$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f9cf07f-4a45-3f37-b3c3-b819e83c9e8d.roa File: 6f9cf07f-4a45-3f37-b3c3-b819e83c9e8d.roa (raw, json) Hash identifier: rdkRNSEfz3ZsLBgPkx+xw1NdS+oPFabg8m5iTmVsHvY= Subject key identifier: 40:2D:86:55:78:D3:2E:12:95:75:4E:F3:B3:48:C2:CB:6E:65:86:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76E88C25AC934A72F5CC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f9cf07f-4a45-3f37-b3c3-b819e83c9e8d.roa Signing time: Thu 19 Jun 2025 14:40:28 +0000 ROA not before: Thu 19 Jun 2025 14:40:28 +0000 ROA not after: Wed 17 Sep 2025 14:40:28 +0000 asID: 22773 IP address blocks: 72.212.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:e8:8c:25:ac:93:4a:72:f5:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:28 2025 GMT Not After : Sep 17 14:40:28 2025 GMT Subject: CN=99bced17-222f-49e9-920b-0ffcf37f2b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:be:6b:7b:b4:9d:04:d6:e5:ec:de:a5:31: b0:9c:31:a9:5e:1a:74:7a:3d:e9:ca:91:4b:d4:1b: 70:c4:2d:ce:cb:65:ff:60:a5:c2:f8:41:0f:44:d1: 91:08:82:db:3e:e2:01:ec:c3:60:48:bb:e5:27:93: 28:34:a6:b4:7a:26:af:c8:f7:7b:42:98:24:dc:ce: c7:8f:91:f6:d3:30:72:a3:06:c4:59:07:7e:d0:20: 2b:17:25:6c:20:89:8a:76:95:36:c5:75:af:00:97: d5:21:b3:3c:bd:a6:19:e9:8e:62:b3:0e:0f:5c:c4: a6:c7:20:8c:d8:67:d3:ac:28:3b:81:56:32:d1:8d: 59:ce:c9:02:de:f7:c7:b2:b4:2c:55:ca:d0:be:42: d8:ca:62:4e:fa:06:99:83:a1:80:45:18:3f:87:73: 5b:73:1f:a9:14:b6:cb:cd:64:47:61:34:59:c3:01: 7d:d1:fd:2f:c5:02:fe:42:06:f3:dc:e9:bb:72:ba: c4:a7:c5:ac:5c:69:f3:ee:87:38:e6:8c:4b:ab:63: 7e:76:63:a0:36:9a:b9:20:06:28:e9:2b:08:95:a8: 30:27:9f:bc:9b:4b:31:87:c9:1b:63:ae:9d:6f:88: cb:61:02:7d:d4:ed:f6:18:c7:90:aa:d2:6c:16:ae: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2D:86:55:78:D3:2E:12:95:75:4E:F3:B3:48:C2:CB:6E:65:86:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f9cf07f-4a45-3f37-b3c3-b819e83c9e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6a:2e:0b:b8:7d:5d:e8:ca:d3:1c:0d:20:1c:87:39:f6:52: d8:44:44:e0:66:50:cf:33:c3:18:b9:f1:74:5a:8b:df:42:dd: 72:cd:55:1d:a3:37:ad:ac:c8:19:f1:07:04:d1:64:67:06:9e: e4:d5:c3:04:5c:7b:4d:04:aa:7b:f7:2c:ba:e0:02:23:d4:16: 92:a5:e8:d0:be:87:e8:91:1d:57:8f:b1:b2:f0:2a:0b:58:b3: f9:1b:05:f4:c1:92:02:f4:9f:41:b2:03:53:fd:5b:a5:ea:20: 52:4c:b7:96:fe:75:ea:b1:b7:34:7f:58:a8:23:e7:f2:79:56: 7b:de:c6:e7:2b:7b:36:e4:36:07:00:62:29:17:2c:55:a1:61: 0b:01:13:12:15:75:97:df:d8:e9:15:33:15:7a:08:65:8a:03: 3a:ff:95:6c:3b:74:5d:47:ad:cb:06:b7:74:b7:31:de:6d:22: f9:c5:ba:52:7f:5c:7f:d2:49:ee:92:3c:a9:ef:8b:9a:89:47: 0b:a6:e3:da:b4:d5:06:b0:aa:a7:83:2b:d7:a7:76:07:f3:34: 65:91:f0:13:8a:90:33:37:f6:31:3e:4a:44:53:c6:74:31:40: 0b:4d:f9:dd:13:d8:89:07:4f:d8:64:92:fb:84:97:65:4a:96: 29:29:b7:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+duiMJayTSnL1zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAyOFoXDTI1MDkxNzE0NDAyOFowLzEtMCsGA1UEAxMk OTliY2VkMTctMjIyZi00OWU5LTkyMGItMGZmY2YzN2YyYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzW+a3u0nQTW5ezepTGwnDGpXhp0ej3pypFL 1BtwxC3Oy2X/YKXC+EEPRNGRCILbPuIB7MNgSLvlJ5MoNKa0eiavyPd7Qpgk3M7H j5H20zByowbEWQd+0CArFyVsIImKdpU2xXWvAJfVIbM8vaYZ6Y5isw4PXMSmxyCM 2GfTrCg7gVYy0Y1ZzskC3vfHsrQsVcrQvkLYymJO+gaZg6GARRg/h3Nbcx+pFLbL zWRHYTRZwwF90f0vxQL+Qgbz3Om7crrEp8WsXGnz7oc45oxLq2N+dmOgNpq5IAYo 6SsIlagwJ5+8m0sxh8kbY66db4jLYQJ91O32GMeQqtJsFq6JrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAthlV40y4SlXVO87NIwstuZYZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmY5Y2YwN2YtNGE0NS0z ZjM3LWIzYzMtYjgxOWU4M2M5ZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlqLgu4fV3oytMcDSAchzn2UthEROBmUM8zwxi58XRai99C3XLNVR2j N62syBnxBwTRZGcGnuTVwwRce00Eqnv3LLrgAiPUFpKl6NC+h+iRHVePsbLwKgtY s/kbBfTBkgL0n0GyA1P9W6XqIFJMt5b+deqxtzR/WKgj5/J5VnvexucrezbkNgcA YikXLFWhYQsBExIVdZff2OkVMxV6CGWKAzr/lWw7dF1HrcsGt3S3Md5tIvnFulJ/ XH/SSe6SPKnvi5qJRwum49q01QawqqeDK9endgfzNGWR8BOKkDM39jE+SkRTxnQx QAtN+d0T2IkHT9hkkvuEl2VKlikpt+E= -----END CERTIFICATE-----Generated at Tue Jul 1 02:35:43 2025 by rpki-client