$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41c9bf5f-e14b-3d57-804c-065920258e46.roa File: 41c9bf5f-e14b-3d57-804c-065920258e46.roa (raw, json) Hash identifier: 2Z/FDNKN0w+vXTJxkShOXZ4ooQ+lWc72dyz0YrhOebc= Subject key identifier: FE:10:20:2E:D1:24:0D:8E:81:12:58:20:95:72:90:F9:79:0D:14:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75ECBE5A8D92D76A370300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41c9bf5f-e14b-3d57-804c-065920258e46.roa Signing time: Thu 19 Jun 2025 14:38:29 +0000 ROA not before: Thu 19 Jun 2025 14:38:29 +0000 ROA not after: Wed 17 Sep 2025 14:38:29 +0000 asID: 22773 IP address blocks: 72.206.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:ec:be:5a:8d:92:d7:6a:37:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:29 2025 GMT Not After : Sep 17 14:38:29 2025 GMT Subject: CN=bf148ddb-1959-411f-90b7-25d4c8bba422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:59:e5:50:14:77:ea:2e:66:7e:17:30:52: fe:d4:69:40:1f:53:b6:cd:17:d0:cf:25:eb:12:0f: 81:61:3e:cc:c6:80:a6:0d:37:3f:f2:c7:3a:26:c5: 55:82:5e:12:50:ba:a0:c7:22:63:c4:5e:8d:5b:88: 40:43:88:35:03:30:4b:4f:95:1d:c4:5d:6a:76:72: f5:c5:a1:65:ff:eb:e6:3d:18:43:74:d7:21:02:ea: a1:18:22:88:7b:0d:08:92:3c:ea:1a:a9:8f:fd:98: da:b8:ab:a9:af:77:fb:15:10:ee:73:5f:41:68:de: 66:6c:2e:ac:0a:16:4c:06:82:66:a7:45:fe:3c:2f: 9d:31:fe:a5:83:90:e3:16:93:4c:2f:65:c8:0a:30: c6:f5:74:25:ec:cb:d7:e0:47:7a:a2:3c:83:ca:63: bd:27:34:6b:bf:84:31:0f:3b:a4:9a:38:ea:b7:03: da:04:12:05:28:c0:79:b1:68:77:0f:29:ef:1d:5d: 7a:a6:8f:dc:cd:03:c0:2f:d1:7d:0d:d8:2b:2b:31: d0:73:67:cd:9e:7f:9d:53:e1:5e:f8:7d:9e:b2:06: 0e:9d:4c:9e:45:3a:70:4d:cf:13:42:47:9c:69:c5: bc:18:cc:36:34:4a:a1:f3:9f:74:cb:87:31:40:9b: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:10:20:2E:D1:24:0D:8E:81:12:58:20:95:72:90:F9:79:0D:14:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41c9bf5f-e14b-3d57-804c-065920258e46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f5:17:eb:b5:3a:7c:39:51:77:2f:09:da:ef:fa:eb:9e:cf: 30:40:ef:1c:5b:5a:bc:1b:15:d5:29:2e:4a:03:d4:6d:81:83: 55:b3:42:15:a2:64:2d:a9:ce:ee:d9:7d:97:7f:f7:a1:a4:c4: d9:2b:1f:1f:f9:08:e1:19:e7:0b:f9:51:c8:31:92:b0:3d:73: 0e:94:6d:ba:03:88:c8:e1:91:98:b5:a2:e1:46:ac:1a:f1:c6: e2:dc:b7:63:7b:13:47:16:df:52:1f:93:5c:36:13:5a:92:e7: 45:01:3d:97:b5:80:5b:f3:0b:64:68:cf:ff:dd:f8:93:69:40: ef:f6:bc:e7:d9:5a:a1:be:3c:61:0b:43:7d:64:83:27:af:59: 5f:79:bc:ba:81:4b:71:75:ed:24:d2:e5:e5:06:22:c3:a0:18: ed:e7:71:5a:0a:f8:91:d1:54:cc:c5:6b:48:b5:7f:a2:38:6a: a7:21:5f:e5:85:5c:5b:a6:69:26:98:27:c3:13:f2:ad:1f:a0: 16:df:91:23:a6:0c:ee:11:6c:1d:5e:44:65:37:0e:62:75:14: ce:78:36:1e:3b:e9:f0:d8:73:d0:92:1b:90:44:05:81:5d:ef: f3:7d:28:7b:6d:f7:5f:28:4e:e0:1c:bc:c9:55:6b:9e:fa:0e: 4d:2d:2a:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dey+Wo2S12o3AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgyOVoXDTI1MDkxNzE0MzgyOVowLzEtMCsGA1UEAxMk YmYxNDhkZGItMTk1OS00MTFmLTkwYjctMjVkNGM4YmJhNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GxZ5VAUd+ouZn4XMFL+1GlAH1O2zRfQzyXr Eg+BYT7MxoCmDTc/8sc6JsVVgl4SULqgxyJjxF6NW4hAQ4g1AzBLT5UdxF1qdnL1 xaFl/+vmPRhDdNchAuqhGCKIew0IkjzqGqmP/ZjauKupr3f7FRDuc19BaN5mbC6s ChZMBoJmp0X+PC+dMf6lg5DjFpNML2XICjDG9XQl7MvX4Ed6ojyDymO9JzRrv4Qx DzukmjjqtwPaBBIFKMB5sWh3DynvHV16po/czQPAL9F9DdgrKzHQc2fNnn+dU+Fe +H2esgYOnUyeRTpwTc8TQkecacW8GMw2NEqh8590y4cxQJuShwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4QIC7RJA2OgRJYIJVykPl5DRQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDFjOWJmNWYtZTE0Yi0z ZDU3LTgwNGMtMDY1OTIwMjU4ZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP1F+u1Onw5UXcvCdrv+uuezzBA7xxbWrwbFdUpLkoD1G2Bg1WzQhWi ZC2pzu7ZfZd/96GkxNkrHx/5COEZ5wv5UcgxkrA9cw6UbboDiMjhkZi1ouFGrBrx xuLct2N7E0cW31Ifk1w2E1qS50UBPZe1gFvzC2Roz//d+JNpQO/2vOfZWqG+PGEL Q31kgyevWV95vLqBS3F17STS5eUGIsOgGO3ncVoK+JHRVMzFa0i1f6I4aqchX+WF XFumaSaYJ8MT8q0foBbfkSOmDO4RbB1eRGU3DmJ1FM54Nh476fDYc9CSG5BEBYFd 7/N9KHtt918oTuAcvMlVa576Dk0tKi0= -----END CERTIFICATE-----Generated at Mon Jun 30 18:25:59 2025 by rpki-client