$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17b238ce-98a3-31c7-8d5f-d17dc3729219.roa File: 17b238ce-98a3-31c7-8d5f-d17dc3729219.roa (raw, json) Hash identifier: ehsbX/Yu+JcQwioMRS1Kq/biWdlIbY5JbzPC3qGV3g4= Subject key identifier: C4:32:C0:7F:6F:45:51:52:2E:03:48:FD:1B:DD:42:8A:70:AE:10:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77CF9E3600E2C98C6A8800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17b238ce-98a3-31c7-8d5f-d17dc3729219.roa Signing time: Thu 19 Jun 2025 14:42:17 +0000 ROA not before: Thu 19 Jun 2025 14:42:17 +0000 ROA not after: Wed 17 Sep 2025 14:42:17 +0000 asID: 22773 IP address blocks: 72.222.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:cf:9e:36:00:e2:c9:8c:6a:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:17 2025 GMT Not After : Sep 17 14:42:17 2025 GMT Subject: CN=79d2306f-0c8c-4d9c-9acd-d9f39ac2243e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:74:f4:e1:97:2a:d9:1a:03:50:a7:3e:61: 56:f0:6b:d7:84:4c:2b:27:89:44:e1:24:f9:94:50: a4:78:0a:1f:3d:54:d2:06:e0:05:bc:02:b2:ad:7c: 92:dd:b9:53:31:08:4d:b4:a1:85:41:74:6c:ed:05: 48:2b:0a:b7:54:28:43:24:a4:cf:f2:6f:cc:67:96: ba:d6:8e:54:64:7d:33:d6:53:39:7d:20:4f:bb:3d: 5f:b7:1e:0c:ba:6e:82:14:89:ae:dd:18:33:87:37: 18:16:7e:2a:f5:be:cd:12:6e:48:86:d9:ee:06:43: 99:55:ba:c1:dd:4d:0d:37:3e:c5:f7:be:ab:cb:20: f3:d2:04:23:1f:9e:bf:2f:22:66:5c:d4:76:59:63: 67:94:79:1f:b5:d0:61:c6:bd:0c:bf:79:e8:9a:f5: b8:33:9f:6a:3e:0e:d1:42:41:c1:01:df:a4:5a:27: 0f:15:d6:d0:54:69:4b:96:b7:0e:22:5c:6f:d1:9b: ba:31:ac:66:61:6c:99:a2:7e:be:3e:ab:d8:e3:a9: 8a:dc:c9:fd:1c:9f:b2:1f:46:b6:59:19:ba:6e:d1: 7d:45:76:16:70:37:75:a3:5e:81:4c:9e:e6:19:e2: ae:f9:9c:f7:3e:10:ea:27:6b:79:26:d8:89:e8:51: 03:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:32:C0:7F:6F:45:51:52:2E:03:48:FD:1B:DD:42:8A:70:AE:10:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17b238ce-98a3-31c7-8d5f-d17dc3729219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:77:e6:ea:28:df:fb:a2:b0:45:bf:24:4e:2d:61:0c:b2:66: 41:21:ef:88:4a:a1:26:b3:67:65:83:1a:e2:79:19:05:25:98: f3:2f:46:1a:96:0b:2d:ab:7c:e8:44:eb:c8:e5:cb:d5:8a:34: dd:ed:09:41:99:3a:95:1d:a0:4e:c0:83:d9:3e:f6:6a:45:13: 5b:a6:61:de:8c:d0:5c:98:01:d0:0b:48:89:fd:4d:62:a2:ba: 92:53:05:3e:16:f6:27:42:49:01:c8:54:8f:3f:b8:0d:26:17: 0c:f9:25:d8:77:e2:cd:47:23:83:ad:8b:63:3f:2d:00:9d:ac: a6:3d:01:4f:03:09:6d:a6:4f:6c:e5:c2:37:95:8f:a8:bd:ec: e8:b5:a2:4f:66:81:e7:a2:e0:9f:9a:c4:bb:e7:49:bf:01:18: 71:29:b3:03:c9:0c:f1:64:36:2f:6f:da:dc:b1:28:5e:b4:0c: b9:f3:de:8b:2e:54:d0:4f:20:e5:89:51:70:fc:04:dc:e7:bf: a9:87:6c:14:e9:b8:8d:eb:7d:64:d0:65:a2:1d:75:bd:1b:fc: e2:96:ec:4a:6d:c0:c0:9a:5f:e7:0c:89:24:00:6d:62:39:7c: e4:82:51:b2:62:3a:2e:3f:b0:81:00:f8:34:4f:0d:e1:08:77: 36:f6:b3:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d8+eNgDiyYxqiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIxN1oXDTI1MDkxNzE0NDIxN1owLzEtMCsGA1UEAxMk NzlkMjMwNmYtMGM4Yy00ZDljLTlhY2QtZDlmMzlhYzIyNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtN09OGXKtkaA1CnPmFW8GvXhEwrJ4lE4ST5 lFCkeAofPVTSBuAFvAKyrXyS3blTMQhNtKGFQXRs7QVIKwq3VChDJKTP8m/MZ5a6 1o5UZH0z1lM5fSBPuz1ftx4Mum6CFImu3RgzhzcYFn4q9b7NEm5IhtnuBkOZVbrB 3U0NNz7F976ryyDz0gQjH56/LyJmXNR2WWNnlHkftdBhxr0Mv3nomvW4M59qPg7R QkHBAd+kWicPFdbQVGlLlrcOIlxv0Zu6MaxmYWyZon6+PqvY46mK3Mn9HJ+yH0a2 WRm6btF9RXYWcDd1o16BTJ7mGeKu+Zz3PhDqJ2t5JtiJ6FEDswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQywH9vRVFSLgNI/RvdQopwrhBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTdiMjM4Y2UtOThhMy0z MWM3LThkNWYtZDE3ZGMzNzI5MjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ35uoo3/uisEW/JE4tYQyyZkEh74hKoSazZ2WDGuJ5GQUlmPMvRhqW Cy2rfOhE68jly9WKNN3tCUGZOpUdoE7Ag9k+9mpFE1umYd6M0FyYAdALSIn9TWKi upJTBT4W9idCSQHIVI8/uA0mFwz5Jdh34s1HI4Oti2M/LQCdrKY9AU8DCW2mT2zl wjeVj6i97Oi1ok9mgeei4J+axLvnSb8BGHEpswPJDPFkNi9v2tyxKF60DLnz3osu VNBPIOWJUXD8BNznv6mHbBTpuI3rfWTQZaIddb0b/OKW7EptwMCaX+cMiSQAbWI5 fOSCUbJiOi4/sIEA+DRPDeEIdzb2s88= -----END CERTIFICATE-----Generated at Wed Jul 2 15:44:16 2025 by rpki-client