$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17350110-2ba3-3790-88d6-145f1543576f.roa File: 17350110-2ba3-3790-88d6-145f1543576f.roa (raw, json) Hash identifier: KSb8x2LTiIFE0gHG2ABMBF0AsH54ZPxsPGwF8/Yr1MQ= Subject key identifier: FE:12:3E:37:92:BC:C7:FF:71:8A:D9:7C:2E:5F:3A:79:52:C1:97:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7648CB7BC7579DEBD71300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17350110-2ba3-3790-88d6-145f1543576f.roa Signing time: Thu 19 Jun 2025 14:39:12 +0000 ROA not before: Thu 19 Jun 2025 14:39:12 +0000 ROA not after: Wed 17 Sep 2025 14:39:12 +0000 asID: 22773 IP address blocks: 72.208.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:48:cb:7b:c7:57:9d:eb:d7:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:12 2025 GMT Not After : Sep 17 14:39:12 2025 GMT Subject: CN=f0e691cf-3c4e-4875-9fbf-9516ce7c3adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:95:91:c8:c8:39:90:3b:ab:ec:f8:c8:6a: e6:61:8c:59:e5:65:ad:26:bc:05:98:0c:cd:2b:07: d9:70:02:ed:d3:dc:30:8d:df:78:2a:da:37:f2:02: bb:fb:5d:64:e0:bd:fc:e6:2e:a2:72:36:0e:35:9d: 7b:61:12:15:b8:50:a8:4d:2d:8c:3a:b2:4b:71:e5: a3:16:d9:10:f1:82:06:6b:86:41:50:e1:76:25:60: c3:c7:39:14:a4:72:a0:85:03:ea:39:86:97:72:81: fd:a0:59:dc:cd:f7:0b:56:21:c4:dd:53:13:a6:ec: f4:e5:9b:ef:47:3c:d2:59:2a:7b:bd:21:92:29:e4: 54:73:5d:1f:f8:3f:30:fa:ed:d1:1a:60:5b:ce:75: 29:c7:d8:d0:63:4b:0c:89:3c:55:f0:c8:cb:b7:4f: b5:9c:95:ee:37:74:20:e4:68:09:45:c5:f5:9c:4c: 6c:01:68:43:68:cd:89:d1:ef:94:be:ec:fb:b2:83: 95:9c:1b:0e:d8:0c:a2:d2:a3:a4:1c:84:c0:f5:e8: 07:df:4d:5e:c7:b4:21:fc:55:8d:b5:0a:23:ea:5e: aa:a6:ca:53:e6:34:da:3e:9a:ac:da:31:ae:11:58: 02:96:3a:cf:10:12:76:82:00:e6:bf:86:bf:b4:78: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:12:3E:37:92:BC:C7:FF:71:8A:D9:7C:2E:5F:3A:79:52:C1:97:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17350110-2ba3-3790-88d6-145f1543576f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b7:70:00:55:2a:22:c3:15:67:e3:d1:d8:7a:e3:08:88:ff: 9b:d4:41:d6:3c:18:d1:0a:40:cf:35:92:09:3f:57:fa:fa:13: f4:12:22:3a:34:b4:13:34:8a:7b:f0:67:5c:a9:0a:a5:45:e7: 2a:12:8c:36:21:1c:7e:c7:4e:f9:a8:f8:86:78:e0:03:9b:20: 72:24:d8:78:8b:b9:2c:4c:e4:cd:9e:61:22:67:90:2c:65:2b: 54:10:bb:3d:5a:72:08:c3:7c:72:4c:64:09:d2:21:f7:9c:39: ef:73:d5:f2:7c:15:25:dd:cf:fe:28:88:08:6e:1a:03:83:a9: 38:e1:2c:73:cf:1d:cf:2a:33:26:a7:5a:59:a0:29:ee:1f:33: 56:d3:54:b9:5d:70:97:97:80:6c:15:f6:a8:5f:e6:9f:a1:02: 0e:28:2b:73:19:0a:f6:29:5a:68:6f:74:68:e3:18:55:99:ee: e1:e2:af:17:4e:e0:00:9c:4e:b5:d8:dc:5d:a5:ac:da:ae:57: 8f:1e:98:00:4b:d4:fe:56:aa:6b:f6:a1:77:ed:b8:25:64:8d: c2:52:74:34:e2:10:a2:cb:af:f4:9c:60:41:33:45:03:27:4e: cd:64:d6:b3:09:47:2a:a1:46:b4:5f:61:aa:12:26:d8:61:08: e9:21:b7:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dkjLe8dXnevXEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkxMloXDTI1MDkxNzE0MzkxMlowLzEtMCsGA1UEAxMk ZjBlNjkxY2YtM2M0ZS00ODc1LTlmYmYtOTUxNmNlN2MzYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUSVkcjIOZA7q+z4yGrmYYxZ5WWtJrwFmAzN KwfZcALt09wwjd94Kto38gK7+11k4L385i6icjYONZ17YRIVuFCoTS2MOrJLceWj FtkQ8YIGa4ZBUOF2JWDDxzkUpHKghQPqOYaXcoH9oFnczfcLViHE3VMTpuz05Zvv RzzSWSp7vSGSKeRUc10f+D8w+u3RGmBbznUpx9jQY0sMiTxV8MjLt0+1nJXuN3Qg 5GgJRcX1nExsAWhDaM2J0e+Uvuz7soOVnBsO2Ayi0qOkHITA9egH301ex7Qh/FWN tQoj6l6qpspT5jTaPpqs2jGuEVgCljrPEBJ2ggDmv4a/tHhMwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4SPjeSvMf/cYrZfC5fOnlSwZdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTczNTAxMTAtMmJhMy0z NzkwLTg4ZDYtMTQ1ZjE1NDM1NzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNBpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW3cABVKiLDFWfj0dh64wiI/5vUQdY8GNEKQM81kgk/V/r6E/QSIjo0 tBM0invwZ1ypCqVF5yoSjDYhHH7HTvmo+IZ44AObIHIk2HiLuSxM5M2eYSJnkCxl K1QQuz1acgjDfHJMZAnSIfecOe9z1fJ8FSXdz/4oiAhuGgODqTjhLHPPHc8qMyan WlmgKe4fM1bTVLldcJeXgGwV9qhf5p+hAg4oK3MZCvYpWmhvdGjjGFWZ7uHirxdO 4ACcTrXY3F2lrNquV48emABL1P5Wqmv2oXftuCVkjcJSdDTiEKLLr/ScYEEzRQMn Ts1k1rMJRyqhRrRfYaoSJthhCOkht8M= -----END CERTIFICATE-----Generated at Wed Jul 2 21:05:56 2025 by rpki-client