$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21eb58ab-15a2-3158-b187-db953e4cf645.roa File: 21eb58ab-15a2-3158-b187-db953e4cf645.roa (raw, json) Hash identifier: J1T8br96R4+mknKra0ux0OjvXOTw+8NQn5jKFerQndg= Subject key identifier: 57:5F:36:4D:CB:F1:2B:28:CE:EA:A7:8B:27:17:DE:F3:79:90:F1:EE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77CC8A83653970F6D36740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21eb58ab-15a2-3158-b187-db953e4cf645.roa Signing time: Thu 19 Jun 2025 14:42:16 +0000 ROA not before: Thu 19 Jun 2025 14:42:16 +0000 ROA not after: Wed 17 Sep 2025 14:42:16 +0000 asID: 22773 IP address blocks: 72.222.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:cc:8a:83:65:39:70:f6:d3:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:16 2025 GMT Not After : Sep 17 14:42:16 2025 GMT Subject: CN=07e1107b-b5d1-4652-85b7-1a312e5c6bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:34:51:93:39:08:b7:17:f4:d9:2a:dc:b9: d0:a6:51:cb:2d:d9:b2:9d:bf:2e:4d:40:0c:96:b5: 75:32:53:1d:70:ed:b5:b8:4c:e3:dd:8c:d7:3d:58: cc:35:4e:56:6a:e8:8e:de:52:c0:ec:c7:d9:de:30: 41:fa:cb:4e:fa:75:31:8f:5f:df:1c:91:04:6a:aa: e6:a8:70:d4:ed:4b:be:ac:b7:91:b0:4a:64:c3:40: 52:58:4a:e7:29:65:7c:26:69:80:9f:1c:1f:f9:6e: 60:a6:59:89:e0:4d:59:a1:37:0c:26:50:66:d8:2d: 40:ea:19:14:83:09:da:cc:02:c3:5b:49:1a:47:4a: 24:b9:d9:7a:31:49:a3:6d:9a:8c:a6:88:51:7a:98: 1d:86:ac:0c:09:5f:cf:7a:dc:1d:e9:38:ae:6b:09: 79:2a:24:ca:a3:4e:c7:4a:da:d6:7b:46:ea:f6:0b: 07:41:62:eb:7c:f6:64:ea:41:84:52:ea:38:5c:a0: ff:80:b7:be:e1:15:e5:2e:2d:70:bb:bf:db:a6:d5: 71:86:36:1c:5e:fc:fa:25:b6:a0:b6:b6:75:a8:aa: a9:77:1b:df:30:d9:73:e3:0b:4d:52:a7:90:8a:70: b7:c6:f4:ec:4e:5c:0f:30:c2:02:23:3b:0d:b9:47: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5F:36:4D:CB:F1:2B:28:CE:EA:A7:8B:27:17:DE:F3:79:90:F1:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21eb58ab-15a2-3158-b187-db953e4cf645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:90:ae:b7:4d:0e:f6:5b:32:6f:c4:a3:a2:f2:cd:47:6b:11: bf:7e:a4:1d:64:30:17:0a:78:f9:e3:6d:ce:b7:6a:05:67:3b: 86:17:7e:bd:56:75:2a:b2:a6:31:5d:87:ed:2f:fd:cf:13:16: 6a:c6:2a:9f:55:5d:8a:33:7d:f6:a4:d4:79:75:5b:10:70:bd: 05:90:a1:16:4d:e4:e0:97:65:21:ef:c6:a5:fe:dc:12:40:51: d3:2e:c4:70:e2:26:77:7c:a7:3e:66:04:a8:d5:ff:28:5a:dd: 84:12:92:56:72:96:44:17:07:67:2f:ae:bb:6f:92:46:91:df: 31:e9:7e:dc:18:4c:fc:a5:57:bb:cd:e9:d0:05:81:ad:93:48: 55:6f:fe:dd:4b:02:57:29:d9:86:a3:3d:0a:44:bd:c6:e5:6d: 16:ee:e5:63:5d:78:56:1e:14:e1:33:c2:69:5a:0a:d9:af:72: ba:80:be:1e:29:d4:d9:6d:52:ee:20:76:d2:c8:59:ca:57:a5: 09:52:34:8d:e8:bd:21:e2:1d:83:9b:76:78:32:b8:cc:1b:ef: 18:70:2e:20:a2:e3:5f:12:1a:1b:89:0d:1a:1d:a5:84:81:11: d7:e4:d8:5c:0a:ed:49:17:94:86:95:b1:5f:f2:80:56:03:17: 6f:db:0a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d8yKg2U5cPbTZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIxNloXDTI1MDkxNzE0NDIxNlowLzEtMCsGA1UEAxMk MDdlMTEwN2ItYjVkMS00NjUyLTg1YjctMWEzMTJlNWM2YmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWU0UZM5CLcX9Nkq3LnQplHLLdmynb8uTUAM lrV1MlMdcO21uEzj3YzXPVjMNU5WauiO3lLA7MfZ3jBB+stO+nUxj1/fHJEEaqrm qHDU7Uu+rLeRsEpkw0BSWErnKWV8JmmAnxwf+W5gplmJ4E1ZoTcMJlBm2C1A6hkU gwnazALDW0kaR0okudl6MUmjbZqMpohRepgdhqwMCV/Petwd6Tiuawl5KiTKo07H StrWe0bq9gsHQWLrfPZk6kGEUuo4XKD/gLe+4RXlLi1wu7/bptVxhjYcXvz6Jbag trZ1qKqpdxvfMNlz4wtNUqeQinC3xvTsTlwPMMICIzsNuUcTxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdfNk3L8SsozuqniycX3vN5kPHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFlYjU4YWItMTVhMi0z MTU4LWIxODctZGI5NTNlNGNmNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiQrrdNDvZbMm/Eo6LyzUdrEb9+pB1kMBcKePnjbc63agVnO4YXfr1W dSqypjFdh+0v/c8TFmrGKp9VXYozffak1Hl1WxBwvQWQoRZN5OCXZSHvxqX+3BJA UdMuxHDiJnd8pz5mBKjV/yha3YQSklZylkQXB2cvrrtvkkaR3zHpftwYTPylV7vN 6dAFga2TSFVv/t1LAlcp2YajPQpEvcblbRbu5WNdeFYeFOEzwmlaCtmvcrqAvh4p 1NltUu4gdtLIWcpXpQlSNI3ovSHiHYObdngyuMwb7xhwLiCi418SGhuJDRodpYSB Edfk2FwK7UkXlIaVsV/ygFYDF2/bClM= -----END CERTIFICATE-----Generated at Wed Jul 2 05:33:28 2025 by rpki-client