c2:61:84:43:1e:05:f7:f9:60:43:2c:e9:33:7c: d1:3c:18:c4:0e:9d:19:8f:f3:d5:c1:03:7e:b8:80:4a:b6:31: bf:79:5e:54:16:f6:72:4f:6a:e1:9f:e6:6d:0a:37:db:cf:b3: 1a:ad:a7:ef:9d:72:70:c7:41:7a:53:91:eb:e4:ab:23:a3:06: 5d:f6:90:f5:28:2b:1d:34:70:1d:7b:5d:1d:26:81:e7:62:fb: 08:f5:9d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dkprQ8cni1ejpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkxM1oXDTI1MDkxNzE0MzkxM1owLzEtMCsGA1UEAxMk MzE5N2VmYjYtMWI3MS00NDMzLTg2ZGYtMTVmM2IzMGJmMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAMf8of3ipEpGQaS+JbalCOrv8mCR2I28Yej q2BtqmzOphgc/vNHDKNpkfa5TnNC1NgE3Uchdkvehr0OQmZ4NcvY03qqVCqPfh0i uTtsJt3dbo5I1bDGtos9XHomZurziPHiHfam/zcbmCdJn0mJSs7XcYZro/9ng+S/ hLAsr9gtLJWSEjQ2c4Qa5OAF3VfsUl0Y9ZxuL40xgIZgDVkZJhowPztKLr46WA8f CFheTb34JlnXttB6X6I//60th26BO3RsJAUT7qPBtZi+GwWDzvzD7XcFnR+EBQUy kC+D52UCEuiuYpe6YssUL1AJzacdArz9snfSbSgfnCNG5oHyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXvvjtTTxCuFWNpcysmWPijxyd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGNhZTk4YmItNzliMS0z YTg3LThmM2EtNDUzM2YyMzI3ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkzuU77nWId2mbnnT7uzjODeUEL01o9szERqETlhTsaVbIa3/z7k21Q H+EWdvUvXU7cszbxJDEUQLmoVVvxzI/kngFSXcH0Z3X6soLC0OKoBoRNL9kZMktM 7JJ80DqaddTg6CEWnGE+La44XPujRksHVQSRKIYWOClCwc2k/YGHm3loBOpX8uWg zXbasAObhq2zBqodsAj54LdankPfntbwCkWfDzbCYYRDHgX3+WBDLOkzfNE8GMQO nRmP89XBA364gEq2Mb95XlQW9nJPauGf5m0KN9vPsxqtp++dcnDHQXpTkevkqyOj Bl32kPUoKx00cB17XR0mgedi+wj1nfg= -----END CERTIFICATE-----Generated at Wed Jul 2 07:08:44 2025 by rpki-client