$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f85a25e-8b6d-3968-b2bb-a52e24200c78.roa File: 3f85a25e-8b6d-3968-b2bb-a52e24200c78.roa (raw, json) Hash identifier: mNfesWzfkOhpv+XVO9oHHwF6V1ij4gPKdIQD8hTFX4M= Subject key identifier: C4:BA:14:3D:80:05:47:B1:70:9E:2B:96:4F:D0:20:5B:2E:D3:C4:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E762F27B56A6A050D5B6700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f85a25e-8b6d-3968-b2bb-a52e24200c78.roa Signing time: Thu 19 Jun 2025 14:39:00 +0000 ROA not before: Thu 19 Jun 2025 14:39:00 +0000 ROA not after: Wed 17 Sep 2025 14:39:00 +0000 asID: 22773 IP address blocks: 72.208.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:2f:27:b5:6a:6a:05:0d:5b:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:00 2025 GMT Not After : Sep 17 14:39:00 2025 GMT Subject: CN=29fcaaa9-f24a-444d-99cc-3fe4906a7b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0e:2c:9a:f9:07:30:10:d5:a2:8c:2b:2f:dd: 79:cc:7e:87:21:0d:b6:ec:75:19:6e:74:bc:ae:54: 86:fd:6a:63:94:e2:aa:ed:36:7a:4c:22:89:2b:ff: c2:a8:08:8d:55:10:9d:bd:18:5e:87:0a:95:28:bb: 3e:2d:5f:99:ef:48:6b:34:f3:6d:b5:31:af:97:d8: fb:91:30:fc:49:6b:ca:c4:7a:4d:fd:7f:61:5b:98: 9d:53:95:ae:71:5e:57:da:9b:fc:01:70:14:b6:b4: 4b:4c:48:79:5f:dc:6f:f2:77:b1:e2:2b:07:2e:04: 15:a2:6c:ed:ec:b6:dc:2c:8e:b0:fe:f8:b7:b4:71: 9f:f2:07:a5:7d:04:37:43:be:03:10:81:f9:43:ad: 45:94:0a:63:cc:d5:63:cb:a4:e6:41:38:7f:3f:34: d6:a7:49:60:19:d7:21:fa:31:fc:93:1f:12:b9:07: 81:2a:b1:d6:b5:54:79:7c:a8:d1:75:2e:6f:8b:59: d0:c5:1d:a7:b4:47:19:85:b2:1e:1a:d6:61:51:6c: 3a:ac:85:a0:27:75:de:81:27:1d:f9:3f:8c:f5:35: df:19:78:46:29:41:d9:25:40:49:eb:8d:93:ab:20: 8a:f8:28:3b:f7:ab:71:47:4a:67:ba:a2:10:b7:d7: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BA:14:3D:80:05:47:B1:70:9E:2B:96:4F:D0:20:5B:2E:D3:C4:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f85a25e-8b6d-3968-b2bb-a52e24200c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e5:3a:66:9b:d8:a9:95:73:97:8f:09:55:50:c3:c0:f9:8f: 70:63:33:6f:70:b3:45:73:cb:e2:73:98:2a:53:c6:69:48:5d: 3b:8d:b3:88:72:cd:5f:79:39:79:d8:3d:bd:2d:ed:0e:33:90: f3:cb:a4:06:91:5b:fb:59:1b:88:78:df:45:62:3e:b7:d1:40: 2f:5d:27:6e:8d:a3:ba:3e:5e:ba:68:35:8f:29:fe:3b:f1:09: 9b:b2:96:82:2f:22:10:cd:63:a1:25:47:5f:3d:45:33:2e:20: 85:95:e4:b8:4f:e6:4a:f3:44:5c:6b:36:11:e1:8b:9d:5b:e9: aa:9c:d6:20:ce:8f:1c:ad:44:cd:14:51:ca:48:0f:90:f4:ab: 36:08:68:85:62:1f:eb:0e:c3:ec:0a:17:98:46:94:89:62:b5: c3:47:c4:f8:97:15:59:c9:41:64:fd:81:63:41:9c:63:81:bf: b5:d7:36:2e:07:9e:80:4f:1e:a8:88:8b:c4:77:6d:25:0d:09: bf:28:8c:9e:79:46:db:80:a2:cb:51:67:13:4d:07:88:53:19: 6e:e6:0e:f4:40:33:4e:97:a9:b0:5c:d7:27:13:8e:0a:5c:53: 99:74:e3:84:66:3b:c9:1f:e6:b6:c6:b2:13:59:fc:aa:4f:51: b4:63:e1:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+di8ntWpqBQ1bZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkwMFoXDTI1MDkxNzE0MzkwMFowLzEtMCsGA1UEAxMk MjlmY2FhYTktZjI0YS00NDRkLTk5Y2MtM2ZlNDkwNmE3YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ4smvkHMBDVoowrL915zH6HIQ227HUZbnS8 rlSG/WpjlOKq7TZ6TCKJK//CqAiNVRCdvRhehwqVKLs+LV+Z70hrNPNttTGvl9j7 kTD8SWvKxHpN/X9hW5idU5WucV5X2pv8AXAUtrRLTEh5X9xv8nex4isHLgQVomzt 7LbcLI6w/vi3tHGf8gelfQQ3Q74DEIH5Q61FlApjzNVjy6TmQTh/PzTWp0lgGdch +jH8kx8SuQeBKrHWtVR5fKjRdS5vi1nQxR2ntEcZhbIeGtZhUWw6rIWgJ3XegScd +T+M9TXfGXhGKUHZJUBJ642TqyCK+Cg796txR0pnuqIQt9fqiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS6FD2ABUexcJ4rlk/QIFsu08TaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Y4NWEyNWUtOGI2ZC0z OTY4LWIyYmItYTUyZTI0MjAwYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNAxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJblOmab2KmVc5ePCVVQw8D5j3BjM29ws0Vzy+JzmCpTxmlIXTuNs4hy zV95OXnYPb0t7Q4zkPPLpAaRW/tZG4h430ViPrfRQC9dJ26No7o+XrpoNY8p/jvx CZuyloIvIhDNY6ElR189RTMuIIWV5LhP5krzRFxrNhHhi51b6aqc1iDOjxytRM0U UcpID5D0qzYIaIViH+sOw+wKF5hGlIlitcNHxPiXFVnJQWT9gWNBnGOBv7XXNi4H noBPHqiIi8R3bSUNCb8ojJ55RtuAostRZxNNB4hTGW7mDvRAM06XqbBc1ycTjgpc U5l044RmO8kf5rbGshNZ/KpPUbRj4ac= -----END CERTIFICATE-----Generated at Wed Jul 2 01:26:04 2025 by rpki-client