$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa File: 2068fb4a-98b3-3410-9859-e3769e0dd577.roa (raw, json) Hash identifier: KBk/4WhdrQ2JKbmxUcHAhIuMtweJmz3WExa/NccRCtE= Subject key identifier: 50:C9:4B:06:F1:9D:71:49:F0:53:3C:7D:3F:41:A7:49:A6:EA:51:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7800CD95090CDC59C47640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa Signing time: Thu 19 Jun 2025 14:42:40 +0000 ROA not before: Thu 19 Jun 2025 14:42:40 +0000 ROA not after: Wed 17 Sep 2025 14:42:40 +0000 asID: 22773 IP address blocks: 72.223.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:78:00:cd:95:09:0c:dc:59:c4:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:40 2025 GMT Not After : Sep 17 14:42:40 2025 GMT Subject: CN=86e43bed-ebc9-4cd3-8d9a-a53ee77a10fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:53:74:7a:01:f2:01:c8:8a:a3:af:c6:02: ed:6a:24:d4:27:4d:8e:bc:82:bc:e1:88:d0:fb:6a: b9:81:83:2a:12:91:9c:6d:a1:82:c2:05:a9:83:68: aa:e8:14:54:0f:63:93:1a:0f:d0:a5:14:90:c3:f9: 1f:7a:f0:db:01:4b:c9:75:d6:b4:af:05:f0:03:9f: fe:d7:8b:0c:cc:d4:c1:1f:37:be:68:a8:04:b6:a2: d2:d0:1d:99:85:1f:a1:04:60:fb:3f:d4:c7:2d:d9: aa:86:4f:dc:d0:dd:46:e4:81:e8:c1:8f:a2:d7:aa: ef:00:b4:43:09:92:bc:d6:80:f6:7f:5a:d5:f7:36: 02:ad:27:51:db:ea:ad:ae:db:20:39:14:b3:6b:35: 67:3b:5c:64:bd:4e:70:c4:a4:ff:29:ae:ef:fc:2d: 58:01:ae:74:4c:c7:ab:bc:ad:aa:76:56:25:c9:c1: 24:e1:72:ae:49:17:4f:cb:75:79:82:ba:01:90:6e: 80:07:cd:4d:1f:71:76:f1:e2:a5:92:d3:6d:14:3b: 55:f2:9f:c1:17:15:01:e2:44:fb:56:a5:2b:fa:40: 22:95:70:18:53:1b:d0:f1:33:93:95:86:9d:02:2c: 6e:e0:ed:0a:bd:43:c3:43:ff:18:68:63:d7:78:97: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C9:4B:06:F1:9D:71:49:F0:53:3C:7D:3F:41:A7:49:A6:EA:51:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5d:b7:fe:3b:08:9d:38:3d:bf:34:98:0b:14:cd:be:b9:67: 90:ea:cc:9b:ac:c2:8d:c6:dd:60:9e:32:ec:b1:00:c1:d0:3a: 96:41:82:44:b1:84:20:d1:60:75:fc:57:99:07:d5:ca:01:72: 5c:2c:f5:b4:f7:b1:aa:37:8a:ab:db:a7:54:82:9e:f7:fe:20: 76:9e:84:82:16:c4:66:83:bf:d2:c6:7f:d1:e6:a3:9c:91:46: 01:51:6e:93:54:27:70:5d:1f:fb:57:50:25:22:9d:11:22:3c: b1:3f:58:f5:e5:78:1c:66:60:6f:a2:ed:45:ba:a6:67:44:4d: 7b:39:11:88:60:a7:ae:30:28:3c:c6:53:f2:a8:77:99:f9:61: 5c:78:cb:eb:3f:78:90:3f:68:16:71:b4:21:c7:01:08:f2:13: d1:05:e7:38:41:e9:73:97:0f:fa:19:d7:21:d4:9d:6c:a0:9a: 72:e8:75:1e:fb:13:aa:bd:2f:bf:f7:a7:00:72:30:5e:66:51: 7f:7f:a7:81:29:ab:6b:b6:88:9e:40:b1:26:06:37:27:9a:43: ec:35:2b:9d:fa:e6:03:32:2a:10:ec:73:a0:b9:94:97:5a:b7: e9:a4:2e:8e:05:bf:29:54:5f:64:61:a5:f5:fc:dd:e6:ef:c1: 40:80:fa:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+eADNlQkM3FnEdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDI0MFoXDTI1MDkxNzE0NDI0MFowLzEtMCsGA1UEAxMk ODZlNDNiZWQtZWJjOS00Y2QzLThkOWEtYTUzZWU3N2ExMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCBTdHoB8gHIiqOvxgLtaiTUJ02OvIK84YjQ +2q5gYMqEpGcbaGCwgWpg2iq6BRUD2OTGg/QpRSQw/kfevDbAUvJdda0rwXwA5/+ 14sMzNTBHze+aKgEtqLS0B2ZhR+hBGD7P9THLdmqhk/c0N1G5IHowY+i16rvALRD CZK81oD2f1rV9zYCrSdR2+qtrtsgORSzazVnO1xkvU5wxKT/Ka7v/C1YAa50TMer vK2qdlYlycEk4XKuSRdPy3V5groBkG6AB81NH3F28eKlktNtFDtV8p/BFxUB4kT7 VqUr+kAilXAYUxvQ8TOTlYadAixu4O0KvUPDQ/8YaGPXeJdOCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDJSwbxnXFJ8FM8fT9Bp0mm6lFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA2OGZiNGEtOThiMy0z NDEwLTk4NTktZTM3NjllMGRkNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN9cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFdt/47CJ04Pb80mAsUzb65Z5DqzJuswo3G3WCeMuyxAMHQOpZBgkSx hCDRYHX8V5kH1coBclws9bT3sao3iqvbp1SCnvf+IHaehIIWxGaDv9LGf9Hmo5yR RgFRbpNUJ3BdH/tXUCUinREiPLE/WPXleBxmYG+i7UW6pmdETXs5EYhgp64wKDzG U/Kod5n5YVx4y+s/eJA/aBZxtCHHAQjyE9EF5zhB6XOXD/oZ1yHUnWygmnLodR77 E6q9L7/3pwByMF5mUX9/p4Epq2u2iJ5AsSYGNyeaQ+w1K5365gMyKhDsc6C5lJda t+mkLo4FvylUX2RhpfX83ebvwUCA+uk= -----END CERTIFICATE-----Generated at Tue Jul 1 15:03:20 2025 by rpki-client