$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09d5d0a1-0366-3891-9f59-6d929d727a8c.roa File: 09d5d0a1-0366-3891-9f59-6d929d727a8c.roa (raw, json) Hash identifier: CKzpd0vFBUV9IVfaWBSvHLJL6iUHcKEELKdiE3+EJlY= Subject key identifier: ED:38:64:2F:2B:C2:92:DC:51:69:9C:16:15:4E:9A:FB:B0:F9:54:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E773A63CFAB25AA73692600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09d5d0a1-0366-3891-9f59-6d929d727a8c.roa Signing time: Thu 19 Jun 2025 14:41:07 +0000 ROA not before: Thu 19 Jun 2025 14:41:07 +0000 ROA not after: Wed 17 Sep 2025 14:41:07 +0000 asID: 22773 IP address blocks: 72.217.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:3a:63:cf:ab:25:aa:73:69:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:07 2025 GMT Not After : Sep 17 14:41:07 2025 GMT Subject: CN=caaf07be-5e33-4bff-8c1c-798f0ebaaa4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bf:2b:c4:ff:51:73:27:1d:7e:54:2f:3b:fc: 2c:43:d9:c8:1c:41:b1:be:59:94:fb:e0:14:b6:9d: 7c:30:a8:6b:60:e6:e8:a3:0c:3e:8c:12:87:5b:73: 67:64:a8:cb:9d:d6:51:54:4c:ab:83:02:c3:99:45: 8f:5f:c8:6d:53:84:a5:56:e9:e0:e8:c7:21:17:e8: c4:cf:99:25:66:d9:36:97:65:72:90:61:18:ba:6a: 33:ad:57:69:14:5d:35:c2:a8:36:ed:e0:83:47:db: cb:88:f4:be:47:0b:31:cf:f1:16:02:ca:76:7a:41: 2f:d7:3c:d7:dd:58:0d:79:1c:d4:57:74:bb:f6:c1: 17:e4:4c:66:c7:bb:d5:fd:34:b8:18:3d:4a:4c:be: e2:0c:d4:c4:25:ac:44:68:12:64:63:80:7a:e8:03: 40:29:40:ea:6d:8e:00:e8:09:68:91:0d:fa:61:82: 47:e4:00:9c:db:1b:13:4c:7f:e2:a2:cc:c5:c3:66: ab:a5:4d:4e:73:68:ec:5f:42:72:b7:4e:49:95:5b: 2c:20:ba:e2:9e:d7:79:0a:ab:fa:1d:a4:25:7a:25: e3:f2:f3:cb:53:64:35:2e:64:0f:04:e4:2d:2d:6a: 42:84:bf:5c:70:33:1b:6d:56:f8:d1:b3:00:06:fe: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:38:64:2F:2B:C2:92:DC:51:69:9C:16:15:4E:9A:FB:B0:F9:54:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09d5d0a1-0366-3891-9f59-6d929d727a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b5:14:37:64:af:30:92:1b:8b:c3:29:05:e2:ee:f2:f7:06: 9c:9b:02:e6:1d:62:05:01:33:70:09:1d:60:55:4f:d1:77:d4: c1:dc:e0:5e:4e:bf:f5:25:3c:80:1c:a0:c4:5b:1f:db:1b:d6: f6:2c:ca:2d:cd:75:b0:d1:f1:e7:24:ce:70:fc:79:16:c3:3e: 80:22:0d:f3:5d:ac:25:14:e1:26:e6:47:35:ff:a0:c8:79:53: a9:04:b0:d4:c6:46:c5:8f:88:f9:fe:21:d2:a9:25:54:e8:77: 3f:33:0b:76:e4:28:38:fc:8c:ba:1a:83:19:3e:48:0f:f9:64: b4:35:5e:52:11:9e:bb:da:a7:64:e2:d5:ba:5b:af:7c:ad:c8: 4d:65:ea:f7:f8:7b:f3:ae:53:c2:10:75:e6:f5:e6:f7:cc:60: 71:4d:c1:54:9c:e1:4f:7d:33:cd:69:69:02:3d:20:a5:82:04: 02:f8:08:0d:e6:c5:32:c7:3b:71:c4:d5:ba:b1:55:7a:85:20: 72:30:3f:68:2e:ea:ad:99:67:ba:c9:18:b2:1f:fc:93:5b:37: 8f:ca:9f:fd:fa:5f:1e:f7:c0:e0:f0:fe:27:a0:e8:a8:7f:dd: 53:57:f6:2d:04:73:6d:6a:36:39:c2:ef:17:49:f8:4a:bc:37: 48:f8:bb:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dzpjz6slqnNpJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDEwN1oXDTI1MDkxNzE0NDEwN1owLzEtMCsGA1UEAxMk Y2FhZjA3YmUtNWUzMy00YmZmLThjMWMtNzk4ZjBlYmFhYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj78rxP9RcycdflQvO/wsQ9nIHEGxvlmU++AU tp18MKhrYObooww+jBKHW3NnZKjLndZRVEyrgwLDmUWPX8htU4SlVung6MchF+jE z5klZtk2l2VykGEYumozrVdpFF01wqg27eCDR9vLiPS+Rwsxz/EWAsp2ekEv1zzX 3VgNeRzUV3S79sEX5Exmx7vV/TS4GD1KTL7iDNTEJaxEaBJkY4B66ANAKUDqbY4A 6AlokQ36YYJH5ACc2xsTTH/ioszFw2arpU1Oc2jsX0Jyt05JlVssILrintd5Cqv6 HaQleiXj8vPLU2Q1LmQPBOQtLWpChL9ccDMbbVb40bMABv5LNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO04ZC8rwpLcUWmcFhVOmvuw+VSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDlkNWQwYTEtMDM2Ni0z ODkxLTlmNTktNmQ5MjlkNzI3YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi1FDdkrzCSG4vDKQXi7vL3BpybAuYdYgUBM3AJHWBVT9F31MHc4F5O v/UlPIAcoMRbH9sb1vYsyi3NdbDR8eckznD8eRbDPoAiDfNdrCUU4SbmRzX/oMh5 U6kEsNTGRsWPiPn+IdKpJVTodz8zC3bkKDj8jLoagxk+SA/5ZLQ1XlIRnrvap2Ti 1bpbr3ytyE1l6vf4e/OuU8IQdeb15vfMYHFNwVSc4U99M81paQI9IKWCBAL4CA3m xTLHO3HE1bqxVXqFIHIwP2gu6q2ZZ7rJGLIf/JNbN4/Kn/36Xx73wODw/ieg6Kh/ 3VNX9i0Ec21qNjnC7xdJ+Eq8N0j4u/Q= -----END CERTIFICATE-----Generated at Mon Jun 30 09:43:33 2025 by rpki-client