$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ee03aa0-8e45-3ed4-ad5e-87f28eac5486.roa File: 3ee03aa0-8e45-3ed4-ad5e-87f28eac5486.roa (raw, json) Hash identifier: T+4shNlv/zKwrAgSVRLIb+SGoLhTGooSNO4TDaGNW4U= Subject key identifier: 5B:57:80:68:47:9D:4A:BA:91:84:45:CF:13:1C:A0:FA:A3:86:48:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E765F866472565B85929540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ee03aa0-8e45-3ed4-ad5e-87f28eac5486.roa Signing time: Thu 19 Jun 2025 14:39:23 +0000 ROA not before: Thu 19 Jun 2025 14:39:23 +0000 ROA not after: Wed 17 Sep 2025 14:39:23 +0000 asID: 22773 IP address blocks: 72.208.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:5f:86:64:72:56:5b:85:92:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:23 2025 GMT Not After : Sep 17 14:39:23 2025 GMT Subject: CN=4bbdbbe3-5d90-4aba-92b0-54407c7cdc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:57:c4:f2:85:82:1e:79:b2:51:85:3b:a5:33: 9c:e8:cd:72:a2:6d:8e:35:9b:d1:f2:1d:ed:04:9f: e4:bf:5c:0e:f8:e7:64:b3:b7:ee:35:10:79:fd:2e: 74:10:42:8b:61:38:31:a6:64:73:46:8d:29:ca:79: 3f:2a:23:f9:28:17:48:1e:b3:01:c6:60:23:92:d9: ea:d7:97:5a:e9:8e:67:7e:cc:d2:b5:d9:be:86:ee: b0:1e:8e:03:bc:ca:04:dc:4f:b4:b3:7c:24:f4:6c: 5d:ce:58:2d:ae:f6:fe:ab:ac:89:8c:d6:4b:69:c4: 3f:13:38:cb:40:60:0f:b1:02:d9:f5:ed:e1:61:b8: 4b:3e:31:4d:84:f7:38:8c:13:c9:2c:d9:70:39:0a: ea:1d:1e:23:4f:19:3a:a4:93:08:2f:8b:49:b5:24: bb:b8:f9:28:5c:07:7e:b4:10:78:d5:c0:29:c0:91: ba:8d:b2:3f:d1:2a:40:81:74:39:b2:01:fa:e8:8e: 8e:d1:a2:dd:62:cf:29:ce:5b:57:d9:6c:1f:e2:c2: 5d:06:d9:6d:23:c1:a9:b4:eb:01:d3:23:68:e0:0a: 1e:11:94:ca:e5:c4:c9:53:1a:af:f8:41:5e:f3:7d: 0b:de:5c:3b:46:5a:0a:44:1b:d5:31:65:b0:88:2e: d0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:57:80:68:47:9D:4A:BA:91:84:45:CF:13:1C:A0:FA:A3:86:48:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ee03aa0-8e45-3ed4-ad5e-87f28eac5486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7e:71:28:20:66:8e:c7:ac:37:3d:7c:7c:b1:ad:fa:0c:75: d6:96:ee:6b:b3:21:81:48:47:d6:e9:4c:f1:73:7f:ce:62:e0: 01:0f:3a:66:2c:b9:e6:87:ff:02:69:8a:c5:3e:ca:73:92:00: 26:00:36:af:3e:42:74:b2:42:ba:00:3f:a1:7b:a0:1c:76:9e: b2:f1:41:a6:20:99:2f:2a:d9:09:c8:13:a1:38:12:b4:7c:8d: 40:72:2b:98:cd:f5:54:57:12:a2:fa:95:00:25:de:0c:cd:e4: 46:d7:b8:bc:64:b1:db:a8:72:8c:6e:c4:dd:55:0e:82:20:63: 3d:23:50:2c:dc:f3:97:3f:4d:aa:7c:eb:44:c3:93:58:46:dc: bb:4f:cf:68:49:b3:67:7a:99:e1:28:d0:ca:cd:dc:ca:91:c7: 3d:5f:1d:52:2b:50:40:11:cf:25:96:ef:75:fa:ab:ed:ba:e0: 19:58:c3:51:f1:7f:89:dd:6a:d9:40:a1:3f:20:8a:7e:cf:a8: dc:cc:fa:a3:ea:00:6a:1b:62:17:bb:60:bc:58:73:62:d0:c1: 24:2e:f5:34:76:1a:a7:71:e7:e5:4e:3c:c8:5a:7e:6a:af:64: 3d:22:6e:d8:a8:08:b4:34:0d:3f:4b:c5:79:a3:75:6a:f3:e4: 28:98:3a:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dl+GZHJWW4WSlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkyM1oXDTI1MDkxNzE0MzkyM1owLzEtMCsGA1UEAxMk NGJiZGJiZTMtNWQ5MC00YWJhLTkyYjAtNTQ0MDdjN2NkYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFfE8oWCHnmyUYU7pTOc6M1yom2ONZvR8h3t BJ/kv1wO+Odks7fuNRB5/S50EEKLYTgxpmRzRo0pynk/KiP5KBdIHrMBxmAjktnq 15da6Y5nfszStdm+hu6wHo4DvMoE3E+0s3wk9Gxdzlgtrvb+q6yJjNZLacQ/EzjL QGAPsQLZ9e3hYbhLPjFNhPc4jBPJLNlwOQrqHR4jTxk6pJMIL4tJtSS7uPkoXAd+ tBB41cApwJG6jbI/0SpAgXQ5sgH66I6O0aLdYs8pzltX2Wwf4sJdBtltI8GptOsB 0yNo4AoeEZTK5cTJUxqv+EFe830L3lw7RloKRBvVMWWwiC7QiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtXgGhHnUq6kYRFzxMcoPqjhkjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2VlMDNhYTAtOGU0NS0z ZWQ0LWFkNWUtODdmMjhlYWM1NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN+cSggZo7HrDc9fHyxrfoMddaW7muzIYFIR9bpTPFzf85i4AEPOmYs ueaH/wJpisU+ynOSACYANq8+QnSyQroAP6F7oBx2nrLxQaYgmS8q2QnIE6E4ErR8 jUByK5jN9VRXEqL6lQAl3gzN5EbXuLxksduocoxuxN1VDoIgYz0jUCzc85c/Tap8 60TDk1hG3LtPz2hJs2d6meEo0MrN3MqRxz1fHVIrUEARzyWW73X6q+264BlYw1Hx f4ndatlAoT8gin7PqNzM+qPqAGobYhe7YLxYc2LQwSQu9TR2Gqdx5+VOPMhafmqv ZD0ibtioCLQ0DT9LxXmjdWrz5CiYOms= -----END CERTIFICATE-----Generated at Tue Jul 1 06:59:04 2025 by rpki-client