$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb651be-d81f-3d19-982e-62dcf3d86e88.roa File: 3cb651be-d81f-3d19-982e-62dcf3d86e88.roa (raw, json) Hash identifier: sV9gcaWRBlOn166uIK6hUhXXiiY3+O0lInCfRCFPipg= Subject key identifier: 4A:D9:B8:F4:02:F6:4E:62:B9:D1:BE:58:2A:AA:21:63:63:E9:EE:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A98D23FB727456DD394B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb651be-d81f-3d19-982e-62dcf3d86e88.roa Signing time: Fri 20 Jun 2025 09:34:07 +0000 ROA not before: Fri 20 Jun 2025 09:34:07 +0000 ROA not after: Thu 18 Sep 2025 09:34:07 +0000 asID: 22773 IP address blocks: 72.203.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:8d:23:fb:72:74:56:dd:39:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:07 2025 GMT Not After : Sep 18 09:34:07 2025 GMT Subject: CN=43254ef4-f1b5-470c-b49c-a2cbfa763497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:08:46:8a:1d:b3:27:df:f9:ba:12:1f:ec:bc: db:28:02:42:c9:e6:db:09:e6:57:cb:58:15:0d:36: ce:43:c1:2a:11:94:89:c8:18:8b:70:68:d9:d5:89: 82:2f:6d:5b:72:c4:c9:cb:21:f0:0c:42:32:e3:73: 9f:79:3c:2f:bf:34:f2:a7:43:84:8b:7d:e5:50:45: 69:6c:09:85:4b:0a:fa:7a:51:bb:ba:59:e7:e1:e3: 46:41:7b:0a:f6:c9:ad:97:30:1e:8f:8f:db:86:53: bb:0d:30:ef:48:a6:7f:3c:41:21:ab:a0:f3:29:f4: 8e:fd:ac:46:2d:00:5a:9b:9c:a0:ea:16:15:11:f4: 3c:51:6c:dd:bf:15:a2:61:af:84:01:32:8d:1d:d7: d8:75:08:5b:f8:e1:24:6e:eb:4b:a9:6c:eb:de:25: fb:af:41:e3:1a:ba:ab:c6:7e:4c:5c:8a:af:58:6f: 05:b4:2d:2b:7c:bf:75:f6:58:50:66:90:52:28:02: ab:30:9f:9f:6a:99:3d:64:8e:b1:7c:a2:7b:70:df: 1c:49:7c:5c:35:e3:22:7e:ff:0f:ea:69:f0:4b:50: f9:46:8f:6d:e5:10:eb:90:f1:9a:67:de:bc:ca:63: 79:e9:ce:63:7c:53:00:8d:01:39:c5:58:cf:0f:bd: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D9:B8:F4:02:F6:4E:62:B9:D1:BE:58:2A:AA:21:63:63:E9:EE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb651be-d81f-3d19-982e-62dcf3d86e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.203.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9e:56:c7:7d:a4:56:7e:84:cf:23:ad:ad:ce:ba:9a:5d:ce: 38:3d:43:43:85:54:cc:f4:0f:9a:dd:93:af:e5:91:9c:b4:6e: 05:48:b8:d9:8d:86:5a:13:88:97:7e:1b:1a:a0:d3:12:e3:e5: 22:7e:e2:2b:52:56:d5:8f:90:f1:eb:9e:e8:2c:e1:3d:3b:3c: 40:45:68:1e:29:da:6c:3d:b9:c8:df:18:c8:b8:ca:35:64:d5: ed:c8:ff:f9:65:c3:0c:4d:46:bf:21:4f:33:b5:df:4d:fc:15: 9d:8e:aa:89:35:d6:9a:9f:3b:9f:ab:83:67:88:6b:cd:46:e2: be:d8:26:05:01:20:ce:f6:90:ea:ae:15:a8:14:d4:70:d5:f8: c4:5a:7b:ae:8f:97:2c:ec:dc:0e:bd:76:92:b5:cd:21:23:4f: a4:ec:a6:73:2e:b3:ec:be:21:af:f9:f1:49:dc:b8:25:9b:a7: da:cd:f1:7a:df:6f:3c:d7:f6:a6:37:9c:e2:e9:aa:31:99:95: 7a:17:db:90:c2:37:ad:86:04:7d:f1:d7:f3:90:ff:23:13:a8: 83:a9:03:ae:3d:e4:e6:82:8b:53:0e:dd:5a:85:73:b0:d6:31: 14:c4:12:37:29:29:2a:82:30:91:58:d3:e1:1a:f9:77:40:6b: 90:36:4d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqY0j+3J0Vt05S0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQwN1oXDTI1MDkxODA5MzQwN1owLzEtMCsGA1UEAxMk NDMyNTRlZjQtZjFiNS00NzBjLWI0OWMtYTJjYmZhNzYzNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgghGih2zJ9/5uhIf7LzbKAJCyebbCeZXy1gV DTbOQ8EqEZSJyBiLcGjZ1YmCL21bcsTJyyHwDEIy43OfeTwvvzTyp0OEi33lUEVp bAmFSwr6elG7ulnn4eNGQXsK9smtlzAej4/bhlO7DTDvSKZ/PEEhq6DzKfSO/axG LQBam5yg6hYVEfQ8UWzdvxWiYa+EATKNHdfYdQhb+OEkbutLqWzr3iX7r0HjGrqr xn5MXIqvWG8FtC0rfL919lhQZpBSKAKrMJ+fapk9ZI6xfKJ7cN8cSXxcNeMifv8P 6mnwS1D5Ro9t5RDrkPGaZ968ymN56c5jfFMAjQE5xVjPD71KjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErZuPQC9k5iudG+WCqqIWNj6e4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NiNjUxYmUtZDgxZi0z ZDE5LTk4MmUtNjJkY2YzZDg2ZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOeVsd9pFZ+hM8jra3Ouppdzjg9Q0OFVMz0D5rdk6/lkZy0bgVIuNmN hloTiJd+Gxqg0xLj5SJ+4itSVtWPkPHrnugs4T07PEBFaB4p2mw9ucjfGMi4yjVk 1e3I//llwwxNRr8hTzO13038FZ2Oqok11pqfO5+rg2eIa81G4r7YJgUBIM72kOqu FagU1HDV+MRae66Plyzs3A69dpK1zSEjT6TspnMus+y+Ia/58UncuCWbp9rN8Xrf bzzX9qY3nOLpqjGZlXoX25DCN62GBH3x1/OQ/yMTqIOpA6495OaCi1MO3VqFc7DW MRTEEjcpKSqCMJFY0+Ea+XdAa5A2TTI= -----END CERTIFICATE-----Generated at Wed Jul 2 15:17:41 2025 by rpki-client