$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c859689-76c1-3124-81e4-1d552c2b94d5.roa File: 2c859689-76c1-3124-81e4-1d552c2b94d5.roa (raw, json) Hash identifier: HsJw6XZYZLzG0rFq6RYhxnzeohTHAAPSdLxibmjnAbs= Subject key identifier: 05:98:F4:1F:A3:ED:70:FF:AD:C8:5F:53:B2:6F:B8:69:1E:3F:34:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7569857198E2674E328B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c859689-76c1-3124-81e4-1d552c2b94d5.roa Signing time: Thu 19 Jun 2025 14:37:27 +0000 ROA not before: Thu 19 Jun 2025 14:37:27 +0000 ROA not after: Wed 17 Sep 2025 14:37:27 +0000 asID: 22773 IP address blocks: 72.200.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:69:85:71:98:e2:67:4e:32:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:27 2025 GMT Not After : Sep 17 14:37:27 2025 GMT Subject: CN=0783fbb6-acda-4669-bf77-27c1156b1b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:0a:01:72:68:ce:b7:18:56:4f:63:f3:8f: f1:99:f2:da:55:77:18:f7:5d:05:89:05:20:73:0c: 43:88:1a:ff:39:81:b0:3e:76:ea:86:cb:2a:c9:1d: 1a:a2:73:d8:2b:ad:98:8a:75:40:77:f4:52:51:09: 85:74:f2:44:ab:6f:b1:74:17:9b:ac:fd:46:c0:f9: 15:80:e4:42:23:0c:0f:86:fd:40:84:26:6c:c9:24: ee:5b:ec:8f:17:b0:d9:4f:a4:45:3f:d4:22:0f:1a: c5:3a:d6:93:cc:b4:e4:19:1e:e1:38:75:2d:85:fd: 5b:2a:71:ad:c3:4a:67:0b:02:6c:28:fa:2d:64:92: ad:1a:50:32:d6:39:f2:f9:94:be:ed:c8:23:bb:37: 01:37:68:7c:7f:50:67:82:69:f7:2e:ae:67:38:7c: 35:29:06:d5:5f:2b:20:ab:f1:10:f5:bd:d9:18:79: 13:de:56:88:43:95:68:31:fc:42:86:bd:4c:26:54: 4f:d9:d0:26:ff:3d:a6:a0:a1:14:cc:87:f0:3d:37: 69:5f:08:72:f6:74:8c:e9:61:e0:9c:47:e1:7c:a0: d1:75:2b:eb:68:7a:44:b7:26:df:fc:f9:68:fa:ae: 7e:04:59:61:f4:89:2e:a2:63:46:3c:3a:b9:39:8a: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:98:F4:1F:A3:ED:70:FF:AD:C8:5F:53:B2:6F:B8:69:1E:3F:34:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c859689-76c1-3124-81e4-1d552c2b94d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:51:24:ff:99:d2:26:39:b9:39:b7:a6:c8:2f:77:1b:e5:37: ec:49:aa:04:0a:2a:d7:4e:31:55:6a:00:db:95:b6:6d:d2:96: 99:b0:e6:d8:c6:80:0a:d9:a7:1c:a9:45:e6:25:89:50:33:7a: 35:3e:db:7a:f2:95:db:22:9e:d4:8b:e5:b0:53:ba:c5:26:7c: 00:d2:e9:14:29:a0:08:e7:fb:b3:a7:58:3e:c7:d9:00:ef:b5: 3f:4f:62:ab:18:04:f1:d2:70:3a:cf:aa:ad:37:b8:75:d9:60: d9:cc:18:5a:0b:ce:c1:c0:04:6a:17:06:b9:31:0a:6f:10:5b: 8f:b4:0b:da:0c:62:20:3f:ce:ac:43:ae:69:9b:b7:ed:f4:ce: fe:2b:30:3b:ab:be:da:3a:12:f1:26:23:dd:f3:95:1a:69:2f: 04:7d:c3:bc:7d:9d:30:c9:14:bd:e9:2b:f4:79:ad:c6:3a:38: e3:bd:43:d8:81:99:4e:c9:33:c6:d2:08:f4:2b:af:7f:3a:ae: 27:93:35:88:1e:27:b9:14:ad:00:e2:54:a3:7c:99:b8:2c:bb: 39:b5:43:c5:0f:82:2a:b9:c2:d1:c8:b1:29:35:8c:86:4a:fd: 22:f6:28:53:4f:5a:22:9d:dd:67:37:5b:05:24:87:96:52:21: 9e:9e:94:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dWmFcZjiZ04yi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzcyN1oXDTI1MDkxNzE0MzcyN1owLzEtMCsGA1UEAxMk MDc4M2ZiYjYtYWNkYS00NjY5LWJmNzctMjdjMTE1NmIxYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkQKAXJozrcYVk9j84/xmfLaVXcY910FiQUg cwxDiBr/OYGwPnbqhssqyR0aonPYK62YinVAd/RSUQmFdPJEq2+xdBebrP1GwPkV gORCIwwPhv1AhCZsySTuW+yPF7DZT6RFP9QiDxrFOtaTzLTkGR7hOHUthf1bKnGt w0pnCwJsKPotZJKtGlAy1jny+ZS+7cgjuzcBN2h8f1Bngmn3Lq5nOHw1KQbVXysg q/EQ9b3ZGHkT3laIQ5VoMfxChr1MJlRP2dAm/z2moKEUzIfwPTdpXwhy9nSM6WHg nEfhfKDRdSvraHpEtybf/Plo+q5+BFlh9IkuomNGPDq5OYqVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWY9B+j7XD/rchfU7JvuGkePzSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmM4NTk2ODktNzZjMS0z MTI0LTgxZTQtMWQ1NTJjMmI5NGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMhdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5RJP+Z0iY5uTm3psgvdxvlN+xJqgQKKtdOMVVqANuVtm3Slpmw5tjG gArZpxypReYliVAzejU+23ryldsintSL5bBTusUmfADS6RQpoAjn+7OnWD7H2QDv tT9PYqsYBPHScDrPqq03uHXZYNnMGFoLzsHABGoXBrkxCm8QW4+0C9oMYiA/zqxD rmmbt+30zv4rMDurvto6EvEmI93zlRppLwR9w7x9nTDJFL3pK/R5rcY6OOO9Q9iB mU7JM8bSCPQrr386rieTNYgeJ7kUrQDiVKN8mbgsuzm1Q8UPgiq5wtHIsSk1jIZK /SL2KFNPWiKd3Wc3WwUkh5ZSIZ6elIE= -----END CERTIFICATE-----Generated at Tue Jul 1 18:47:16 2025 by rpki-client