$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28964154-8530-34b8-a5a4-22cc3471e40d.roa File: 28964154-8530-34b8-a5a4-22cc3471e40d.roa (raw, json) Hash identifier: Sw+Ju2AmS3XkGg77Xk8pZ4Dra6k1O/91pcUkU1poUho= Subject key identifier: 4F:3D:23:19:56:77:74:30:89:7D:71:DB:98:BA:BB:5B:FC:EB:9F:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75D134560BECAD67537200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28964154-8530-34b8-a5a4-22cc3471e40d.roa Signing time: Thu 19 Jun 2025 14:38:16 +0000 ROA not before: Thu 19 Jun 2025 14:38:16 +0000 ROA not after: Wed 17 Sep 2025 14:38:16 +0000 asID: 22773 IP address blocks: 72.201.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:d1:34:56:0b:ec:ad:67:53:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:16 2025 GMT Not After : Sep 17 14:38:16 2025 GMT Subject: CN=51624236-7538-46c4-8482-e212d53d1c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:46:48:c3:0c:f8:ed:72:1b:af:5e:b6:9c:f8: 87:21:da:e4:4a:17:55:a8:31:f1:32:fb:68:d7:48: e1:5d:8c:2b:fb:b7:06:91:5c:a0:75:fe:ff:43:59: 05:c6:01:d6:11:c9:95:f0:94:83:12:22:00:a3:51: 8d:4b:da:04:e1:80:c9:b0:c1:c1:e0:d4:89:b7:5c: 39:31:64:99:b4:59:47:7a:71:8f:83:2a:06:58:a9: 48:cf:07:d4:a1:b9:0c:f3:c5:20:c5:4a:9d:44:bd: ba:b4:e3:c1:e6:55:56:5f:26:9b:ea:52:a4:74:cf: 86:bb:2e:f1:65:4b:55:e5:07:aa:df:7e:63:3c:b6: 6e:16:7e:a3:d1:0f:67:65:c3:68:63:64:63:7f:51: e9:8c:01:36:ae:63:2c:78:93:54:b1:30:17:a3:1a: 38:33:c0:91:3b:55:37:30:89:8a:96:f0:64:7e:80: fd:d3:2c:fd:d6:e8:fa:51:e7:58:a9:5c:86:4d:1a: e2:fa:88:3e:88:e1:88:b0:13:d1:0c:35:81:70:1a: f4:8e:7d:18:4b:62:2a:a0:49:5a:dc:15:a0:05:72: 25:7f:2c:1a:03:68:23:bd:36:07:d2:f1:df:79:22: e0:82:55:78:a2:26:da:47:93:4d:c0:dd:17:23:60: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3D:23:19:56:77:74:30:89:7D:71:DB:98:BA:BB:5B:FC:EB:9F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28964154-8530-34b8-a5a4-22cc3471e40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7a:cb:c8:d4:04:81:f7:dc:13:84:88:17:16:46:dd:c1:55: 54:8f:44:b9:c1:4a:58:b9:b7:4d:ac:65:9c:b7:d5:c8:11:e0: ff:8f:5a:cf:44:47:fd:70:da:79:4a:06:80:87:57:79:0f:d3: ef:b8:b8:de:da:b6:d2:cd:2d:78:be:f0:28:ef:7b:9c:f6:eb: b4:ef:30:86:68:fd:9c:6a:f0:8b:9b:eb:13:88:b2:18:cf:47: 28:b1:93:4b:e0:31:1e:cb:af:70:fd:c6:21:f0:2c:6d:90:50: 9c:05:17:66:1c:e4:8d:31:73:7e:e0:42:32:52:72:cc:1f:5f: 72:4a:cd:5f:8d:99:44:ac:8d:45:ac:07:63:69:04:9b:92:62: 26:73:12:d1:03:1a:85:68:83:c7:49:61:24:92:6c:a8:0c:d2: 77:8a:65:73:34:b1:cc:45:8c:0f:75:cd:13:a0:45:2e:71:87: 13:f7:1f:45:1e:73:08:db:74:0d:18:a4:3a:e9:af:66:95:bf: d9:76:81:dd:14:eb:14:d9:93:66:15:eb:24:32:1d:5b:a6:6b: 1d:2c:2d:06:f8:d4:8a:db:45:62:bf:f9:9f:25:83:59:11:63: f7:71:10:8c:12:ae:68:a5:a8:87:39:44:11:c8:c9:57:32:d0: dd:d7:c6:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+ddE0VgvsrWdTcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgxNloXDTI1MDkxNzE0MzgxNlowLzEtMCsGA1UEAxMk NTE2MjQyMzYtNzUzOC00NmM0LTg0ODItZTIxMmQ1M2QxYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0ZIwwz47XIbr162nPiHIdrkShdVqDHxMvto 10jhXYwr+7cGkVygdf7/Q1kFxgHWEcmV8JSDEiIAo1GNS9oE4YDJsMHB4NSJt1w5 MWSZtFlHenGPgyoGWKlIzwfUobkM88UgxUqdRL26tOPB5lVWXyab6lKkdM+Guy7x ZUtV5Qeq335jPLZuFn6j0Q9nZcNoY2Rjf1HpjAE2rmMseJNUsTAXoxo4M8CRO1U3 MImKlvBkfoD90yz91uj6UedYqVyGTRri+og+iOGIsBPRDDWBcBr0jn0YS2IqoEla 3BWgBXIlfywaA2gjvTYH0vHfeSLgglV4oibaR5NNwN0XI2AE4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE89IxlWd3QwiX1x25i6u1v865+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjg5NjQxNTQtODUzMC0z NGI4LWE1YTQtMjJjYzM0NzFlNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMnjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd6y8jUBIH33BOEiBcWRt3BVVSPRLnBSli5t02sZZy31cgR4P+PWs9E R/1w2nlKBoCHV3kP0++4uN7attLNLXi+8Cjve5z267TvMIZo/Zxq8Iub6xOIshjP Ryixk0vgMR7Lr3D9xiHwLG2QUJwFF2Yc5I0xc37gQjJScswfX3JKzV+NmUSsjUWs B2NpBJuSYiZzEtEDGoVog8dJYSSSbKgM0neKZXM0scxFjA91zROgRS5xhxP3H0Ue cwjbdA0YpDrpr2aVv9l2gd0U6xTZk2YV6yQyHVumax0sLQb41IrbRWK/+Z8lg1kR Y/dxEIwSrmilqIc5RBHIyVcy0N3XxhQ= -----END CERTIFICATE-----Generated at Tue Jul 1 20:53:11 2025 by rpki-client