$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b4ecf5e-2d93-3f2e-9871-6f8a466a725a.roa File: 0b4ecf5e-2d93-3f2e-9871-6f8a466a725a.roa (raw, json) Hash identifier: SQK3kgmbPlBcJDBDiHpkRZH0Nx0AFyGW5QHkjyP3f9A= Subject key identifier: 30:C7:B8:08:F6:67:0F:45:09:4B:43:54:B3:AA:96:5F:23:74:A3:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75D38F259063CB20D8D080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b4ecf5e-2d93-3f2e-9871-6f8a466a725a.roa Signing time: Thu 19 Jun 2025 14:38:17 +0000 ROA not before: Thu 19 Jun 2025 14:38:17 +0000 ROA not after: Wed 17 Sep 2025 14:38:17 +0000 asID: 22773 IP address blocks: 72.201.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:d3:8f:25:90:63:cb:20:d8:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:17 2025 GMT Not After : Sep 17 14:38:17 2025 GMT Subject: CN=6336015b-4196-4d5f-9337-1d08722defe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:37:8c:10:50:1b:b1:89:01:ee:76:bd:c6: 89:8e:f2:27:90:93:02:c1:5e:f4:c4:18:89:31:54: db:dd:5a:b5:f7:3d:14:0d:4a:3f:63:9a:6d:f2:51: 06:fb:7b:be:8c:bf:f3:b3:4a:2d:37:c3:8b:14:e9: 82:bb:6d:d4:f2:61:6a:33:1a:4b:f5:00:bb:1a:66: ab:bc:59:45:23:17:06:17:86:fa:c0:ce:29:15:3b: 44:ab:eb:ef:f8:d4:7e:a3:b4:03:c9:87:2a:46:87: 2c:be:f4:79:0b:ea:a8:8a:f1:1e:0d:b1:f0:cc:25: 08:c1:e0:79:a4:ff:00:13:9e:33:72:25:d5:48:76: a1:29:95:54:0f:35:bb:30:b0:e4:ef:8e:f0:98:f1: 7f:41:6f:d5:cd:52:b8:22:bb:74:c2:00:e6:3f:bc: 7c:e4:1f:75:c5:73:04:eb:6e:6b:cb:30:df:dc:7c: 9d:54:be:e0:9a:ac:b7:89:3a:cb:60:5e:db:fb:0c: 35:8e:67:ec:2a:3b:0e:b1:79:42:02:cd:a6:49:5d: 07:f6:3a:46:b8:c5:76:9b:01:ba:0e:2f:61:6b:32: 52:0e:45:d1:2a:1f:07:ab:8b:37:e9:2c:ee:65:65: 30:f9:04:aa:06:d3:be:81:50:76:f5:46:b8:7c:2b: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C7:B8:08:F6:67:0F:45:09:4B:43:54:B3:AA:96:5F:23:74:A3:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b4ecf5e-2d93-3f2e-9871-6f8a466a725a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3c:f3:69:ee:1f:3a:6f:f5:b6:e3:01:46:5f:18:d2:2d:41: 6a:fc:24:b5:b1:84:3c:0e:68:3e:fb:9f:af:78:0d:22:c4:fc: b3:47:7b:b0:c9:ab:95:4b:17:9e:47:c6:7c:09:f1:99:fd:64: 9b:2b:17:5d:26:ad:03:af:f3:76:87:23:4d:29:3d:30:30:70: 08:4b:4b:9e:cf:4e:20:ae:19:91:5e:0a:46:8a:18:71:26:1c: 4f:4f:76:f2:15:56:bf:12:f3:a1:ca:9c:e8:48:5c:5c:b4:bb: 33:a8:96:40:5c:ac:c4:62:d6:32:45:c8:29:41:09:6d:0b:af: 1d:11:ed:da:7a:25:33:91:ca:7e:d2:fa:41:0b:06:50:3c:5e: ce:ba:78:9c:cd:73:4e:20:ea:c7:ae:9f:27:e1:9a:6c:a9:27: b1:b7:bd:81:0c:55:79:85:52:eb:09:e8:46:c2:85:5b:65:1e: 06:d7:f8:12:27:5b:ad:36:aa:95:61:5c:90:cc:fd:93:25:1a: c0:a6:0d:c0:9b:44:e8:64:cb:dc:eb:11:d7:7d:6c:d4:73:d1: 8b:4f:eb:1b:d3:31:24:c9:12:14:49:ae:27:45:4e:13:a3:b3: 4a:f8:a4:21:ee:ed:09:87:6c:18:9f:7c:62:ec:86:9a:ba:e4: 6c:e7:02:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+ddOPJZBjyyDY0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgxN1oXDTI1MDkxNzE0MzgxN1owLzEtMCsGA1UEAxMk NjMzNjAxNWItNDE5Ni00ZDVmLTkzMzctMWQwODcyMmRlZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmg3jBBQG7GJAe52vcaJjvInkJMCwV70xBiJ MVTb3Vq19z0UDUo/Y5pt8lEG+3u+jL/zs0otN8OLFOmCu23U8mFqMxpL9QC7Gmar vFlFIxcGF4b6wM4pFTtEq+vv+NR+o7QDyYcqRocsvvR5C+qoivEeDbHwzCUIweB5 pP8AE54zciXVSHahKZVUDzW7MLDk747wmPF/QW/VzVK4Irt0wgDmP7x85B91xXME 625ryzDf3HydVL7gmqy3iTrLYF7b+ww1jmfsKjsOsXlCAs2mSV0H9jpGuMV2mwG6 Di9hazJSDkXRKh8Hq4s36SzuZWUw+QSqBtO+gVB29Ua4fCt98QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDHuAj2Zw9FCUtDVLOqll8jdKPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGI0ZWNmNWUtMmQ5My0z ZjJlLTk4NzEtNmY4YTQ2NmE3MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg882nuHzpv9bbjAUZfGNItQWr8JLWxhDwOaD77n694DSLE/LNHe7DJ q5VLF55HxnwJ8Zn9ZJsrF10mrQOv83aHI00pPTAwcAhLS57PTiCuGZFeCkaKGHEm HE9PdvIVVr8S86HKnOhIXFy0uzOolkBcrMRi1jJFyClBCW0Lrx0R7dp6JTORyn7S +kELBlA8Xs66eJzNc04g6seunyfhmmypJ7G3vYEMVXmFUusJ6EbChVtlHgbX+BIn W602qpVhXJDM/ZMlGsCmDcCbROhky9zrEdd9bNRz0YtP6xvTMSTJEhRJridFThOj s0r4pCHu7QmHbBiffGLshpq65GznAhU= -----END CERTIFICATE-----Generated at Tue Jul 1 20:26:25 2025 by rpki-client