$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d6b4c90-ada5-332b-93da-fec35de6c176.roa File: 3d6b4c90-ada5-332b-93da-fec35de6c176.roa (raw, json) Hash identifier: j8Emplsix4vuE8PpzNUEP9C0uH1cuQ1Mm0jgz2KhCXs= Subject key identifier: A3:1F:F2:11:C4:C1:E7:FD:67:B4:F3:7E:6E:50:98:12:C0:17:20:19 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A946FF7116787231B03F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d6b4c90-ada5-332b-93da-fec35de6c176.roa Signing time: Fri 20 Jun 2025 09:33:34 +0000 ROA not before: Fri 20 Jun 2025 09:33:34 +0000 ROA not after: Thu 18 Sep 2025 09:33:34 +0000 asID: 22773 IP address blocks: 72.193.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:46:ff:71:16:78:72:31:b0:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:34 2025 GMT Not After : Sep 18 09:33:34 2025 GMT Subject: CN=a67470e5-d37a-450f-8195-0086ba8c26c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:41:9e:35:ac:ca:1c:60:11:bb:6a:2f:17:ea: a3:29:52:ca:5d:01:dc:cf:83:3b:f9:4f:e3:85:26: 42:f0:96:e1:df:3b:2e:2b:80:1f:eb:39:e4:4c:c2: 82:54:0b:be:5a:93:2b:c4:f1:0b:d9:7b:b6:9b:3f: e1:56:fa:4c:e0:c1:61:da:12:bd:9d:ea:10:76:46: 8a:4a:51:7a:42:d5:e4:c7:aa:60:a4:f0:6c:79:fa: 08:54:3c:85:e5:de:f4:cb:7b:b6:54:9a:2a:e4:d1: 73:31:79:c9:81:20:18:a8:88:ea:9f:6c:6c:9e:82: 7a:cd:0d:af:86:6f:21:f2:55:b4:4a:50:81:ff:55: b5:e9:db:1e:d9:33:77:9c:71:7d:ef:81:4c:42:a4: ae:ff:92:56:98:83:4f:58:71:d7:2f:5e:6a:43:e4: 3b:59:5b:0b:e9:83:9a:ef:61:f0:ed:be:64:45:69: a8:2b:4c:1a:01:6b:2f:97:15:1c:a5:66:34:12:5e: a1:48:fc:58:18:79:2d:37:de:01:a3:d8:3d:16:11: cb:26:ce:62:b1:d3:93:4c:5c:28:7a:86:3d:e4:d3: e4:03:18:6b:eb:cb:18:0b:82:96:ca:c3:30:7b:0a: ce:4a:9c:47:49:92:a8:0a:1c:2d:8f:29:2c:e4:01: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1F:F2:11:C4:C1:E7:FD:67:B4:F3:7E:6E:50:98:12:C0:17:20:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d6b4c90-ada5-332b-93da-fec35de6c176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:22:f1:0b:50:78:a2:96:ad:a5:d4:f6:06:62:b7:7e:2e:a6: 16:94:0f:38:a1:d8:ea:bc:38:c8:11:af:ff:08:28:87:07:1d: c9:d9:1a:84:7d:f6:1c:2c:5f:c9:3c:8b:3e:80:b5:98:11:f4: e5:84:6e:c0:45:62:f1:2c:c9:82:15:1d:1a:56:b5:2f:ab:44: 2b:2f:cb:1b:09:96:ef:81:1d:19:67:fc:cc:72:58:37:83:51: b4:0b:c0:79:26:8c:c7:55:72:05:30:75:ea:03:5b:9d:5c:b3: e5:92:df:00:74:77:7c:4a:eb:d0:e6:13:10:96:3a:07:2e:ea: da:cf:20:bf:ad:9d:0a:97:77:08:51:5d:37:28:2f:f9:8d:28: 60:a8:22:87:b3:59:67:99:a2:d1:0c:8a:73:64:ec:be:e5:d3: 5e:00:30:28:8e:1a:9f:a6:19:a4:03:96:0f:a4:2d:f0:52:83: 34:22:73:42:e4:52:6d:fe:7a:c0:9f:80:14:8a:da:f8:76:e5: cd:a6:d7:96:b2:5c:e8:00:58:eb:95:e3:87:e6:7e:fd:3f:c5: 6c:05:41:33:db:48:80:4c:68:84:f3:dd:ac:7c:c9:29:1a:2f: b6:6c:1f:2b:5d:95:e0:97:1e:69:11:17:98:70:30:5d:a3:e1: 55:8e:ba:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqUb/cRZ4cjGwP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzMzNFoXDTI1MDkxODA5MzMzNFowLzEtMCsGA1UEAxMk YTY3NDcwZTUtZDM3YS00NTBmLTgxOTUtMDA4NmJhOGMyNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEGeNazKHGARu2ovF+qjKVLKXQHcz4M7+U/j hSZC8Jbh3zsuK4Af6znkTMKCVAu+WpMrxPEL2Xu2mz/hVvpM4MFh2hK9neoQdkaK SlF6QtXkx6pgpPBsefoIVDyF5d70y3u2VJoq5NFzMXnJgSAYqIjqn2xsnoJ6zQ2v hm8h8lW0SlCB/1W16dse2TN3nHF974FMQqSu/5JWmINPWHHXL15qQ+Q7WVsL6YOa 72Hw7b5kRWmoK0waAWsvlxUcpWY0El6hSPxYGHktN94Bo9g9FhHLJs5isdOTTFwo eoY95NPkAxhr68sYC4KWysMwewrOSpxHSZKoChwtjyks5AEoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMf8hHEwef9Z7Tzfm5QmBLAFyAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Q2YjRjOTAtYWRhNS0z MzJiLTkzZGEtZmVjMzVkZTZjMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMFeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEi8QtQeKKWraXU9gZit34uphaUDzih2Oq8OMgRr/8IKIcHHcnZGoR9 9hwsX8k8iz6AtZgR9OWEbsBFYvEsyYIVHRpWtS+rRCsvyxsJlu+BHRln/MxyWDeD UbQLwHkmjMdVcgUwdeoDW51cs+WS3wB0d3xK69DmExCWOgcu6trPIL+tnQqXdwhR XTcoL/mNKGCoIoezWWeZotEMinNk7L7l014AMCiOGp+mGaQDlg+kLfBSgzQic0Lk Um3+esCfgBSK2vh25c2m15ayXOgAWOuV44fmfv0/xWwFQTPbSIBMaITz3ax8ySka L7ZsHytdleCXHmkRF5hwMF2j4VWOuqw= -----END CERTIFICATE-----Generated at Tue Jul 1 13:09:16 2025 by rpki-client