$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aaa5c08-5f8f-391d-9b09-67b554289f6a.roa File: 2aaa5c08-5f8f-391d-9b09-67b554289f6a.roa (raw, json) Hash identifier: 8VBOnZwShLhg4+Ot5/NOKRmb6Il/ifTCDbWL9CZDUok= Subject key identifier: CC:34:1E:77:8E:8C:A1:E1:01:C8:58:03:73:B1:18:FB:A3:E8:5C:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75F4727B789C79D3A92C20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aaa5c08-5f8f-391d-9b09-67b554289f6a.roa Signing time: Thu 19 Jun 2025 14:38:33 +0000 ROA not before: Thu 19 Jun 2025 14:38:33 +0000 ROA not after: Wed 17 Sep 2025 14:38:33 +0000 asID: 22773 IP address blocks: 72.206.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:f4:72:7b:78:9c:79:d3:a9:2c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:33 2025 GMT Not After : Sep 17 14:38:33 2025 GMT Subject: CN=7a17ff24-457f-43f3-8580-5fbfba7fb73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:42:18:88:60:44:6c:22:ff:31:d2:54:bd: 12:c9:f1:7a:6a:b2:9a:f7:3e:17:bf:41:56:a0:c8: 57:6e:41:c2:63:50:a6:ba:14:2e:c3:9e:06:30:c3: 26:97:77:6a:1b:7c:81:83:32:8c:bb:ce:c5:4c:6c: 94:ec:00:09:cc:5a:44:74:94:f1:a9:82:7f:c6:5f: 9e:53:7a:e5:ca:9b:44:1b:54:5f:32:38:7e:eb:69: a7:54:9c:94:5f:b9:9f:3b:27:9f:a0:13:4e:86:e4: 10:80:95:cb:44:52:67:bd:05:b0:b4:f9:92:64:96: 6a:12:06:2c:bf:9e:8f:ee:a6:d3:16:a0:97:47:e1: a2:47:82:a4:7c:f4:60:fe:74:43:3d:49:16:1c:e8: 43:a8:ff:4a:f6:23:d5:75:21:e6:f0:ca:09:22:a0: 28:62:31:72:7e:9b:a2:95:ed:7a:d3:9a:d2:cf:54: c2:53:2d:d1:56:4c:aa:e8:be:f4:3a:9a:73:53:0f: 06:2d:b7:f2:ce:39:49:32:10:7b:ee:81:14:a9:23: f0:c1:33:55:95:2f:2d:71:b9:11:9e:57:19:64:1d: ab:0c:cd:37:89:02:cc:22:d4:0c:7a:dc:26:e7:7b: 4f:5f:68:62:b3:49:7f:1f:e3:77:a6:77:b4:a4:5d: 57:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:34:1E:77:8E:8C:A1:E1:01:C8:58:03:73:B1:18:FB:A3:E8:5C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aaa5c08-5f8f-391d-9b09-67b554289f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7d:56:c6:87:c4:60:b3:18:2b:ac:24:22:c1:ed:f0:6c:03: da:90:a6:21:f0:80:22:ce:4f:6c:31:54:91:4b:96:6b:98:f4: b1:09:76:06:0e:72:85:0c:09:86:3a:2b:77:c5:0f:d3:9b:71: d9:c7:97:18:b7:fd:95:d2:48:3b:a7:b7:11:e1:e4:a1:e7:32: 1d:6f:5b:96:65:55:c7:b6:b5:2f:0e:13:c7:c8:1e:e8:62:25: 59:4b:0a:17:33:21:ba:62:c6:7d:8e:a2:46:1c:be:8f:63:50: f5:45:ab:bb:82:ba:f5:0b:6b:4b:42:82:ee:66:d1:18:83:aa: 1e:6f:12:e7:79:00:c4:eb:16:50:4c:0e:e2:5c:71:a0:c1:59: ab:a4:ab:79:89:c9:10:fb:2d:f4:a0:24:bf:23:89:97:89:23: af:7f:cd:83:d3:2d:e5:a1:f7:4c:5f:8a:6c:76:86:e3:5e:3b: 84:01:d1:7b:80:fc:b8:fc:7d:f2:73:6a:6a:c4:0a:e0:17:6b: 78:b3:c8:75:b5:0c:75:95:9e:13:9e:60:9b:b9:d4:55:64:12: 5f:25:a1:be:e3:65:43:f5:c1:11:8a:0e:3c:25:8d:af:e9:23: 0d:a3:49:04:53:4e:0a:1e:84:ce:8a:09:15:61:e8:f2:a0:0a: 3c:4d:0c:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dfRye3icedOpLCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgzM1oXDTI1MDkxNzE0MzgzM1owLzEtMCsGA1UEAxMk N2ExN2ZmMjQtNDU3Zi00M2YzLTg1ODAtNWZiZmJhN2ZiNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKJCGIhgRGwi/zHSVL0SyfF6arKa9z4Xv0FW oMhXbkHCY1CmuhQuw54GMMMml3dqG3yBgzKMu87FTGyU7AAJzFpEdJTxqYJ/xl+e U3rlyptEG1RfMjh+62mnVJyUX7mfOyefoBNOhuQQgJXLRFJnvQWwtPmSZJZqEgYs v56P7qbTFqCXR+GiR4KkfPRg/nRDPUkWHOhDqP9K9iPVdSHm8MoJIqAoYjFyfpui le1605rSz1TCUy3RVkyq6L70OppzUw8GLbfyzjlJMhB77oEUqSPwwTNVlS8tcbkR nlcZZB2rDM03iQLMItQMetwm53tPX2his0l/H+N3pne0pF1XXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw0HneOjKHhAchYA3OxGPuj6FyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFhYTVjMDgtNWY4Zi0z OTFkLTliMDktNjdiNTU0Mjg5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd9VsaHxGCzGCusJCLB7fBsA9qQpiHwgCLOT2wxVJFLlmuY9LEJdgYO coUMCYY6K3fFD9ObcdnHlxi3/ZXSSDuntxHh5KHnMh1vW5ZlVce2tS8OE8fIHuhi JVlLChczIbpixn2OokYcvo9jUPVFq7uCuvULa0tCgu5m0RiDqh5vEud5AMTrFlBM DuJccaDBWaukq3mJyRD7LfSgJL8jiZeJI69/zYPTLeWh90xfimx2huNeO4QB0XuA /Lj8ffJzamrECuAXa3izyHW1DHWVnhOeYJu51FVkEl8lob7jZUP1wRGKDjwlja/p Iw2jSQRTTgoehM6KCRVh6PKgCjxNDP4= -----END CERTIFICATE-----Generated at Tue Jul 1 01:09:34 2025 by rpki-client