$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30471d09-aa16-3c74-b4fd-6bcc399c69d7.roa File: 30471d09-aa16-3c74-b4fd-6bcc399c69d7.roa (raw, json) Hash identifier: NxLgQXlbCX+Jrfa6jZt7hqMUDPLUaT1CrbLbh0P5cqk= Subject key identifier: 95:10:24:1A:AA:8E:E8:8A:95:52:44:1D:BE:8B:FC:E9:AF:C1:48:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75B68186853C14D5476000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30471d09-aa16-3c74-b4fd-6bcc399c69d7.roa Signing time: Thu 19 Jun 2025 14:38:03 +0000 ROA not before: Thu 19 Jun 2025 14:38:03 +0000 ROA not after: Wed 17 Sep 2025 14:38:03 +0000 asID: 22773 IP address blocks: 72.201.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:b6:81:86:85:3c:14:d5:47:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:03 2025 GMT Not After : Sep 17 14:38:03 2025 GMT Subject: CN=ead5c574-396d-4fc0-a940-cb42590bdf99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:22:07:15:d4:6b:30:ce:12:08:58:b2:d7:4c: 70:9d:80:a5:8f:cf:ba:d4:20:de:ce:fc:d3:2e:e3: 8b:db:f0:67:c0:dc:af:ad:8e:ec:33:60:8e:d7:87: 4d:87:e6:87:43:7d:dc:6b:cf:af:d8:19:4c:e1:4a: 1b:3a:f2:d1:d8:40:b8:b4:c7:3d:9f:e2:93:c7:ce: e2:36:6e:1b:0d:61:3f:ae:f0:d3:fc:88:21:14:19: 20:54:1f:8e:c1:38:37:14:da:07:1f:b9:86:78:86: c6:53:6a:22:1f:64:cf:fb:32:2e:87:64:bf:64:f7: 04:4f:b7:ba:74:d3:3d:40:3b:7e:76:bd:74:e6:5c: df:4d:c9:34:b0:94:06:4e:17:cf:d0:82:76:91:8e: 74:a1:74:4d:ff:e7:3e:f8:bc:3b:5d:c1:cc:ae:13: 6c:2d:56:ce:15:a7:70:d2:b9:92:b0:a4:7c:f2:75: 30:fb:82:8e:fc:67:7a:a2:79:0f:2a:8c:43:98:88: a1:14:03:82:bf:31:1b:6d:f9:87:6c:a0:9f:16:d5: e2:32:4f:90:a7:38:27:77:1f:cd:9f:d1:47:ef:0c: 6d:f7:8e:f5:f0:c5:6f:9e:38:d3:94:79:72:20:16: 1c:d6:a1:45:17:1f:1c:23:14:c2:61:9f:18:bc:e4: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:10:24:1A:AA:8E:E8:8A:95:52:44:1D:BE:8B:FC:E9:AF:C1:48:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30471d09-aa16-3c74-b4fd-6bcc399c69d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:07:d8:2d:e5:14:f3:6b:d0:e2:e7:19:95:d1:db:bd:b0:fe: 84:97:1d:a6:13:e7:7c:45:66:4c:86:5a:a7:77:7e:38:ae:32: ae:a5:d5:f3:48:f5:82:9c:6b:2c:39:ae:39:43:bf:8e:1c:1d: 37:c9:ba:c2:33:c0:9b:c7:5d:d6:c2:46:e3:c9:d2:31:2f:d1: c2:e6:6a:ab:b2:46:44:6d:e1:ea:98:02:be:f8:1b:b0:cc:df: da:0a:65:93:2d:4e:c2:f5:78:42:1d:fb:38:59:f7:8e:81:4f: f2:9c:0a:66:3a:0d:18:fb:12:2c:59:0a:e6:2c:f6:a0:c2:07: 1d:61:22:85:e9:ee:60:dd:56:cf:fa:1a:5b:ef:12:db:a6:2f: cc:f4:fd:c9:b5:e7:f9:30:5c:4e:6d:39:91:df:29:bb:17:03: 1b:f2:95:90:78:6e:b5:46:40:ce:34:ce:a0:da:69:eb:98:67: 38:27:5c:7e:c9:72:10:ea:cc:8e:4c:fa:3e:37:5e:03:4b:ae: 30:7e:78:88:09:ce:f2:29:2d:12:a2:ce:a6:ab:bf:bf:fc:e1: 20:6b:2e:8a:fe:5d:b2:e0:04:35:10:c8:62:5f:df:8a:1b:e8: 74:d1:91:ea:f8:85:3d:47:c1:0c:64:ee:84:e7:32:eb:13:06: ba:5b:a2:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dbaBhoU8FNVHYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgwM1oXDTI1MDkxNzE0MzgwM1owLzEtMCsGA1UEAxMk ZWFkNWM1NzQtMzk2ZC00ZmMwLWE5NDAtY2I0MjU5MGJkZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCIHFdRrMM4SCFiy10xwnYClj8+61CDezvzT LuOL2/BnwNyvrY7sM2CO14dNh+aHQ33ca8+v2BlM4UobOvLR2EC4tMc9n+KTx87i Nm4bDWE/rvDT/IghFBkgVB+OwTg3FNoHH7mGeIbGU2oiH2TP+zIuh2S/ZPcET7e6 dNM9QDt+dr105lzfTck0sJQGThfP0IJ2kY50oXRN/+c++Lw7XcHMrhNsLVbOFadw 0rmSsKR88nUw+4KO/Gd6onkPKoxDmIihFAOCvzEbbfmHbKCfFtXiMk+Qpzgndx/N n9FH7wxt94718MVvnjjTlHlyIBYc1qFFFx8cIxTCYZ8YvOQxbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUQJBqqjuiKlVJEHb6L/OmvwUhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzA0NzFkMDktYWExNi0z Yzc0LWI0ZmQtNmJjYzM5OWM2OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIH2C3lFPNr0OLnGZXR272w/oSXHaYT53xFZkyGWqd3fjiuMq6l1fNI 9YKcayw5rjlDv44cHTfJusIzwJvHXdbCRuPJ0jEv0cLmaquyRkRt4eqYAr74G7DM 39oKZZMtTsL1eEId+zhZ946BT/KcCmY6DRj7EixZCuYs9qDCBx1hIoXp7mDdVs/6 GlvvEtumL8z0/cm15/kwXE5tOZHfKbsXAxvylZB4brVGQM40zqDaaeuYZzgnXH7J chDqzI5M+j43XgNLrjB+eIgJzvIpLRKizqarv7/84SBrLor+XbLgBDUQyGJf34ob 6HTRker4hT1HwQxk7oTnMusTBrpboik= -----END CERTIFICATE-----Generated at Tue Jul 1 17:15:47 2025 by rpki-client