$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fd67014-419e-3a73-826e-0123e71145d8.roa File: 4fd67014-419e-3a73-826e-0123e71145d8.roa (raw, json) Hash identifier: inS0Uffm1DNZaklLVuJ68m52loCdT1lW+VNIDKhu5Gw= Subject key identifier: 63:02:B4:68:D4:E0:82:71:EF:A8:0E:84:50:7F:A0:AF:02:15:42:4A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76F5496563B2939D689500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fd67014-419e-3a73-826e-0123e71145d8.roa Signing time: Thu 19 Jun 2025 14:40:34 +0000 ROA not before: Thu 19 Jun 2025 14:40:34 +0000 ROA not after: Wed 17 Sep 2025 14:40:34 +0000 asID: 22773 IP address blocks: 72.212.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:f5:49:65:63:b2:93:9d:68:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:34 2025 GMT Not After : Sep 17 14:40:34 2025 GMT Subject: CN=fe2a25ad-ebec-4a1e-b6a5-f98dcb7a0336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:f7:80:44:68:47:02:fb:2a:ef:c1:8f:10: a1:ae:aa:77:fa:13:ee:7e:cb:f3:13:3d:52:d0:8e: df:2e:94:3f:75:f2:af:32:69:2a:38:55:9c:c6:15: 09:e9:bf:38:d7:dc:d6:54:7e:e4:5a:a6:db:31:ac: 19:62:ed:ee:5e:99:64:c6:b7:8a:f8:2d:99:51:97: 6c:8d:09:07:6c:1e:8d:3e:26:82:2f:79:7a:46:0e: 90:6c:af:82:5f:12:a2:26:b6:37:2e:4d:02:f3:d6: 2e:c4:fd:a6:69:57:55:64:c9:62:83:ec:e7:8d:a3: 3f:b3:5f:d7:7c:65:c7:6d:bb:5c:98:db:77:d1:fb: 75:42:f8:f6:de:8c:6f:b6:92:dd:0f:ff:01:f1:25: 25:97:87:41:21:17:99:f4:19:65:83:43:4b:0f:d2: a5:5a:82:96:a3:48:20:05:ae:8b:74:29:27:ef:5f: 63:3b:cc:f4:9d:ab:81:ce:0a:f7:a4:f2:da:42:bd: 7f:a0:26:3a:c5:66:e0:5f:54:bf:4b:7a:90:a9:ca: 93:88:61:bc:09:a0:9e:ce:ba:2f:cc:55:3d:e1:15: c5:8d:2b:07:1a:21:ff:bd:2c:92:8e:8a:39:32:12: a5:53:04:d3:5b:18:76:92:00:27:49:d2:a9:f4:aa: 41:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:02:B4:68:D4:E0:82:71:EF:A8:0E:84:50:7F:A0:AF:02:15:42:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fd67014-419e-3a73-826e-0123e71145d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:81:f4:7d:d1:15:c6:8f:01:07:62:5b:ef:70:3b:21:8f:e2: 1a:4d:72:9d:e7:8f:8b:d4:12:a9:60:99:0b:94:56:f3:b0:1e: a1:c0:87:38:38:34:24:98:dd:73:14:de:08:a6:e1:cb:c6:dd: 92:86:d0:45:99:df:5b:7f:8e:9e:be:eb:36:e3:59:5e:c2:e9: 06:47:ad:e0:59:d0:12:33:de:14:d4:a2:da:c9:61:b7:02:20: c5:24:2a:1c:6f:f0:da:00:84:3f:37:e9:fe:df:e4:38:bc:b7: 8c:ab:1a:5e:2b:f2:07:ca:47:e8:8c:86:40:e0:33:31:94:06: 10:1d:0d:bd:b8:08:ea:57:06:5f:05:34:fa:92:1e:f3:af:e0: ac:3e:6d:dd:58:93:8c:ee:63:63:03:bd:fa:bf:30:6e:d6:0f: 38:71:fd:dd:2e:de:d4:51:57:3c:a1:91:f3:cb:fc:f9:33:4a: 80:ab:08:69:ee:49:87:59:21:c9:5a:c5:20:7e:15:45:fc:ce: 63:a4:15:b0:1e:cd:78:18:1c:da:89:15:03:70:74:93:06:4c: f2:d2:10:d1:ac:26:10:99:c8:de:7c:8a:7d:bb:2d:a9:f1:ca: e3:b2:b4:13:40:40:53:67:04:d4:00:ea:2f:d6:49:f8:2c:d5: 45:a0:9b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dvVJZWOyk51olQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAzNFoXDTI1MDkxNzE0NDAzNFowLzEtMCsGA1UEAxMk ZmUyYTI1YWQtZWJlYy00YTFlLWI2YTUtZjk4ZGNiN2EwMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQz3gERoRwL7Ku/BjxChrqp3+hPufsvzEz1S 0I7fLpQ/dfKvMmkqOFWcxhUJ6b8419zWVH7kWqbbMawZYu3uXplkxreK+C2ZUZds jQkHbB6NPiaCL3l6Rg6QbK+CXxKiJrY3Lk0C89YuxP2maVdVZMlig+znjaM/s1/X fGXHbbtcmNt30ft1Qvj23oxvtpLdD/8B8SUll4dBIReZ9Bllg0NLD9KlWoKWo0gg Ba6LdCkn719jO8z0nauBzgr3pPLaQr1/oCY6xWbgX1S/S3qQqcqTiGG8CaCezrov zFU94RXFjSsHGiH/vSySjoo5MhKlUwTTWxh2kgAnSdKp9KpB8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMCtGjU4IJx76gOhFB/oK8CFUJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGZkNjcwMTQtNDE5ZS0z YTczLTgyNmUtMDEyM2U3MTE0NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNRLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACB9H3RFcaPAQdiW+9wOyGP4hpNcp3nj4vUEqlgmQuUVvOwHqHAhzg4 NCSY3XMU3gim4cvG3ZKG0EWZ31t/jp6+6zbjWV7C6QZHreBZ0BIz3hTUotrJYbcC IMUkKhxv8NoAhD836f7f5Di8t4yrGl4r8gfKR+iMhkDgMzGUBhAdDb24COpXBl8F NPqSHvOv4Kw+bd1Yk4zuY2MDvfq/MG7WDzhx/d0u3tRRVzyhkfPL/PkzSoCrCGnu SYdZIclaxSB+FUX8zmOkFbAezXgYHNqJFQNwdJMGTPLSENGsJhCZyN58in27Lanx yuOytBNAQFNnBNQA6i/WSfgs1UWgm0s= -----END CERTIFICATE-----Generated at Tue Jul 1 01:03:06 2025 by rpki-client