$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ce9df4b-d6a3-328d-be16-33d0d9dbc0fb.roa File: 4ce9df4b-d6a3-328d-be16-33d0d9dbc0fb.roa (raw, json) Hash identifier: D+xR2NLkN3QP3bJtWWeRP2NEkeMCFr7FEoUjKDzm1ZA= Subject key identifier: 22:D2:03:39:C4:DA:74:B4:2C:1A:27:B0:E1:46:B4:99:96:90:C7:66 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75DFA93CD61D571AA4CD40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ce9df4b-d6a3-328d-be16-33d0d9dbc0fb.roa Signing time: Thu 19 Jun 2025 14:38:23 +0000 ROA not before: Thu 19 Jun 2025 14:38:23 +0000 ROA not after: Wed 17 Sep 2025 14:38:23 +0000 asID: 22773 IP address blocks: 72.206.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:df:a9:3c:d6:1d:57:1a:a4:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:23 2025 GMT Not After : Sep 17 14:38:23 2025 GMT Subject: CN=0bdef5a7-8c5f-4646-ab33-babba4cd0669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:df:e5:67:87:b4:10:90:0c:80:a2:dc:45: 4a:52:4d:a0:37:c3:88:64:39:80:70:ad:66:ed:95: 68:45:d3:fa:e6:cc:76:f9:08:a3:29:ba:0e:04:b5: 25:80:f3:cc:f3:e6:fe:4a:f0:0b:40:da:44:79:21: e4:82:24:f2:04:10:44:96:f3:78:16:bf:a0:1e:36: 14:b8:f9:18:38:e7:14:b3:0f:0c:43:60:c9:9e:84: c5:a3:a1:6e:c8:ca:93:57:04:52:cb:55:b3:55:13: 0f:85:11:78:3d:6e:46:fe:56:6a:ed:dd:1d:68:22: b7:fa:21:e1:ab:36:d0:08:5f:15:09:e0:39:2d:a5: 3d:a8:e2:93:fc:61:f6:81:3f:88:c9:0b:36:d5:a7: 87:77:b7:85:d1:1d:05:c8:78:27:3b:24:4f:2b:60: 02:04:3a:d9:a7:17:b9:cd:50:e1:b4:86:dc:57:a2: 8d:4d:cf:1a:cc:3e:d0:bf:c0:68:c2:42:d7:d9:8f: 82:dc:d4:09:97:8c:ff:a6:a1:e5:cd:40:07:fe:86: 21:f7:b6:e7:b7:54:ca:c0:9b:5b:97:2e:6e:d3:9b: 35:42:79:08:12:72:47:8f:ad:70:4f:e7:b1:61:a4: 95:f3:13:96:dd:fb:12:b4:81:42:f6:d5:68:5b:c6: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:03:39:C4:DA:74:B4:2C:1A:27:B0:E1:46:B4:99:96:90:C7:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ce9df4b-d6a3-328d-be16-33d0d9dbc0fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5e:8f:f9:ba:46:f4:9e:fc:1c:5b:46:11:52:ea:76:e7:ef: ce:64:66:a5:ba:a7:49:2e:bf:50:91:a0:43:a0:99:4d:2e:15: dd:39:e3:28:44:49:40:fd:c0:33:3f:9f:50:5d:a8:a5:53:48: e1:51:45:07:08:44:38:98:6c:32:7b:d4:18:e3:1f:80:49:46: cc:57:d9:46:56:cc:3e:29:85:59:4a:2b:65:d2:1e:08:51:b4: 1f:dc:01:2c:cd:9a:5b:c4:7f:62:55:b6:5c:dd:ed:8d:83:fb: 5c:bb:3c:e9:13:46:f1:d1:8f:20:3a:ef:42:25:b9:b2:93:90: aa:96:1e:38:85:d5:13:6d:0c:77:92:ed:d7:44:8f:f1:d3:39: d4:5c:bc:0b:38:d5:13:65:da:a1:7a:ef:34:cf:1d:0b:7c:69: 31:eb:60:9c:59:fd:e2:43:3a:b0:7b:06:91:ef:c3:f6:84:b6: 11:e9:f5:b2:d6:3a:d5:9f:7a:aa:61:8e:e7:14:26:b9:09:c5: 38:0e:9b:b7:68:31:39:e6:08:51:d9:30:e0:de:25:0b:6d:9d: 15:70:d2:9b:e7:ff:cf:a9:a6:5f:b3:a7:cb:e2:62:5d:62:1d: 09:7f:4c:f1:64:7b:a4:eb:03:af:d7:08:bf:14:e2:33:09:0c: ad:86:40:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dd+pPNYdVxqkzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgyM1oXDTI1MDkxNzE0MzgyM1owLzEtMCsGA1UEAxMk MGJkZWY1YTctOGM1Zi00NjQ2LWFiMzMtYmFiYmE0Y2QwNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKbf5WeHtBCQDICi3EVKUk2gN8OIZDmAcK1m 7ZVoRdP65sx2+QijKboOBLUlgPPM8+b+SvALQNpEeSHkgiTyBBBElvN4Fr+gHjYU uPkYOOcUsw8MQ2DJnoTFo6FuyMqTVwRSy1WzVRMPhRF4PW5G/lZq7d0daCK3+iHh qzbQCF8VCeA5LaU9qOKT/GH2gT+IyQs21aeHd7eF0R0FyHgnOyRPK2ACBDrZpxe5 zVDhtIbcV6KNTc8azD7Qv8BowkLX2Y+C3NQJl4z/pqHlzUAH/oYh97bnt1TKwJtb ly5u05s1QnkIEnJHj61wT+exYaSV8xOW3fsStIFC9tVoW8bCHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLSAznE2nS0LBonsOFGtJmWkMdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGNlOWRmNGItZDZhMy0z MjhkLWJlMTYtMzNkMGQ5ZGJjMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBej/m6RvSe/BxbRhFS6nbn785kZqW6p0kuv1CRoEOgmU0uFd054yhE SUD9wDM/n1BdqKVTSOFRRQcIRDiYbDJ71BjjH4BJRsxX2UZWzD4phVlKK2XSHghR tB/cASzNmlvEf2JVtlzd7Y2D+1y7POkTRvHRjyA670IlubKTkKqWHjiF1RNtDHeS 7ddEj/HTOdRcvAs41RNl2qF67zTPHQt8aTHrYJxZ/eJDOrB7BpHvw/aEthHp9bLW OtWfeqphjucUJrkJxTgOm7doMTnmCFHZMODeJQttnRVw0pvn/8+ppl+zp8viYl1i HQl/TPFke6TrA6/XCL8U4jMJDK2GQDQ= -----END CERTIFICATE-----Generated at Tue Jul 1 16:21:34 2025 by rpki-client