$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a2ce4c2-19b6-396e-a895-e18c9dc5d6c8.roa File: 1a2ce4c2-19b6-396e-a895-e18c9dc5d6c8.roa (raw, json) Hash identifier: Qum6dQ+9A2aKKPQrIX3ftiKLKNDiri9VNT2tAT0fOww= Subject key identifier: 35:77:20:66:D3:4C:F8:55:60:7A:94:20:19:79:C4:40:80:FF:20:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9725DAB0043BF4DEA6100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a2ce4c2-19b6-396e-a895-e18c9dc5d6c8.roa Signing time: Fri 20 Jun 2025 09:33:55 +0000 ROA not before: Fri 20 Jun 2025 09:33:55 +0000 ROA not after: Thu 18 Sep 2025 09:33:55 +0000 asID: 22773 IP address blocks: 72.193.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:72:5d:ab:00:43:bf:4d:ea:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:55 2025 GMT Not After : Sep 18 09:33:55 2025 GMT Subject: CN=089b87ab-f699-46b0-b24a-53f18aae6613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:ce:65:13:63:72:1d:3f:20:78:b5:f9:0c: c1:71:4e:e8:2f:46:76:5e:ad:fa:2d:f3:6f:01:17: e9:66:9a:25:39:3a:c9:5c:4b:34:19:4b:5b:c4:bd: 7f:78:99:df:db:8a:2a:4c:2c:25:e1:e6:d5:40:d9: c2:69:05:dd:20:f3:b4:55:f0:a0:25:27:21:36:d2: 1d:5c:b5:3f:04:8b:ee:85:bb:25:8f:a5:79:fc:f4: 89:ce:99:9d:ed:a1:c4:5b:37:c4:15:6c:3f:2e:11: d7:8f:2b:ef:75:06:5e:04:2b:e0:e4:33:3b:9e:30: 87:6b:07:fb:30:93:39:41:6f:b2:d4:bc:79:d9:67: 82:92:ad:f2:15:d8:95:39:ba:e5:f3:34:2a:33:3c: 57:82:e4:55:c6:0c:7c:19:10:4d:88:c9:dd:b9:23: 0f:c9:e9:69:28:86:b2:40:61:5c:54:66:39:76:71: 22:1d:d9:61:50:9a:6d:11:39:0c:7d:62:27:27:0c: 8f:c0:a2:8a:56:10:15:2d:e9:e8:66:c0:5e:0a:e2: 6e:80:2a:09:3c:09:31:26:2a:a5:af:e6:96:9d:dd: 80:8c:2d:94:6d:ba:60:b7:b1:83:51:a0:70:50:d2: 8f:77:89:c4:a7:e7:5e:66:41:76:34:8c:b3:71:0c: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:77:20:66:D3:4C:F8:55:60:7A:94:20:19:79:C4:40:80:FF:20:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a2ce4c2-19b6-396e-a895-e18c9dc5d6c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:bd:09:c5:b3:a2:c8:08:59:12:46:4b:00:dc:9c:dd:85:07: 24:4e:da:a6:c0:41:7f:45:fd:77:05:2a:14:02:5b:46:ba:ee: 18:a3:14:69:de:4e:0a:4c:ff:5b:87:52:c0:92:05:10:12:0b: b8:a4:7a:52:b5:0c:9f:65:5c:6a:91:35:17:e4:30:02:59:f5: 87:78:29:26:86:e4:c1:30:f7:8b:21:db:89:57:e4:ef:21:69: c6:bc:7c:9c:ee:53:8d:fc:ba:65:ed:06:e7:c7:67:00:48:bc: 38:5f:50:ce:ba:9a:51:06:96:15:62:45:9d:50:db:51:f3:50: 49:0d:5a:05:b4:65:40:1b:93:5c:39:e9:5c:af:05:8b:42:eb: 45:92:b8:b0:c5:f4:d5:13:33:64:1f:43:f5:08:3a:40:7e:b2: b2:d5:e3:57:e2:0c:ba:2b:a1:d9:f4:7e:9b:22:91:f3:72:fe: 7f:b6:3e:f6:6c:0d:35:4e:59:38:cd:4c:ba:d8:04:b6:b2:3a: 7f:9a:b5:83:0a:c3:28:c4:30:96:8f:1d:78:55:37:14:5f:7c: 3a:cb:1e:fa:5b:1d:58:ae:a7:ee:1d:fa:4a:25:9e:1c:ef:4b: a6:b5:12:ff:42:fa:65:e4:37:cb:b1:e6:a5:b3:cf:ca:89:53: 80:5f:55:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqXJdqwBDv03qYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzM1NVoXDTI1MDkxODA5MzM1NVowLzEtMCsGA1UEAxMk MDg5Yjg3YWItZjY5OS00NmIwLWIyNGEtNTNmMThhYWU2NjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpPOZRNjch0/IHi1+QzBcU7oL0Z2Xq36LfNv ARfpZpolOTrJXEs0GUtbxL1/eJnf24oqTCwl4ebVQNnCaQXdIPO0VfCgJSchNtId XLU/BIvuhbslj6V5/PSJzpmd7aHEWzfEFWw/LhHXjyvvdQZeBCvg5DM7njCHawf7 MJM5QW+y1Lx52WeCkq3yFdiVObrl8zQqMzxXguRVxgx8GRBNiMnduSMPyelpKIay QGFcVGY5dnEiHdlhUJptETkMfWInJwyPwKKKVhAVLenoZsBeCuJugCoJPAkxJiql r+aWnd2AjC2Ubbpgt7GDUaBwUNKPd4nEp+deZkF2NIyzcQyN0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV3IGbTTPhVYHqUIBl5xECA/yBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWEyY2U0YzItMTliNi0z OTZlLWE4OTUtZTE4YzlkYzVkNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKu9CcWzosgIWRJGSwDcnN2FByRO2qbAQX9F/XcFKhQCW0a67hijFGne TgpM/1uHUsCSBRASC7ikelK1DJ9lXGqRNRfkMAJZ9Yd4KSaG5MEw94sh24lX5O8h aca8fJzuU438umXtBufHZwBIvDhfUM66mlEGlhViRZ1Q21HzUEkNWgW0ZUAbk1w5 6VyvBYtC60WSuLDF9NUTM2QfQ/UIOkB+srLV41fiDLorodn0fpsikfNy/n+2PvZs DTVOWTjNTLrYBLayOn+atYMKwyjEMJaPHXhVNxRffDrLHvpbHViup+4d+kolnhzv S6a1Ev9C+mXkN8ux5qWzz8qJU4BfVVw= -----END CERTIFICATE-----Generated at Mon Jun 30 16:02:05 2025 by rpki-client