$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0295f34e-6239-337c-a9da-589f84ab2c8c.roa File: 0295f34e-6239-337c-a9da-589f84ab2c8c.roa (raw, json) Hash identifier: GiQjZYrM46pStQFOaObsSrDX9j4asFLaK2JdMDHQXFI= Subject key identifier: A1:87:5A:2B:E7:81:F4:6D:14:92:43:4C:46:16:20:33:BE:A1:F7:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7795BB532EE353B8FCA7C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0295f34e-6239-337c-a9da-589f84ab2c8c.roa Signing time: Thu 19 Jun 2025 14:41:50 +0000 ROA not before: Thu 19 Jun 2025 14:41:50 +0000 ROA not after: Wed 17 Sep 2025 14:41:50 +0000 asID: 22773 IP address blocks: 72.221.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:95:bb:53:2e:e3:53:b8:fc:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:50 2025 GMT Not After : Sep 17 14:41:50 2025 GMT Subject: CN=789763dc-8196-4159-848d-e56abbfd17cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:12:aa:50:ac:04:e3:0c:f1:10:ee:51:35: f0:45:de:f7:b7:38:8e:6d:52:13:9f:c7:79:9f:a7: 31:95:0d:e3:3d:e0:cb:ff:88:77:65:3a:71:d8:01: c1:7c:a6:26:a2:05:04:b3:2b:3f:41:4c:af:ef:09: 17:f2:de:e1:77:37:a1:9f:b4:39:38:8a:af:1d:6b: 34:68:31:61:1c:c3:0f:61:54:23:3a:ff:37:48:71: c1:6c:a5:a7:4f:26:81:2d:a9:a5:74:32:5e:4b:b2: d9:d1:b0:51:c4:30:bd:2e:20:fb:72:5c:31:90:9c: d1:fe:2c:81:07:d8:cd:dd:5d:fd:ab:32:9a:f3:4e: 35:e2:40:c2:2f:fa:f3:d6:d5:da:c7:64:fe:76:76: 9a:b2:d0:ab:f1:35:da:b4:3f:69:9f:00:03:55:73: f0:4c:a8:f8:b1:85:d1:76:31:8f:f3:30:fa:3f:3e: 1a:cb:ba:e5:61:fd:6d:11:3c:e3:6e:41:9d:c6:3f: 02:54:0c:33:fa:22:a2:e9:d7:62:70:4f:fa:4f:d9: 6a:5b:d8:00:7c:39:e8:ac:ac:25:a6:a7:2c:e3:31: 3d:8b:99:1f:06:3f:65:ca:d3:4f:8e:92:c0:a2:7e: 13:62:db:45:5e:f8:a2:30:33:d6:cf:54:eb:cc:56: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:87:5A:2B:E7:81:F4:6D:14:92:43:4C:46:16:20:33:BE:A1:F7:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0295f34e-6239-337c-a9da-589f84ab2c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:83:e7:f5:8a:41:08:b7:e8:16:09:40:a5:3d:e6:d5:a8:cd: 50:c1:29:fd:20:25:96:01:ad:b4:57:d9:30:03:6b:1e:ef:20: 70:23:f7:20:27:44:8e:7b:e6:3a:a5:8b:e4:05:4f:a0:96:31: 28:8a:26:b5:5f:c5:fb:37:df:4f:b8:8b:1d:1d:2b:33:17:80: 90:ac:08:2f:74:cb:10:61:28:50:ce:88:bd:3f:13:3b:12:0b: da:c4:66:fb:bd:90:23:ee:73:3b:dc:14:0d:8d:0a:28:7a:fb: 4a:76:5d:21:37:43:56:26:58:07:85:77:6f:13:f6:d4:7f:96: 9e:c6:79:54:99:bd:c4:b8:87:f6:c2:dd:9e:83:8a:53:60:41: 9a:4f:b2:b5:af:75:17:da:e2:7a:6d:93:0d:5b:41:0a:34:91: bb:e2:eb:ca:fa:26:d8:8b:f8:11:03:1c:ae:88:d2:09:ff:7e: 96:e0:1f:95:b4:7f:ee:16:3e:8b:70:27:b7:cd:a5:db:30:c7: c2:95:71:ca:d4:15:db:94:7c:d2:7b:76:b8:1c:ae:25:59:3d: b6:53:c1:76:5b:fb:7b:85:d5:09:be:47:68:63:95:71:4c:49: 0b:b4:1f:68:7c:9a:e2:c8:c9:21:10:0a:b0:4e:5d:10:02:fd: fc:78:ec:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d5W7Uy7jU7j8p8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDE1MFoXDTI1MDkxNzE0NDE1MFowLzEtMCsGA1UEAxMk Nzg5NzYzZGMtODE5Ni00MTU5LTg0OGQtZTU2YWJiZmQxN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiYSqlCsBOMM8RDuUTXwRd73tziObVITn8d5 n6cxlQ3jPeDL/4h3ZTpx2AHBfKYmogUEsys/QUyv7wkX8t7hdzehn7Q5OIqvHWs0 aDFhHMMPYVQjOv83SHHBbKWnTyaBLamldDJeS7LZ0bBRxDC9LiD7clwxkJzR/iyB B9jN3V39qzKa80414kDCL/rz1tXax2T+dnaastCr8TXatD9pnwADVXPwTKj4sYXR djGP8zD6Pz4ay7rlYf1tETzjbkGdxj8CVAwz+iKi6ddicE/6T9lqW9gAfDnorKwl pqcs4zE9i5kfBj9lytNPjpLAon4TYttFXviiMDPWz1TrzFaYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGHWivngfRtFJJDTEYWIDO+ofdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI5NWYzNGUtNjIzOS0z MzdjLWE5ZGEtNTg5Zjg0YWIyYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKD5/WKQQi36BYJQKU95tWozVDBKf0gJZYBrbRX2TADax7vIHAj9yAn RI575jqli+QFT6CWMSiKJrVfxfs330+4ix0dKzMXgJCsCC90yxBhKFDOiL0/EzsS C9rEZvu9kCPuczvcFA2NCih6+0p2XSE3Q1YmWAeFd28T9tR/lp7GeVSZvcS4h/bC 3Z6DilNgQZpPsrWvdRfa4nptkw1bQQo0kbvi68r6JtiL+BEDHK6I0gn/fpbgH5W0 f+4WPotwJ7fNpdswx8KVccrUFduUfNJ7drgcriVZPbZTwXZb+3uF1Qm+R2hjlXFM SQu0H2h8muLIySEQCrBOXRAC/fx47N4= -----END CERTIFICATE-----Generated at Mon Jun 30 09:57:49 2025 by rpki-client