$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5281befb-0d11-3177-95d0-2913d715c232.roa File: 5281befb-0d11-3177-95d0-2913d715c232.roa (raw, json) Hash identifier: 9qycw36x1bKVQ6hFMLhqiNm7OPJcYZ+AU4mj+fw1Jns= Subject key identifier: E4:E7:73:77:F7:B7:B8:44:01:5A:F6:0E:3D:BA:81:FF:22:BC:83:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75A6D6811854AFD74E13C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5281befb-0d11-3177-95d0-2913d715c232.roa Signing time: Thu 19 Jun 2025 14:37:56 +0000 ROA not before: Thu 19 Jun 2025 14:37:56 +0000 ROA not after: Wed 17 Sep 2025 14:37:56 +0000 asID: 22773 IP address blocks: 72.201.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:a6:d6:81:18:54:af:d7:4e:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:56 2025 GMT Not After : Sep 17 14:37:56 2025 GMT Subject: CN=059feda6-9473-4d2d-9f08-297faa48f64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:8e:24:51:bc:af:9a:74:d3:9c:46:40:69: 70:53:ea:88:bb:28:98:3b:a8:9e:9d:b9:c7:fa:69: 9b:9d:48:23:3f:44:de:46:b0:cd:9d:6d:cd:06:be: 3e:a4:70:6b:60:1c:e0:06:76:83:b3:9f:67:37:e9: 59:58:d6:33:87:0a:82:21:bc:f5:3e:b9:78:00:83: 6d:d3:52:65:76:8f:17:a9:75:29:bb:fd:49:45:38: 18:86:d9:15:ba:27:25:b7:2e:94:ff:3e:ce:be:27: 3e:b4:50:da:3b:70:74:a2:0c:f0:a5:2d:c6:09:77: 28:1d:d6:d5:17:66:58:cb:fb:76:d1:1d:65:a6:53: 90:c6:ba:57:b9:ee:4f:ef:32:b9:9f:4c:e8:a5:8e: 53:1e:4b:e3:92:ed:7f:16:61:8c:3c:5a:a5:5a:7e: aa:20:91:cd:3c:7d:0d:3a:f3:a4:35:86:be:66:c2: dd:7c:71:56:4f:f1:4e:0a:d3:ed:8b:d0:9e:55:2c: 67:82:3b:0a:fb:be:08:89:4c:e1:3d:24:e1:fb:94: 33:c7:05:0b:2b:c3:44:68:da:e9:6d:9f:c9:b6:32: 44:80:13:2b:9b:cb:eb:6c:93:aa:70:32:0e:86:b4: 22:6b:93:24:db:0f:83:35:bb:04:14:da:e5:d3:40: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E7:73:77:F7:B7:B8:44:01:5A:F6:0E:3D:BA:81:FF:22:BC:83:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5281befb-0d11-3177-95d0-2913d715c232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:64:2d:d4:fa:ca:5c:3f:18:21:a6:55:77:49:2b:dc:28:1c: 67:69:f6:3e:b8:1c:b5:41:37:7c:aa:10:c2:70:72:e7:09:16: d8:03:61:d4:47:44:c1:f4:07:f5:6d:b7:80:c7:5c:ac:ae:b2: 41:9c:0c:9d:ea:c9:a7:a1:9f:f8:f1:cf:ec:78:f3:2a:21:c2: ef:f7:a7:b8:99:73:27:a7:32:22:56:02:62:9a:19:40:62:90: 31:99:84:9a:13:70:3f:79:96:aa:8f:fc:fd:b7:07:ff:fc:c9: ba:8f:ab:d4:57:3e:52:57:50:35:c7:9b:ce:69:bf:ee:6f:6c: 87:79:b2:70:6d:6d:0a:22:e2:4d:69:d0:03:05:47:70:b5:e6: 0a:18:3e:c7:de:65:9a:da:44:11:0f:9c:d9:95:e0:26:25:a7: e9:70:47:89:43:c4:47:6b:52:80:6e:91:d1:14:29:e8:62:e3: 38:dc:d1:4b:3e:d2:e1:f6:b8:d1:4f:4e:22:82:ff:62:9f:10: db:8a:84:75:6c:78:19:b1:41:5e:36:7c:04:95:e9:17:fb:8a: 10:9c:03:3b:ad:53:74:6a:11:04:15:e2:dd:a7:d8:81:09:2d: 6a:2e:68:1e:d4:38:d6:80:57:36:76:e7:2f:b8:48:99:63:0d: 44:cd:3c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dabWgRhUr9dOE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzc1NloXDTI1MDkxNzE0Mzc1NlowLzEtMCsGA1UEAxMk MDU5ZmVkYTYtOTQ3My00ZDJkLTlmMDgtMjk3ZmFhNDhmNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNOOJFG8r5p005xGQGlwU+qIuyiYO6ienbnH +mmbnUgjP0TeRrDNnW3NBr4+pHBrYBzgBnaDs59nN+lZWNYzhwqCIbz1Prl4AINt 01Jldo8XqXUpu/1JRTgYhtkVuiclty6U/z7Ovic+tFDaO3B0ogzwpS3GCXcoHdbV F2ZYy/t20R1lplOQxrpXue5P7zK5n0zopY5THkvjku1/FmGMPFqlWn6qIJHNPH0N OvOkNYa+ZsLdfHFWT/FOCtPti9CeVSxngjsK+74IiUzhPSTh+5QzxwULK8NEaNrp bZ/JtjJEgBMrm8vrbJOqcDIOhrQia5Mk2w+DNbsEFNrl00CUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTnc3f3t7hEAVr2Dj26gf8ivIO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI4MWJlZmItMGQxMS0z MTc3LTk1ZDAtMjkxM2Q3MTVjMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMl+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhkLdT6ylw/GCGmVXdJK9woHGdp9j64HLVBN3yqEMJwcucJFtgDYdRH RMH0B/Vtt4DHXKyuskGcDJ3qyaehn/jxz+x48yohwu/3p7iZcyenMiJWAmKaGUBi kDGZhJoTcD95lqqP/P23B//8ybqPq9RXPlJXUDXHm85pv+5vbId5snBtbQoi4k1p 0AMFR3C15goYPsfeZZraRBEPnNmV4CYlp+lwR4lDxEdrUoBukdEUKehi4zjc0Us+ 0uH2uNFPTiKC/2KfENuKhHVseBmxQV42fASV6Rf7ihCcAzutU3RqEQQV4t2n2IEJ LWouaB7UONaAVzZ25y+4SJljDUTNPAQ= -----END CERTIFICATE-----Generated at Wed Jul 2 06:17:40 2025 by rpki-client