$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/530e99d3-c70a-3c2e-91fe-747a03e166e5.roa File: 530e99d3-c70a-3c2e-91fe-747a03e166e5.roa (raw, json) Hash identifier: 0VheE1zHbs3vanrQFmKzRfRunlwRWN3D7Hm7rblTME8= Subject key identifier: 71:1D:6F:F7:BB:7B:C5:17:59:74:5E:F9:5C:41:7B:C2:50:98:6F:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77AE9C751BADEF6D10DD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/530e99d3-c70a-3c2e-91fe-747a03e166e5.roa Signing time: Thu 19 Jun 2025 14:42:01 +0000 ROA not before: Thu 19 Jun 2025 14:42:01 +0000 ROA not after: Wed 17 Sep 2025 14:42:01 +0000 asID: 22773 IP address blocks: 72.222.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:ae:9c:75:1b:ad:ef:6d:10:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:01 2025 GMT Not After : Sep 17 14:42:01 2025 GMT Subject: CN=ceed21d9-fee7-457d-8c6a-d4cbd4a5bb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:04:ab:ff:64:b4:44:24:7e:0a:b7:1b:48: 43:bf:e3:10:31:ee:29:a5:13:56:8b:ba:45:67:73: 52:d3:f8:5e:33:e4:07:bb:ea:68:22:5a:62:9d:1e: ff:c7:df:08:4a:bb:50:64:05:c0:d8:2f:cc:9c:fd: 1b:10:11:1b:90:4b:ec:8f:ca:b6:8d:53:49:e4:9f: b3:b5:d8:af:0f:81:e0:c0:b6:b3:07:fd:93:03:6d: 2b:1d:7d:65:3d:59:80:56:1b:89:b2:e4:4d:37:5f: 5c:cd:7b:e7:50:61:ce:50:9a:30:0d:59:08:40:17: a4:fd:d5:9a:c4:b0:be:08:cc:4a:5d:a3:09:33:6b: 57:67:51:aa:a0:3f:8c:21:8c:e1:c1:67:a0:89:4e: cd:2a:97:d7:52:e2:71:92:92:b6:d2:9d:90:06:8f: 5c:af:71:3e:2c:22:18:bb:bc:65:d8:6f:81:11:de: 13:04:1c:5b:9f:4f:7d:3c:52:f1:ef:07:8d:06:1c: 44:d4:9a:e0:4a:d9:a3:c9:99:d0:0e:0a:ee:56:b7: bf:7f:4e:00:4b:33:50:9c:9f:5a:47:2a:20:08:52: e5:b4:ad:21:76:31:68:23:1b:6c:73:13:33:a8:09: 01:31:c8:1d:f7:59:53:5b:71:18:d9:06:95:77:69: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1D:6F:F7:BB:7B:C5:17:59:74:5E:F9:5C:41:7B:C2:50:98:6F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/530e99d3-c70a-3c2e-91fe-747a03e166e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:09:79:21:1e:99:f8:6a:24:d5:8b:35:b9:77:f2:f5:e1:e0: 50:dd:b2:d7:d1:20:38:7a:de:1d:0d:c7:0b:60:59:af:fa:d6: 7e:21:bb:77:bb:6d:6d:bf:f2:19:85:f9:80:28:a9:18:ce:75: 9a:43:d0:2b:1b:29:ea:5d:bb:ac:39:9d:31:cd:92:de:16:e2: c1:98:37:ff:67:56:d1:06:da:8a:29:7f:d1:f4:4b:37:6c:88: ca:17:78:21:1b:2c:40:a2:d5:d1:43:e9:81:e3:87:7b:fc:90: 82:06:16:4a:ec:ef:49:37:01:2c:cb:c3:03:11:78:cb:a3:7e: cf:db:fb:57:25:b6:0f:df:b6:3e:bc:82:66:71:97:58:55:e3: d4:05:c0:61:76:32:2a:26:7c:c8:c2:75:03:18:3e:eb:35:df: 86:54:ed:15:57:0e:e0:a2:c4:48:e6:58:14:83:c0:ef:74:17: 35:72:b8:63:90:d3:ab:c7:9b:f5:a2:4e:e1:79:13:d3:1b:14: 8e:a9:fd:df:4a:2f:c5:cc:36:a2:94:5b:2c:c4:e9:e1:71:46: 89:51:06:0d:a0:08:39:d6:e3:a6:48:0a:24:86:f0:e9:26:38: 87:ef:0f:fd:02:a2:0a:43:88:78:ef:90:5e:3d:d1:9f:1b:b8: 0a:54:6f:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d66cdRut720Q3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIwMVoXDTI1MDkxNzE0NDIwMVowLzEtMCsGA1UEAxMk Y2VlZDIxZDktZmVlNy00NTdkLThjNmEtZDRjYmQ0YTViYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOYEq/9ktEQkfgq3G0hDv+MQMe4ppRNWi7pF Z3NS0/heM+QHu+poIlpinR7/x98ISrtQZAXA2C/MnP0bEBEbkEvsj8q2jVNJ5J+z tdivD4HgwLazB/2TA20rHX1lPVmAVhuJsuRNN19czXvnUGHOUJowDVkIQBek/dWa xLC+CMxKXaMJM2tXZ1GqoD+MIYzhwWegiU7NKpfXUuJxkpK20p2QBo9cr3E+LCIY u7xl2G+BEd4TBBxbn099PFLx7weNBhxE1JrgStmjyZnQDgruVre/f04ASzNQnJ9a RyogCFLltK0hdjFoIxtscxMzqAkBMcgd91lTW3EY2QaVd2m75QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEdb/e7e8UXWXRe+VxBe8JQmG9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTMwZTk5ZDMtYzcwYS0z YzJlLTkxZmUtNzQ3YTAzZTE2NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN6jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsJeSEemfhqJNWLNbl38vXh4FDdstfRIDh63h0NxwtgWa/61n4hu3e7 bW2/8hmF+YAoqRjOdZpD0CsbKepdu6w5nTHNkt4W4sGYN/9nVtEG2oopf9H0Szds iMoXeCEbLECi1dFD6YHjh3v8kIIGFkrs70k3ASzLwwMReMujfs/b+1cltg/ftj68 gmZxl1hV49QFwGF2MiomfMjCdQMYPus134ZU7RVXDuCixEjmWBSDwO90FzVyuGOQ 06vHm/WiTuF5E9MbFI6p/d9KL8XMNqKUWyzE6eFxRolRBg2gCDnW46ZICiSG8Okm OIfvD/0CogpDiHjvkF490Z8buApUbyI= -----END CERTIFICATE-----Generated at Mon Jun 30 17:17:59 2025 by rpki-client