$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b3ad8af-25ff-3b68-a541-8347a2cd5e5c.roa File: 5b3ad8af-25ff-3b68-a541-8347a2cd5e5c.roa (raw, json) Hash identifier: Fs8Xk6ihbSp8tw73qNhK9AXdSVV2/5HF0w56V/bj1jc= Subject key identifier: C1:71:61:0C:41:08:5C:09:F3:AC:87:9F:35:88:5D:C3:A6:65:BE:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9373B767E393856714DB0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b3ad8af-25ff-3b68-a541-8347a2cd5e5c.roa Signing time: Fri 20 Jun 2025 09:33:27 +0000 ROA not before: Fri 20 Jun 2025 09:33:27 +0000 ROA not after: Thu 18 Sep 2025 09:33:27 +0000 asID: 22773 IP address blocks: 72.193.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:37:3b:76:7e:39:38:56:71:4d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:27 2025 GMT Not After : Sep 18 09:33:27 2025 GMT Subject: CN=196638af-998b-43fd-a580-e60b4609dc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:de:df:22:72:2d:18:e6:ee:36:67:af:b7: 52:b4:f6:c0:a0:59:cd:db:1a:2f:fb:e4:1c:b3:e1: c7:be:2f:61:2d:63:b0:41:35:29:9a:1e:2f:31:be: 00:76:c0:f3:c5:b2:b4:5d:0b:e8:e3:0a:68:cd:88: 93:39:1a:9d:1e:4e:96:e4:8d:8c:d7:e2:1c:09:7b: 70:d3:37:20:77:34:bf:4e:eb:c0:0f:53:d8:c1:6f: 50:4f:02:3c:19:1d:fe:6e:5c:97:3c:75:0e:43:59: af:5d:7d:d6:fb:70:72:83:e4:2a:cc:e0:84:5e:6c: 64:7b:8e:5e:8f:29:05:d3:d0:86:d3:c2:0b:44:c2: 96:51:5d:39:a2:09:d1:63:9e:93:5f:ef:16:81:a1: 14:d0:1c:45:b2:8a:12:5b:34:bd:21:05:58:1f:cc: ed:ba:f0:43:3a:2e:a7:80:05:cc:88:74:d8:cf:00: 3c:5b:7c:da:e0:f9:ee:1a:8b:55:24:6a:e0:95:fe: 00:70:68:bb:90:95:60:7d:4a:23:ff:d9:b0:03:9e: 63:09:cf:80:af:5d:89:2c:04:34:9d:2e:5c:a1:06: b9:0a:26:d9:60:33:e6:ad:50:98:f9:3a:8d:2b:73: 36:13:42:01:85:50:ab:54:7d:86:66:6b:21:fc:cf: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:71:61:0C:41:08:5C:09:F3:AC:87:9F:35:88:5D:C3:A6:65:BE:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b3ad8af-25ff-3b68-a541-8347a2cd5e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:07:27:38:81:08:8a:b8:e1:87:44:4a:66:3d:a7:05:e2:0f: 61:9a:07:e7:9d:74:67:1d:4f:41:e9:13:ae:2e:f1:a3:1a:6f: 34:b0:16:53:e3:de:d0:b6:16:e2:f0:61:0c:82:af:15:56:ad: f1:72:f4:de:9e:c9:b5:0f:51:de:e8:dc:53:50:bb:b5:f8:fd: 89:07:07:d2:3e:8a:5b:80:ed:86:27:07:52:63:86:14:60:ed: f9:50:0a:77:40:79:3f:31:06:81:15:d7:21:b9:6f:63:59:08: 1d:20:b5:93:8c:06:93:58:5c:ee:0b:cb:b7:c0:fa:33:a4:f4: 1b:4d:f1:9e:7c:7e:9d:e1:7d:a0:a7:be:08:bd:9a:17:c9:77: f6:06:c0:91:7e:3b:a9:38:ab:a1:9f:de:0a:99:8e:cf:28:8f: 34:d1:6a:62:0b:12:34:de:15:27:4e:1a:69:6a:ab:05:bf:59: 8c:a4:05:6f:ac:8e:cf:8f:19:d0:dd:33:29:5b:a5:29:99:9c: eb:a2:04:fe:4d:b1:a6:06:39:77:0d:5f:22:37:9a:b8:26:5a: a0:bd:87:5c:ef:30:60:3a:84:69:86:96:9f:80:ee:8a:7a:cf: ac:aa:ef:5c:e1:48:7c:7c:18:dc:9f:ea:fd:2a:5a:97:d6:46: aa:df:f7:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqTc7dn45OFZxTbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzMyN1oXDTI1MDkxODA5MzMyN1owLzEtMCsGA1UEAxMk MTk2NjM4YWYtOTk4Yi00M2ZkLWE1ODAtZTYwYjQ2MDlkYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheje3yJyLRjm7jZnr7dStPbAoFnN2xov++Qc s+HHvi9hLWOwQTUpmh4vMb4AdsDzxbK0XQvo4wpozYiTORqdHk6W5I2M1+IcCXtw 0zcgdzS/TuvAD1PYwW9QTwI8GR3+blyXPHUOQ1mvXX3W+3Byg+QqzOCEXmxke45e jykF09CG08ILRMKWUV05ognRY56TX+8WgaEU0BxFsooSWzS9IQVYH8ztuvBDOi6n gAXMiHTYzwA8W3za4PnuGotVJGrglf4AcGi7kJVgfUoj/9mwA55jCc+Ar12JLAQ0 nS5coQa5CibZYDPmrVCY+TqNK3M2E0IBhVCrVH2GZmsh/M9phQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFxYQxBCFwJ86yHnzWIXcOmZb72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWIzYWQ4YWYtMjVmZi0z YjY4LWE1NDEtODM0N2EyY2Q1ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSME4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUHJziBCIq44YdESmY9pwXiD2GaB+eddGcdT0HpE64u8aMabzSwFlPj 3tC2FuLwYQyCrxVWrfFy9N6eybUPUd7o3FNQu7X4/YkHB9I+iluA7YYnB1JjhhRg 7flQCndAeT8xBoEV1yG5b2NZCB0gtZOMBpNYXO4Ly7fA+jOk9BtN8Z58fp3hfaCn vgi9mhfJd/YGwJF+O6k4q6Gf3gqZjs8ojzTRamILEjTeFSdOGmlqqwW/WYykBW+s js+PGdDdMylbpSmZnOuiBP5NsaYGOXcNXyI3mrgmWqC9h1zvMGA6hGmGlp+A7op6 z6yq71zhSHx8GNyf6v0qWpfWRqrf9w4= -----END CERTIFICATE-----Generated at Tue Jul 1 11:05:59 2025 by rpki-client