$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44c07259-cfae-3ce4-9c82-e96374647a22.roa File: 44c07259-cfae-3ce4-9c82-e96374647a22.roa (raw, json) Hash identifier: gHz7nrU7Os4LYvzsnXkaz19gVQ+fqOyROyncuyVw11U= Subject key identifier: 8A:A2:B4:80:C5:53:90:93:F5:15:A7:87:9C:32:AA:F5:71:0A:F1:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7770ED959E1BF6AB782A10 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44c07259-cfae-3ce4-9c82-e96374647a22.roa Signing time: Thu 19 Jun 2025 14:41:32 +0000 ROA not before: Thu 19 Jun 2025 14:41:32 +0000 ROA not after: Wed 17 Sep 2025 14:41:32 +0000 asID: 22773 IP address blocks: 72.217.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:70:ed:95:9e:1b:f6:ab:78:2a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:32 2025 GMT Not After : Sep 17 14:41:32 2025 GMT Subject: CN=ede6d3cb-d806-45db-a5f0-b596c4b379c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:c9:ed:01:b9:82:57:5a:31:cb:8c:7d:d1: f6:fb:89:7d:02:23:57:66:01:ab:ff:86:3e:32:1a: 0c:62:56:3d:54:f6:8f:a0:4b:c2:07:5f:79:c0:9f: f3:59:bc:b2:e6:7e:99:93:c3:d4:e0:ed:94:21:42: e7:23:38:d7:83:0b:e3:c0:1a:e5:3a:9a:c2:d9:54: a2:70:0d:fc:1f:41:e6:c6:41:1e:e1:6e:cd:18:fc: e5:b0:c0:9d:80:93:ef:6d:6f:04:d7:87:e2:b5:c8: b8:8b:69:ef:1c:82:86:de:d7:e7:27:00:73:f5:95: aa:73:12:f6:f0:f2:87:98:13:1b:65:da:46:7c:a0: 8f:42:c3:bd:ff:98:bb:73:81:2b:e0:73:d8:86:d0: d4:dc:5b:c5:a7:9b:10:15:a5:87:6d:70:03:41:a1: 55:8c:b0:47:52:4f:0e:af:6c:7e:81:11:79:a3:c4: 00:16:db:65:0c:07:61:2d:b1:d4:41:78:f6:d7:d9: d2:44:57:51:ef:bf:f6:02:14:6a:2e:6b:90:68:95: c2:be:83:8a:26:7d:80:37:24:ad:8e:28:cb:fa:11: 9b:e3:5b:d8:9e:74:4d:8e:04:51:0f:29:16:19:19: 90:2d:98:df:fc:3e:64:3b:44:5f:5d:88:cc:44:4e: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A2:B4:80:C5:53:90:93:F5:15:A7:87:9C:32:AA:F5:71:0A:F1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44c07259-cfae-3ce4-9c82-e96374647a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:69:11:bd:51:08:28:86:8e:94:f0:af:85:84:00:f0:a9:c4: 05:0e:a9:80:9e:9e:9e:fe:66:a5:8f:eb:9e:4b:38:87:db:ad: 89:36:02:23:d2:02:83:01:4b:b0:75:5e:8b:5e:15:75:2f:88: 93:e1:93:bb:0c:6f:f5:4c:9f:90:a3:23:89:fd:ca:2a:7a:eb: 54:b9:74:95:53:5f:45:d3:41:45:b7:f0:43:82:5a:bb:00:e1: 98:49:cb:66:b0:8d:5e:8a:d5:c1:8d:6a:18:0b:e5:7e:c5:16: 27:24:90:d9:57:f3:bf:e5:b9:72:78:e9:d0:dc:dd:6e:3e:3f: c4:39:e4:11:d8:cb:85:ca:c1:58:2a:bb:74:ab:3e:eb:68:9b: d5:2e:33:17:2b:7d:35:51:b6:7d:68:9d:0d:3a:40:85:0f:9b: 41:6b:3f:4d:e4:5c:ea:4d:83:29:79:b3:41:06:3e:f4:4b:62: 2b:79:0e:82:17:14:e0:97:89:22:74:45:42:1f:21:6e:34:30: b9:4f:48:2a:8e:3e:a5:93:a6:3c:5b:b1:80:ba:b7:c7:8d:04: a8:0f:9a:aa:c3:1d:f4:35:ca:e7:82:79:2f:02:17:91:65:c9: 34:16:28:0e:2c:9f:d5:24:d6:23:1e:9b:df:57:ce:bb:53:77: 13:70:b0:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d3DtlZ4b9qt4KhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDEzMloXDTI1MDkxNzE0NDEzMlowLzEtMCsGA1UEAxMk ZWRlNmQzY2ItZDgwNi00NWRiLWE1ZjAtYjU5NmM0YjM3OWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVLJ7QG5gldaMcuMfdH2+4l9AiNXZgGr/4Y+ MhoMYlY9VPaPoEvCB195wJ/zWbyy5n6Zk8PU4O2UIULnIzjXgwvjwBrlOprC2VSi cA38H0HmxkEe4W7NGPzlsMCdgJPvbW8E14fitci4i2nvHIKG3tfnJwBz9ZWqcxL2 8PKHmBMbZdpGfKCPQsO9/5i7c4Er4HPYhtDU3FvFp5sQFaWHbXADQaFVjLBHUk8O r2x+gRF5o8QAFttlDAdhLbHUQXj219nSRFdR77/2AhRqLmuQaJXCvoOKJn2ANySt jijL+hGb41vYnnRNjgRRDykWGRmQLZjf/D5kO0RfXYjMRE4omQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqitIDFU5CT9RWnh5wyqvVxCvFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDRjMDcyNTktY2ZhZS0z Y2U0LTljODItZTk2Mzc0NjQ3YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1pEb1RCCiGjpTwr4WEAPCpxAUOqYCenp7+ZqWP655LOIfbrYk2AiPS AoMBS7B1XoteFXUviJPhk7sMb/VMn5CjI4n9yip661S5dJVTX0XTQUW38EOCWrsA 4ZhJy2awjV6K1cGNahgL5X7FFickkNlX87/luXJ46dDc3W4+P8Q55BHYy4XKwVgq u3SrPutom9UuMxcrfTVRtn1onQ06QIUPm0FrP03kXOpNgyl5s0EGPvRLYit5DoIX FOCXiSJ0RUIfIW40MLlPSCqOPqWTpjxbsYC6t8eNBKgPmqrDHfQ1yueCeS8CF5Fl yTQWKA4sn9Uk1iMem99XzrtTdxNwsM0= -----END CERTIFICATE-----Generated at Tue Jul 1 18:13:56 2025 by rpki-client