$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/212de9ac-d7fb-310f-a021-d145d42e2aff.roa File: 212de9ac-d7fb-310f-a021-d145d42e2aff.roa (raw, json) Hash identifier: KtuIQ1wxgiG/ENYZK8Vgrzu3AkfP4NdUCVx3Sil2T68= Subject key identifier: 6A:8B:2B:F4:A9:C5:FB:7A:A0:5C:0B:35:93:6C:B3:20:87:16:54:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E775DB94EEA9EF4CDD2CB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/212de9ac-d7fb-310f-a021-d145d42e2aff.roa Signing time: Thu 19 Jun 2025 14:41:23 +0000 ROA not before: Thu 19 Jun 2025 14:41:23 +0000 ROA not after: Wed 17 Sep 2025 14:41:23 +0000 asID: 22773 IP address blocks: 72.217.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:5d:b9:4e:ea:9e:f4:cd:d2:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:23 2025 GMT Not After : Sep 17 14:41:23 2025 GMT Subject: CN=05aaf2eb-e381-4850-a448-39656a78cf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7e:ad:92:69:18:a0:37:aa:1e:9f:68:51:af: 3a:c8:b2:d5:c2:73:23:94:76:b2:bd:07:7c:a3:db: c2:d2:cf:c8:9c:45:d7:51:9e:9a:66:1b:20:3f:87: d3:34:be:15:f9:f9:3e:e8:ac:83:4a:c9:8b:ad:eb: 46:7b:06:b7:7f:c1:9a:ea:13:66:3a:e9:2a:d5:59: 37:e0:66:20:de:7a:f1:a1:23:66:c7:11:70:80:58: 1a:e1:5a:e1:9c:7a:4d:46:76:d3:02:57:40:97:65: 47:af:f9:e3:56:ab:2e:19:81:a0:eb:e5:85:2c:61: cc:6e:90:19:79:3d:db:26:85:32:11:13:3c:f9:21: 6d:47:16:85:9a:07:1f:9b:87:3a:6c:8e:a3:5b:7f: b5:f5:dd:ff:c9:63:96:9c:6a:cd:fe:6c:1f:df:2d: fe:d9:01:fe:b8:ad:70:73:e8:82:e4:28:98:f9:c4: e6:8e:39:27:1f:88:fe:29:74:4e:12:c0:8e:38:c1: 0e:cd:67:a7:3a:ac:fb:b6:8c:ce:ec:28:38:6a:16: 07:47:8c:f2:d8:e8:63:8c:df:31:5e:16:de:80:f6: f3:3b:fc:77:51:a5:cb:b5:ac:1a:1d:a2:74:f7:ec: 12:d7:38:7d:18:3d:1c:3d:70:a2:83:92:a6:ec:e6: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8B:2B:F4:A9:C5:FB:7A:A0:5C:0B:35:93:6C:B3:20:87:16:54:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/212de9ac-d7fb-310f-a021-d145d42e2aff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d4:c6:30:5e:b3:e9:90:95:2f:c6:29:19:12:31:ec:00:b2: 7a:4f:85:96:51:37:c1:da:ae:19:78:af:ca:a4:f2:f3:ef:55: 25:df:b3:20:e1:0a:dc:78:65:9e:28:84:d9:c2:be:1a:a7:17: a7:8d:08:4e:f5:9f:10:04:49:76:3a:34:bc:b4:44:a0:a5:33: b9:d7:b2:8a:50:0f:be:dc:66:0d:89:d4:be:17:39:9a:f7:a0: 43:ef:6c:36:ff:5a:ff:ec:ef:06:c4:e9:5e:6b:35:b1:0b:fc: 76:23:e9:a9:e9:aa:4a:64:ba:a0:24:37:44:a7:07:38:7b:33: 11:0e:77:ca:2c:0a:5e:43:6d:48:66:a4:71:ca:a0:ed:41:e8: da:41:e2:26:8d:13:e9:75:56:ac:10:9e:c2:60:83:8c:c1:2f: f4:d6:6e:9b:a6:8d:40:99:37:3b:80:76:a6:7a:76:b2:e2:dd: 89:c9:70:9e:3f:db:30:66:95:80:d4:90:cc:51:a8:1c:e0:34: 45:1f:a2:4d:35:4a:7f:3f:f7:b7:da:68:6b:b7:c2:87:74:b3: 0f:a2:93:74:aa:4f:c2:78:00:88:8a:19:81:f5:fd:a0:ea:c2: 62:b0:f8:25:3f:a2:1d:c0:37:55:45:94:16:ff:58:7a:42:9e: d2:bb:77:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d125Tuqe9M3Sy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDEyM1oXDTI1MDkxNzE0NDEyM1owLzEtMCsGA1UEAxMk MDVhYWYyZWItZTM4MS00ODUwLWE0NDgtMzk2NTZhNzhjZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX6tkmkYoDeqHp9oUa86yLLVwnMjlHayvQd8 o9vC0s/InEXXUZ6aZhsgP4fTNL4V+fk+6KyDSsmLretGewa3f8Ga6hNmOukq1Vk3 4GYg3nrxoSNmxxFwgFga4VrhnHpNRnbTAldAl2VHr/njVqsuGYGg6+WFLGHMbpAZ eT3bJoUyERM8+SFtRxaFmgcfm4c6bI6jW3+19d3/yWOWnGrN/mwf3y3+2QH+uK1w c+iC5CiY+cTmjjknH4j+KXROEsCOOMEOzWenOqz7tozO7Cg4ahYHR4zy2OhjjN8x XhbegPbzO/x3UaXLtawaHaJ09+wS1zh9GD0cPXCig5Km7OZBRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqLK/Spxft6oFwLNZNssyCHFlRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjEyZGU5YWMtZDdmYi0z MTBmLWEwMjEtZDE0NWQ0MmUyYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzUxjBes+mQlS/GKRkSMewAsnpPhZZRN8Harhl4r8qk8vPvVSXfsyDh Ctx4ZZ4ohNnCvhqnF6eNCE71nxAESXY6NLy0RKClM7nXsopQD77cZg2J1L4XOZr3 oEPvbDb/Wv/s7wbE6V5rNbEL/HYj6anpqkpkuqAkN0SnBzh7MxEOd8osCl5DbUhm pHHKoO1B6NpB4iaNE+l1VqwQnsJgg4zBL/TWbpumjUCZNzuAdqZ6drLi3YnJcJ4/ 2zBmlYDUkMxRqBzgNEUfok01Sn8/97faaGu3wod0sw+ik3SqT8J4AIiKGYH1/aDq wmKw+CU/oh3AN1VFlBb/WHpCntK7d64= -----END CERTIFICATE-----Generated at Mon Jun 30 13:57:55 2025 by rpki-client