$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11a0e1bf-b64e-3c4a-86d3-b9976153a685.roa File: 11a0e1bf-b64e-3c4a-86d3-b9976153a685.roa (raw, json) Hash identifier: DQRIWr6BEk5K3VeedYZeYECoJv1Xu+P8qQBVCfI3S0E= Subject key identifier: 6C:78:D1:32:98:D7:24:52:3A:43:60:FD:4C:DF:AA:4D:BB:62:79:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E766679914B75667BDF8A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11a0e1bf-b64e-3c4a-86d3-b9976153a685.roa Signing time: Thu 19 Jun 2025 14:39:27 +0000 ROA not before: Thu 19 Jun 2025 14:39:27 +0000 ROA not after: Wed 17 Sep 2025 14:39:27 +0000 asID: 22773 IP address blocks: 72.208.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:66:79:91:4b:75:66:7b:df:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:27 2025 GMT Not After : Sep 17 14:39:27 2025 GMT Subject: CN=bc4812c9-63f1-4a66-a4f1-5a9ac327de17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:86:51:00:50:aa:23:99:0b:61:9d:46:ed: 54:0b:c3:ea:a1:57:66:1e:1f:db:e7:9a:86:e7:17: 8d:61:10:01:8f:3a:6e:cf:b2:02:8f:a3:b0:ca:64: 8b:75:d2:36:fe:58:f0:be:f5:92:7c:fa:99:98:ab: e1:76:85:8a:21:80:56:1b:dc:32:db:67:21:93:d6: 8a:94:a4:a5:e4:83:3f:1b:bb:70:c4:4d:c3:82:a7: 41:20:d3:82:4a:5a:76:6f:53:1d:50:45:79:0f:5a: 59:87:c7:ad:1b:e3:b4:62:26:6a:44:4e:f9:19:1f: 56:95:11:fc:8b:aa:86:75:54:c5:77:00:9d:bf:bf: c2:f8:63:94:ae:53:f1:23:ea:a1:25:8e:37:f4:76: f5:b5:0c:71:3c:02:a5:2c:61:a0:0b:cc:cf:32:52: 85:33:35:f2:ca:07:a8:a0:cb:9e:07:3a:b0:57:f5: a5:07:66:81:94:56:2b:40:9c:87:95:30:90:ec:f2: 65:af:48:52:6a:2d:cd:81:a5:03:ba:8f:7c:b5:4c: 43:95:9e:c8:88:ec:df:4b:8b:a9:53:6c:cf:f4:06: 48:dc:44:59:a9:01:ea:ac:21:07:83:79:02:92:fc: 87:bd:15:74:3e:ea:41:5c:19:25:25:09:45:ca:e5: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:78:D1:32:98:D7:24:52:3A:43:60:FD:4C:DF:AA:4D:BB:62:79:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11a0e1bf-b64e-3c4a-86d3-b9976153a685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:df:14:27:02:b6:6a:55:cf:76:8a:a0:8e:d5:c1:ad:6f:9c: d4:33:70:f7:a1:4e:fe:bf:de:9d:07:89:a7:10:93:d3:07:1f: 9b:a8:09:ae:e0:a2:64:98:c4:de:de:5f:62:e2:3c:fa:61:11: e6:66:e0:c2:82:06:00:d2:f6:96:80:d8:c7:80:98:3a:9e:be: d2:66:f7:52:2a:75:b9:2a:39:42:4b:54:c7:a2:b7:e0:02:ff: 58:1f:54:ee:f1:bb:8c:69:b2:05:ee:2d:92:d1:e8:c8:b5:f7: ee:07:0a:00:ba:db:fd:b7:0d:e7:1e:57:87:4e:85:8c:79:49: 82:3a:37:80:3d:64:2a:12:88:3b:00:ce:9a:63:b8:2a:92:94: 82:e6:33:08:a0:77:af:28:7f:64:6c:96:96:22:9c:31:47:d4: 41:01:26:17:3b:8c:7f:84:04:4d:fe:68:b3:cb:7e:3a:3f:ca: a3:df:75:8e:c4:fc:91:20:85:1e:7e:2d:3a:31:af:19:60:b7: e9:1c:ac:46:5f:b6:b8:44:ca:30:d9:ba:b0:43:35:59:a7:0a: 07:5b:5c:55:3e:04:21:b2:41:ab:a9:65:47:a3:6e:42:b5:64: e8:78:35:71:68:3b:78:73:0f:8b:08:e8:61:83:da:f3:72:e6: 5e:b8:fc:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dmZ5kUt1ZnvfigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkyN1oXDTI1MDkxNzE0MzkyN1owLzEtMCsGA1UEAxMk YmM0ODEyYzktNjNmMS00YTY2LWE0ZjEtNWE5YWMzMjdkZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ2GUQBQqiOZC2GdRu1UC8PqoVdmHh/b55qG 5xeNYRABjzpuz7ICj6OwymSLddI2/ljwvvWSfPqZmKvhdoWKIYBWG9wy22chk9aK lKSl5IM/G7twxE3DgqdBINOCSlp2b1MdUEV5D1pZh8etG+O0YiZqRE75GR9WlRH8 i6qGdVTFdwCdv7/C+GOUrlPxI+qhJY439Hb1tQxxPAKlLGGgC8zPMlKFMzXyygeo oMueBzqwV/WlB2aBlFYrQJyHlTCQ7PJlr0hSai3NgaUDuo98tUxDlZ7IiOzfS4up U2zP9AZI3ERZqQHqrCEHg3kCkvyHvRV0PupBXBklJQlFyuULiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx40TKY1yRSOkNg/Uzfqk27YnluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTFhMGUxYmYtYjY0ZS0z YzRhLTg2ZDMtYjk5NzYxNTNhNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnfFCcCtmpVz3aKoI7Vwa1vnNQzcPehTv6/3p0HiacQk9MHH5uoCa7g omSYxN7eX2LiPPphEeZm4MKCBgDS9paA2MeAmDqevtJm91IqdbkqOUJLVMeit+AC /1gfVO7xu4xpsgXuLZLR6Mi19+4HCgC62/23DeceV4dOhYx5SYI6N4A9ZCoSiDsA zppjuCqSlILmMwigd68of2RslpYinDFH1EEBJhc7jH+EBE3+aLPLfjo/yqPfdY7E /JEghR5+LToxrxlgt+kcrEZftrhEyjDZurBDNVmnCgdbXFU+BCGyQaupZUejbkK1 ZOh4NXFoO3hzD4sI6GGD2vNy5l64/KM= -----END CERTIFICATE-----Generated at Tue Jul 1 01:00:03 2025 by rpki-client