$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25f501b4-f855-3705-a2e9-80cbda72dba7.roa File: 25f501b4-f855-3705-a2e9-80cbda72dba7.roa (raw, json) Hash identifier: 84Brf140lz1pxz2+j+vil3TgodiC8pATXuvRdWX1EKg= Subject key identifier: 9C:99:CF:99:1D:BB:9C:03:FE:E6:34:D7:29:9E:E1:E5:74:01:C6:DE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76121988E164C450B30A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25f501b4-f855-3705-a2e9-80cbda72dba7.roa Signing time: Thu 19 Jun 2025 14:38:47 +0000 ROA not before: Thu 19 Jun 2025 14:38:47 +0000 ROA not after: Wed 17 Sep 2025 14:38:47 +0000 asID: 22773 IP address blocks: 72.206.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:12:19:88:e1:64:c4:50:b3:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:47 2025 GMT Not After : Sep 17 14:38:47 2025 GMT Subject: CN=d389d44e-01f1-445d-a6d0-8bbd0b97f06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:48:2e:22:91:c6:1f:94:ef:d5:98:8c:0d:01: 03:1b:20:a6:76:81:fd:6c:ec:72:5f:4f:88:58:a4: 40:2f:82:08:3b:fe:e8:c4:f6:bf:2b:4a:f9:e3:70: 4c:30:e9:51:86:6e:d8:f4:60:a0:04:24:87:4c:f9: 0e:d5:81:47:e2:35:46:7a:35:46:19:93:bd:0c:5e: 0c:d2:46:08:dc:b8:fc:28:73:85:ec:3b:ec:19:12: c1:da:05:50:56:9e:df:27:7c:33:3b:82:75:32:6d: 69:59:b7:95:49:15:44:10:1f:7e:78:14:c2:25:20: ab:87:0c:18:15:a2:09:cb:11:9d:72:c8:26:14:ee: 76:08:c7:bf:0e:ab:8a:7b:11:41:76:09:11:77:b9: a7:b2:19:60:97:5f:c2:de:9e:02:4c:3b:05:3b:12: 18:f2:5e:c7:b8:bd:ca:28:b4:1b:51:15:fa:8e:2a: 5f:e9:eb:e2:66:62:c7:51:9c:53:58:c9:f7:eb:56: 54:4d:c3:44:d1:d5:bc:3a:11:62:66:fb:a6:ea:bd: 98:54:25:ca:37:4d:75:43:f6:70:d1:d0:28:3f:38: 77:05:0d:a9:93:d7:85:b6:d9:68:00:aa:b2:c3:95: 51:9d:da:18:21:60:96:7d:89:32:7a:4b:7b:39:d5: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:99:CF:99:1D:BB:9C:03:FE:E6:34:D7:29:9E:E1:E5:74:01:C6:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25f501b4-f855-3705-a2e9-80cbda72dba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ee:13:d4:e7:84:fa:b0:9b:1e:4a:83:ba:58:9d:f6:f0:b2: 52:cf:88:f4:e6:a6:52:86:17:0a:8a:55:9a:06:18:59:35:57: ea:e4:b4:d2:24:6f:8e:4d:5c:6b:9e:8d:9f:d6:6f:4b:71:c8: e1:c6:56:2c:07:51:d7:65:a8:f6:48:16:eb:3c:94:16:c8:ca: 5e:23:39:25:dc:43:dd:5f:9d:13:8e:21:22:75:1e:0c:3c:a8: be:34:d3:12:90:cf:ee:7a:86:0f:b6:4c:cf:70:91:a5:69:b7: 10:de:ce:ec:6d:ed:e5:28:68:06:f4:70:0e:55:d0:07:59:b8: 46:e2:00:b5:7b:d0:5e:f8:f2:b0:e4:8c:0b:6d:c2:42:38:88: 1a:de:5f:1f:06:b3:ae:ea:76:3e:4c:cd:66:44:4a:3d:e7:fb: b8:8e:e4:ff:3f:ef:96:95:09:5c:cd:6e:6c:9d:29:08:af:b1: 02:80:0a:30:93:7c:ee:46:51:a6:9d:68:e5:1b:fd:a9:4e:cf: 4d:6c:52:10:36:0c:bf:04:36:55:f1:57:5b:73:28:4b:f4:95: 4b:cf:74:9d:4b:72:9e:f5:c7:bb:7f:dd:30:1f:34:d0:71:a2: 62:ca:8c:74:b3:b2:10:8a:26:47:23:46:0a:04:ae:8c:f3:31: e2:fd:70:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dhIZiOFkxFCzCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzg0N1oXDTI1MDkxNzE0Mzg0N1owLzEtMCsGA1UEAxMk ZDM4OWQ0NGUtMDFmMS00NDVkLWE2ZDAtOGJiZDBiOTdmMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUguIpHGH5Tv1ZiMDQEDGyCmdoH9bOxyX0+I WKRAL4IIO/7oxPa/K0r543BMMOlRhm7Y9GCgBCSHTPkO1YFH4jVGejVGGZO9DF4M 0kYI3Lj8KHOF7DvsGRLB2gVQVp7fJ3wzO4J1Mm1pWbeVSRVEEB9+eBTCJSCrhwwY FaIJyxGdcsgmFO52CMe/DquKexFBdgkRd7mnshlgl1/C3p4CTDsFOxIY8l7HuL3K KLQbURX6jipf6eviZmLHUZxTWMn361ZUTcNE0dW8OhFiZvum6r2YVCXKN011Q/Zw 0dAoPzh3BQ2pk9eFttloAKqyw5VRndoYIWCWfYkyekt7OdVnxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyZz5kdu5wD/uY01yme4eV0AcbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjVmNTAxYjQtZjg1NS0z NzA1LWEyZTktODBjYmRhNzJkYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3uE9TnhPqwmx5Kg7pYnfbwslLPiPTmplKGFwqKVZoGGFk1V+rktNIk b45NXGuejZ/Wb0txyOHGViwHUddlqPZIFus8lBbIyl4jOSXcQ91fnROOISJ1Hgw8 qL400xKQz+56hg+2TM9wkaVptxDezuxt7eUoaAb0cA5V0AdZuEbiALV70F748rDk jAttwkI4iBreXx8Gs67qdj5MzWZESj3n+7iO5P8/75aVCVzNbmydKQivsQKACjCT fO5GUaadaOUb/alOz01sUhA2DL8ENlXxV1tzKEv0lUvPdJ1Lcp71x7t/3TAfNNBx omLKjHSzshCKJkcjRgoErozzMeL9cKE= -----END CERTIFICATE-----Generated at Mon Jun 30 11:26:52 2025 by rpki-client