$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/578612df-947a-3f7f-8bda-502c4f57e7f7.roa File: 578612df-947a-3f7f-8bda-502c4f57e7f7.roa (raw, json) Hash identifier: 3Hc7e/7qtVR4384PBR3sv6NJq3Pa5Yj6rFabN61gWvs= Subject key identifier: 11:66:69:F7:3B:25:C0:10:ED:F2:F5:7C:54:83:7B:B6:D7:5A:DD:81 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77C289A73450C8D0B5A000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/578612df-947a-3f7f-8bda-502c4f57e7f7.roa Signing time: Thu 19 Jun 2025 14:42:11 +0000 ROA not before: Thu 19 Jun 2025 14:42:11 +0000 ROA not after: Wed 17 Sep 2025 14:42:11 +0000 asID: 22773 IP address blocks: 72.222.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:c2:89:a7:34:50:c8:d0:b5:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:11 2025 GMT Not After : Sep 17 14:42:11 2025 GMT Subject: CN=8bdb6046-6c4a-42ca-ace2-742d6cfb7b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:46:26:f3:9f:bc:34:12:4b:f7:d4:ff:d1: ad:df:f1:e3:8e:33:9c:73:2b:b3:bc:cc:e1:a4:e9: 23:3a:fd:0c:43:2f:66:1e:bb:31:53:2a:fa:a4:fc: df:64:21:be:52:c9:89:0f:2c:17:6d:25:ab:1c:25: 74:d2:9b:02:e0:59:f6:8c:6c:54:c9:40:52:28:bd: ae:4c:8b:b3:5c:b3:67:03:ff:61:fa:e0:70:b5:0d: 36:fc:b8:48:00:df:f7:5d:08:0b:3e:95:db:b8:a3: ef:f7:10:72:b3:8b:b0:b2:00:41:62:ba:31:f5:a9: d1:4a:f2:7a:08:51:8f:8f:36:f1:35:94:03:7b:4b: 68:34:d4:13:8d:9f:d1:06:93:ef:f8:16:89:50:4b: 63:06:11:35:69:cc:1d:55:1e:25:f9:e4:7a:93:47: 02:13:ae:4d:aa:b5:36:6e:d0:14:c5:e9:dc:f2:f5: 3e:e6:c8:f3:5b:f0:74:5a:d2:1f:2a:6e:fa:05:68: c8:8d:1c:0e:54:13:60:d8:93:f6:2a:f2:5e:b1:88: 73:92:99:5e:b5:63:ec:99:e6:bb:17:a9:19:31:a9: a5:27:a3:18:1a:ad:b3:28:f4:89:66:0b:8c:e3:1b: ce:9f:ec:f6:de:49:f0:6c:d8:b1:51:09:30:b8:2e: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:69:F7:3B:25:C0:10:ED:F2:F5:7C:54:83:7B:B6:D7:5A:DD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/578612df-947a-3f7f-8bda-502c4f57e7f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:9c:f7:b4:ba:47:07:c7:66:d9:60:c5:bc:2b:04:d1:57:8f: ea:6a:b6:d5:d5:ea:38:a2:bc:13:fb:b2:08:4f:f8:49:e9:cd: e2:88:cf:04:99:33:28:6d:30:87:1a:00:d3:f2:85:37:04:e1: cb:97:6a:1b:9c:25:d6:2d:23:11:b9:f4:61:ad:ac:84:aa:24: aa:24:36:1f:95:8b:b4:6a:5d:1e:33:9a:b3:1c:40:fa:ef:72: 7e:66:70:6b:06:c4:14:95:69:c8:d8:f8:34:d6:65:25:64:59: 6f:39:48:4a:0d:1e:7c:39:5e:3d:1c:cd:df:b8:ac:4e:ba:ac: c2:06:96:c3:57:46:53:27:d4:e2:73:28:a2:65:20:b4:97:b9: d9:15:1e:3a:de:b8:ff:e1:64:cd:1d:4f:66:b4:46:86:d0:00: f4:d8:2b:2b:43:c1:22:f6:a1:ea:43:1c:f0:28:c4:d1:6e:d5: 85:9e:ed:6a:da:c3:19:55:ab:3f:aa:01:dc:e1:91:e1:51:74: 5e:73:e2:c0:a8:c0:c1:ef:ee:62:1c:c4:0c:df:e4:09:e6:61: 13:17:ae:77:40:6f:62:01:19:ef:05:89:00:41:1a:ef:7b:9b: 7e:7d:56:f2:e6:8a:b0:4a:23:08:cc:75:9f:ed:02:39:6c:25: 33:8f:75:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d8KJpzRQyNC1oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIxMVoXDTI1MDkxNzE0NDIxMVowLzEtMCsGA1UEAxMk OGJkYjYwNDYtNmM0YS00MmNhLWFjZTItNzQyZDZjZmI3YjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbdGJvOfvDQSS/fU/9Gt3/HjjjOccyuzvMzh pOkjOv0MQy9mHrsxUyr6pPzfZCG+UsmJDywXbSWrHCV00psC4Fn2jGxUyUBSKL2u TIuzXLNnA/9h+uBwtQ02/LhIAN/3XQgLPpXbuKPv9xBys4uwsgBBYrox9anRSvJ6 CFGPjzbxNZQDe0toNNQTjZ/RBpPv+BaJUEtjBhE1acwdVR4l+eR6k0cCE65NqrU2 btAUxenc8vU+5sjzW/B0WtIfKm76BWjIjRwOVBNg2JP2KvJesYhzkpletWPsmea7 F6kZMamlJ6MYGq2zKPSJZguM4xvOn+z23knwbNixUQkwuC51+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFmafc7JcAQ7fL1fFSDe7bXWt2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTc4NjEyZGYtOTQ3YS0z ZjdmLThiZGEtNTAyYzRmNTdlN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmc97S6RwfHZtlgxbwrBNFXj+pqttXV6jiivBP7sghP+EnpzeKIzwSZ MyhtMIcaANPyhTcE4cuXahucJdYtIxG59GGtrISqJKokNh+Vi7RqXR4zmrMcQPrv cn5mcGsGxBSVacjY+DTWZSVkWW85SEoNHnw5Xj0czd+4rE66rMIGlsNXRlMn1OJz KKJlILSXudkVHjreuP/hZM0dT2a0RobQAPTYKytDwSL2oepDHPAoxNFu1YWe7Wra wxlVqz+qAdzhkeFRdF5z4sCowMHv7mIcxAzf5AnmYRMXrndAb2IBGe8FiQBBGu97 m359VvLmirBKIwjMdZ/tAjlsJTOPdWo= -----END CERTIFICATE-----Generated at Tue Jul 1 20:22:01 2025 by rpki-client