$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434eaac9-a4b1-314c-94f3-25640d951992.roa File: 434eaac9-a4b1-314c-94f3-25640d951992.roa (raw, json) Hash identifier: 7vMwynWoJvxIzF3LKnC8fVzC9+D+xgHUF65NqoS7Q5A= Subject key identifier: 54:35:39:10:88:02:F5:77:B0:D3:E0:63:06:31:F0:D7:D5:F9:0B:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9970794566E4A6CC51FC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434eaac9-a4b1-314c-94f3-25640d951992.roa Signing time: Fri 20 Jun 2025 09:34:12 +0000 ROA not before: Fri 20 Jun 2025 09:34:12 +0000 ROA not after: Thu 18 Sep 2025 09:34:12 +0000 asID: 22773 IP address blocks: 72.207.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:97:07:94:56:6e:4a:6c:c5:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:12 2025 GMT Not After : Sep 18 09:34:12 2025 GMT Subject: CN=5e158f3d-3314-4336-bb30-1a58e7e092b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6c:fb:f2:9e:b5:8d:43:bf:1b:93:e7:56:7c: 49:e4:f2:c0:ad:e7:49:ac:0f:c7:31:f0:9e:2e:49: 79:06:f8:6d:3d:41:61:7f:fc:71:8d:96:9a:35:89: c9:04:dd:b2:63:2d:cc:1e:5e:25:da:86:6c:ee:49: 14:4e:94:a0:43:74:46:ab:54:f9:88:67:7c:53:eb: be:45:0b:d0:fa:65:2e:a7:65:97:21:13:75:f1:21: c5:7c:e9:9a:b2:de:30:98:24:fc:b0:d2:af:8d:90: 8c:10:28:03:bb:05:6d:b5:30:12:a3:0c:5f:86:c3: a8:1d:28:37:a9:5b:1e:2f:19:58:7b:98:3b:a6:38: a4:80:b3:06:a3:d8:df:61:78:04:c1:31:ac:7c:05: bf:60:f5:81:a3:fd:2d:53:03:42:fa:84:28:3e:c0: 75:8c:9a:67:1f:bc:37:ef:33:d4:f9:78:eb:5d:4a: ff:c5:ac:4e:e8:57:75:0c:89:a7:23:46:72:3b:c1: 5c:57:be:2a:7b:06:f8:8c:38:88:e2:20:06:dd:98: 42:d5:a5:be:97:59:6f:5e:e2:57:68:3a:9c:d7:8f: 1c:38:5c:51:1b:62:fb:53:8b:7f:14:c9:16:59:4f: 4c:90:63:d0:ac:0b:b9:f1:8c:73:42:08:ff:09:fe: 69:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:35:39:10:88:02:F5:77:B0:D3:E0:63:06:31:F0:D7:D5:F9:0B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434eaac9-a4b1-314c-94f3-25640d951992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.207.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:da:9f:17:fa:32:aa:9b:da:81:82:ab:c3:bd:e9:f1:92:74: 13:bd:46:37:27:77:d8:66:88:9f:e8:c9:54:a7:2c:8a:d7:42: 78:15:19:c4:63:73:a2:67:d0:44:2c:e1:cd:fc:c7:ec:24:c1: 14:b3:ea:56:d9:77:4d:f4:5f:0c:91:69:8f:ce:d1:62:80:97: 41:21:9b:9b:78:22:39:12:b9:4c:1c:f7:de:b6:23:f8:fb:bd: 4f:7d:3e:4a:0b:50:bc:c1:19:e9:1a:41:ce:11:52:90:9d:d0: 7d:be:1c:72:3f:d9:d7:ff:74:a6:2c:b8:b2:82:f7:51:97:bf: 1b:d9:64:ab:0f:8a:35:0a:f1:a4:ba:88:51:6c:db:12:34:6f: 4c:ec:db:e4:0a:51:9d:a8:94:b6:d5:5e:0f:0e:a9:56:85:b3: be:96:6b:9d:18:c3:95:5b:ce:81:5a:f1:60:60:42:92:42:55: fe:4e:6a:c5:c5:bb:9c:2f:3b:79:7a:df:12:a2:84:80:0b:d6: a3:21:c9:8a:5a:a5:02:b8:68:32:3e:d5:71:3d:95:5f:f7:ac: 66:7b:96:8a:ff:85:7a:bd:cf:55:04:16:e4:a2:03:d8:a1:d5: 87:3f:31:73:d7:75:e9:23:2a:db:f6:89:33:e6:3c:06:64:38: 9e:e6:90:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqZcHlFZuSmzFH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQxMloXDTI1MDkxODA5MzQxMlowLzEtMCsGA1UEAxMk NWUxNThmM2QtMzMxNC00MzM2LWJiMzAtMWE1OGU3ZTA5MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGz78p61jUO/G5PnVnxJ5PLAredJrA/HMfCe Lkl5BvhtPUFhf/xxjZaaNYnJBN2yYy3MHl4l2oZs7kkUTpSgQ3RGq1T5iGd8U+u+ RQvQ+mUup2WXIRN18SHFfOmast4wmCT8sNKvjZCMECgDuwVttTASowxfhsOoHSg3 qVseLxlYe5g7pjikgLMGo9jfYXgEwTGsfAW/YPWBo/0tUwNC+oQoPsB1jJpnH7w3 7zPU+XjrXUr/xaxO6Fd1DImnI0ZyO8FcV74qewb4jDiI4iAG3ZhC1aW+l1lvXuJX aDqc148cOFxRG2L7U4t/FMkWWU9MkGPQrAu58YxzQgj/Cf5pgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ1ORCIAvV3sNPgYwYx8NfV+QuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM0ZWFhYzktYTRiMS0z MTRjLTk0ZjMtMjU2NDBkOTUxOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSM+OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDanxf6Mqqb2oGCq8O96fGSdBO9Rjcnd9hmiJ/oyVSnLIrXQngVGcRj c6Jn0EQs4c38x+wkwRSz6lbZd030XwyRaY/O0WKAl0Ehm5t4IjkSuUwc9962I/j7 vU99PkoLULzBGekaQc4RUpCd0H2+HHI/2df/dKYsuLKC91GXvxvZZKsPijUK8aS6 iFFs2xI0b0zs2+QKUZ2olLbVXg8OqVaFs76Wa50Yw5VbzoFa8WBgQpJCVf5OasXF u5wvO3l63xKihIAL1qMhyYpapQK4aDI+1XE9lV/3rGZ7lor/hXq9z1UEFuSiA9ih 1Yc/MXPXdekjKtv2iTPmPAZkOJ7mkAY= -----END CERTIFICATE-----Generated at Tue Jul 1 17:51:40 2025 by rpki-client