$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f3b4319-7d29-3a91-800b-cf08bcd6174c.roa File: 1f3b4319-7d29-3a91-800b-cf08bcd6174c.roa (raw, json) Hash identifier: Z/H2Ik1s04nqVW1D03G9P/TT0237zu9U3HuNfDpHq18= Subject key identifier: 07:61:4C:6C:DF:44:F1:38:F2:31:3E:EA:FD:35:72:34:06:54:55:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E761D370C93080CF07A9C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f3b4319-7d29-3a91-800b-cf08bcd6174c.roa Signing time: Thu 19 Jun 2025 14:38:52 +0000 ROA not before: Thu 19 Jun 2025 14:38:52 +0000 ROA not after: Wed 17 Sep 2025 14:38:52 +0000 asID: 22773 IP address blocks: 72.208.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:1d:37:0c:93:08:0c:f0:7a:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:52 2025 GMT Not After : Sep 17 14:38:52 2025 GMT Subject: CN=6d587fb6-ab75-45c0-b20d-cd1f12d9cafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:ac:5d:14:dc:4a:1d:af:b9:ff:94:0d:f0: c1:86:1e:69:09:7c:5a:48:a8:75:a2:f2:7b:aa:c3: 11:8e:f9:37:9a:74:49:8f:bb:c1:d4:d8:de:91:d2: 56:7c:37:cc:6e:88:3e:af:99:c6:0a:66:ab:e8:3d: 32:e1:e7:b4:f1:9b:7a:e5:7f:54:03:aa:b5:96:39: b4:23:02:22:01:6a:c0:14:49:4c:ee:72:55:80:1e: 1f:2f:cf:a2:1e:53:dc:47:88:40:ec:96:5f:51:bc: 8d:88:52:35:a1:0e:dd:a7:ff:8c:b1:3f:e2:37:13: a5:3a:33:47:8a:1a:34:9c:3a:59:47:3d:d2:7c:09: 54:2c:f5:d3:09:51:f5:3d:1e:c1:6a:e5:a2:cb:0e: 02:c1:61:9f:e8:7c:5e:dd:42:f1:4d:3b:0a:d9:35: e0:8e:61:4d:f4:6b:6d:42:b8:63:09:61:17:4b:ed: 49:08:f5:39:cc:d5:86:f9:2c:c8:4e:1d:b2:f4:fa: 53:d7:de:1d:84:61:46:25:9e:26:72:76:33:84:2e: 7a:d4:a0:d4:39:98:51:07:a1:0d:e1:76:ee:bd:48: 5a:00:0c:f1:d0:16:a8:21:98:b3:0d:2d:e4:19:a7: e3:9f:aa:24:65:b4:7e:f8:9b:eb:92:16:ee:7b:8e: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:61:4C:6C:DF:44:F1:38:F2:31:3E:EA:FD:35:72:34:06:54:55:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f3b4319-7d29-3a91-800b-cf08bcd6174c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e1:78:12:6c:54:b5:57:3e:4a:cc:f0:62:bd:09:07:ab:11: 2f:5f:37:f9:f4:b0:0b:76:d4:3f:e6:3e:29:ce:8f:ff:d0:5b: 5d:02:b2:2f:fa:9d:d8:f3:69:7a:53:c0:a9:94:21:4b:46:73: 81:d3:a7:42:71:91:76:82:e3:5f:f3:fb:7f:92:b1:64:bf:ed: 04:24:8b:3e:1b:10:06:0c:44:20:67:60:42:18:90:08:bb:c4: 58:2e:3b:41:d0:04:44:5e:15:be:af:17:e8:4d:5d:4e:29:f7: c4:06:e2:b0:49:97:72:77:a0:2e:f4:3a:d9:31:78:7b:65:85: a1:6e:05:76:5e:a6:87:f8:21:5e:71:68:e1:6d:08:4b:25:b0: c9:b4:0e:f7:5e:e2:bf:3b:3f:2a:85:c8:40:f7:9e:e1:f5:ec: 8c:55:6e:63:74:18:86:76:d0:a8:cd:c2:74:9a:b4:17:2a:1b: 7e:b7:36:39:0a:33:01:86:15:35:38:2f:92:52:f6:b9:91:b0: e9:31:e7:2f:43:f2:93:19:7c:c9:48:59:1d:25:af:50:85:b7: f0:a4:09:24:99:c9:0c:e1:c2:03:fb:c9:d3:74:af:14:55:5a: 79:eb:2e:32:16:2d:92:3a:dc:c3:67:7d:9d:66:ed:b9:9d:08: d4:bd:25:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dh03DJMIDPB6nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzg1MloXDTI1MDkxNzE0Mzg1MlowLzEtMCsGA1UEAxMk NmQ1ODdmYjYtYWI3NS00NWMwLWIyMGQtY2QxZjEyZDljYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYmsXRTcSh2vuf+UDfDBhh5pCXxaSKh1ovJ7 qsMRjvk3mnRJj7vB1NjekdJWfDfMbog+r5nGCmar6D0y4ee08Zt65X9UA6q1ljm0 IwIiAWrAFElM7nJVgB4fL8+iHlPcR4hA7JZfUbyNiFI1oQ7dp/+MsT/iNxOlOjNH iho0nDpZRz3SfAlULPXTCVH1PR7BauWiyw4CwWGf6Hxe3ULxTTsK2TXgjmFN9Gtt QrhjCWEXS+1JCPU5zNWG+SzITh2y9PpT194dhGFGJZ4mcnYzhC561KDUOZhRB6EN 4XbuvUhaAAzx0BaoIZizDS3kGafjn6okZbR++Jvrkhbue45VVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdhTGzfRPE48jE+6v01cjQGVFUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWYzYjQzMTktN2QyOS0z YTkxLTgwMGItY2YwOGJjZDYxNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXheBJsVLVXPkrM8GK9CQerES9fN/n0sAt21D/mPinOj//QW10Csi/6 ndjzaXpTwKmUIUtGc4HTp0JxkXaC41/z+3+SsWS/7QQkiz4bEAYMRCBnYEIYkAi7 xFguO0HQBEReFb6vF+hNXU4p98QG4rBJl3J3oC70OtkxeHtlhaFuBXZepof4IV5x aOFtCEslsMm0Dvde4r87PyqFyED3nuH17IxVbmN0GIZ20KjNwnSatBcqG363NjkK MwGGFTU4L5JS9rmRsOkx5y9D8pMZfMlIWR0lr1CFt/CkCSSZyQzhwgP7ydN0rxRV WnnrLjIWLZI63MNnfZ1m7bmdCNS9JZM= -----END CERTIFICATE-----Generated at Mon Jun 30 17:21:42 2025 by rpki-client