$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/63aa8ada-f45f-3a59-b583-357a0f8a4daa.roa File: 63aa8ada-f45f-3a59-b583-357a0f8a4daa.roa (raw, json) Hash identifier: cBm9NeWnIzrc/fF4aseEwQXodsM3WSPIHULG6+b24mM= Subject key identifier: 62:EC:DA:CC:0F:BB:B6:3F:B5:5C:7C:0C:35:B7:A5:EB:3B:A4:31:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E774DFABE27DB391F877880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/63aa8ada-f45f-3a59-b583-357a0f8a4daa.roa Signing time: Thu 19 Jun 2025 14:41:16 +0000 ROA not before: Thu 19 Jun 2025 14:41:16 +0000 ROA not after: Wed 17 Sep 2025 14:41:16 +0000 asID: 22773 IP address blocks: 72.217.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:4d:fa:be:27:db:39:1f:87:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:16 2025 GMT Not After : Sep 17 14:41:16 2025 GMT Subject: CN=7cc0c0eb-45c1-4eab-bb2c-b5a2c8baccb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:2b:28:f4:12:aa:4a:ca:5a:70:ae:4e:d4: 1b:c6:9d:c6:26:97:77:33:55:26:b0:1d:59:1e:68: 4e:4b:c3:6b:65:21:04:a5:62:d3:61:98:d9:79:8b: cb:1c:0f:15:03:96:27:f2:39:68:1e:cc:19:e4:9b: 96:5d:73:9b:73:0a:47:a5:56:c8:fa:28:78:0f:d9: 2b:18:8a:8b:df:5d:b8:c6:aa:04:8c:ff:ea:b8:22: b9:94:44:48:79:9c:85:3d:e3:92:7d:27:2f:d5:f7: 10:5a:fa:73:79:1e:b4:04:f8:db:b0:2c:28:17:e4: 36:61:46:9f:38:e9:4d:2c:9d:7e:2f:08:85:66:55: 75:5a:30:c6:01:a2:34:43:42:e4:b8:78:64:67:6d: 1b:c0:49:74:9b:f0:d5:fc:33:fe:6c:dd:6b:d6:36: b5:ed:d9:5c:d6:a5:7a:2e:73:e0:87:34:88:e1:a0: 21:4f:33:29:01:17:9f:40:e8:a3:f0:5a:f7:0f:96: 68:d0:7f:6a:8b:ef:6c:ce:01:c0:d5:ed:66:da:c6: 32:fd:d4:c2:03:7f:09:fd:2f:83:4b:3b:40:8c:66: 68:ce:7a:50:18:20:87:c1:46:40:3b:8a:7b:67:0b: b4:e6:66:fd:15:da:f1:d7:9e:11:53:a1:e7:4f:88: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EC:DA:CC:0F:BB:B6:3F:B5:5C:7C:0C:35:B7:A5:EB:3B:A4:31:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/63aa8ada-f45f-3a59-b583-357a0f8a4daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e2:18:a3:b5:36:27:86:94:b1:8f:26:25:f2:5a:33:55:4b: e7:06:05:f1:69:d4:3b:6f:9b:ca:93:e1:0d:30:0d:bb:19:18: 41:36:19:d6:e2:aa:4c:1c:c1:93:73:20:a1:f1:a9:6a:1c:a6: 21:57:fb:91:1f:5d:8d:eb:69:04:d6:df:09:75:eb:78:1c:bb: 58:26:28:31:df:94:9f:48:6d:d8:1d:4b:d4:9a:a1:58:d7:30: a7:f8:19:f3:e6:3d:41:68:f2:bf:b9:22:d4:ad:aa:40:b4:34: 8f:81:40:09:83:42:5f:c2:bf:26:ad:23:ce:f6:0f:3f:85:16: 7c:11:1c:2b:af:26:ca:0d:7f:89:cb:2b:49:d3:47:ba:9a:c1: ea:b9:95:fd:e0:8c:0b:78:28:6d:d2:70:fc:93:6a:94:36:ae: 38:0b:1a:48:25:ee:49:99:4d:21:ad:97:24:a5:bd:df:ff:19: 3d:d2:f2:b7:a3:0b:c3:e7:f9:71:6e:91:72:17:de:12:da:8d: 03:ec:cf:e8:ea:a8:d4:f5:39:d0:13:7b:e6:63:ef:53:45:b7: 16:19:d3:00:88:9a:32:72:ac:fb:17:28:3a:04:35:61:e3:9f: ca:3a:8f:81:97:6f:e2:65:3f:bf:1b:07:6c:e9:0d:55:42:c6: 98:86:fd:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d036vifbOR+HeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDExNloXDTI1MDkxNzE0NDExNlowLzEtMCsGA1UEAxMk N2NjMGMwZWItNDVjMS00ZWFiLWJiMmMtYjVhMmM4YmFjY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzwrKPQSqkrKWnCuTtQbxp3GJpd3M1UmsB1Z HmhOS8NrZSEEpWLTYZjZeYvLHA8VA5Yn8jloHswZ5JuWXXObcwpHpVbI+ih4D9kr GIqL3124xqoEjP/quCK5lERIeZyFPeOSfScv1fcQWvpzeR60BPjbsCwoF+Q2YUaf OOlNLJ1+LwiFZlV1WjDGAaI0Q0LkuHhkZ20bwEl0m/DV/DP+bN1r1ja17dlc1qV6 LnPghzSI4aAhTzMpARefQOij8Fr3D5Zo0H9qi+9szgHA1e1m2sYy/dTCA38J/S+D SztAjGZoznpQGCCHwUZAO4p7Zwu05mb9Fdrx154RU6HnT4iusQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLs2swPu7Y/tVx8DDW3pes7pDERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjNhYThhZGEtZjQ1Zi0z YTU5LWI1ODMtMzU3YTBmOGE0ZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbiGKO1NieGlLGPJiXyWjNVS+cGBfFp1Dtvm8qT4Q0wDbsZGEE2Gdbi qkwcwZNzIKHxqWocpiFX+5EfXY3raQTW3wl163gcu1gmKDHflJ9IbdgdS9SaoVjX MKf4GfPmPUFo8r+5ItStqkC0NI+BQAmDQl/CvyatI872Dz+FFnwRHCuvJsoNf4nL K0nTR7qaweq5lf3gjAt4KG3ScPyTapQ2rjgLGkgl7kmZTSGtlySlvd//GT3S8rej C8Pn+XFukXIX3hLajQPsz+jqqNT1OdATe+Zj71NFtxYZ0wCImjJyrPsXKDoENWHj n8o6j4GXb+JlP78bB2zpDVVCxpiG/ck= -----END CERTIFICATE-----Generated at Tue Jul 1 22:18:15 2025 by rpki-client