$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/795311e9-2d42-3f15-8b4a-7b67922a9337.roa File: 795311e9-2d42-3f15-8b4a-7b67922a9337.roa (raw, json) Hash identifier: 7sLWTV/MV4uz4hMpXIUhdU+aC4FdJju7Xo2nZEJ9EqI= Subject key identifier: 8E:77:45:FC:6A:C1:E9:98:C0:C7:54:94:67:CC:EE:B7:8B:2A:84:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7643F4362EFC0A003A47F8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/795311e9-2d42-3f15-8b4a-7b67922a9337.roa Signing time: Thu 19 Jun 2025 14:39:10 +0000 ROA not before: Thu 19 Jun 2025 14:39:10 +0000 ROA not after: Wed 17 Sep 2025 14:39:10 +0000 asID: 22773 IP address blocks: 72.208.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:43:f4:36:2e:fc:0a:00:3a:47:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:10 2025 GMT Not After : Sep 17 14:39:10 2025 GMT Subject: CN=a2354a61-86e2-48ee-aefc-8acd033a08b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:47:8d:1d:64:dd:4e:f7:83:42:71:59:ac:40: 0c:61:14:47:22:02:1c:57:bc:4f:fb:57:a7:74:1d: f9:67:fa:eb:bf:6a:a4:24:3b:cf:5c:dc:0c:6a:68: fe:c0:cd:05:c4:47:86:f0:4e:2f:8f:71:c7:a3:80: 74:69:57:b2:14:c4:c1:63:7c:71:8b:c2:1e:ae:7f: 1d:14:4e:da:3d:87:46:f0:45:48:18:5f:fb:be:25: e2:11:41:f7:ac:e8:01:7c:29:ac:d4:9a:ae:cd:d4: af:37:4c:9f:1e:a6:22:46:fb:b5:44:65:39:59:ac: 9a:10:c8:37:65:98:25:03:a7:15:d1:d3:db:94:6a: b3:ac:61:83:94:6c:38:b2:6c:e2:a3:83:c7:9b:0f: 3b:63:34:3c:93:df:52:3b:f7:b0:01:7c:a6:a4:13: 90:1a:9a:90:c3:95:bb:69:50:52:85:9d:36:35:db: 03:45:24:ef:f8:ad:b8:81:4f:51:0f:1a:bd:a4:e5: 55:dd:34:69:40:eb:1b:0b:9a:b2:aa:cf:99:c4:a5: 74:6f:00:85:f0:39:1c:83:28:f2:68:3b:96:e6:9a: 6c:85:f4:f2:d5:f2:17:8c:2e:9b:ed:b5:7c:fd:e4: 43:a4:cd:ee:1a:b0:54:83:af:53:55:5b:48:68:4b: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:77:45:FC:6A:C1:E9:98:C0:C7:54:94:67:CC:EE:B7:8B:2A:84:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/795311e9-2d42-3f15-8b4a-7b67922a9337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b0:e6:d0:18:bb:65:43:0f:15:1b:18:a6:97:27:f7:fe:cd: 39:4e:f8:9c:dd:7e:be:1f:07:9f:d0:c5:e3:b3:85:04:48:d4: 15:a8:52:40:c6:9e:23:6f:97:28:bb:98:b6:a3:c4:a6:4a:a7: 42:e6:75:e7:7e:9c:4c:2b:e4:d8:fc:70:d6:69:63:53:20:25: 9c:24:52:51:95:5c:e4:eb:bf:00:38:f0:20:43:5c:06:79:1f: 9b:a7:b4:1e:d3:84:07:58:c5:b0:21:87:59:99:f5:83:40:0e: b1:ce:fa:ee:fd:f8:4d:5d:fd:a7:c3:ab:29:a8:d2:80:cc:14: 12:87:aa:5a:09:6f:11:f6:11:c7:e2:4f:2d:75:40:e0:ac:48: 61:a2:fc:58:5f:81:28:1c:5a:e2:9d:f8:c8:7d:a8:ab:e4:1f: 03:5c:6a:d3:79:f9:19:48:c1:61:5f:a6:2d:9d:00:a4:00:76: 01:59:8e:29:81:72:39:4a:a4:33:72:86:60:14:1f:09:eb:1e: 1e:9a:d4:43:7e:0e:65:a8:bc:73:8b:7e:c7:98:0b:7e:66:1c: f4:c3:bf:c7:22:30:fe:ad:1d:35:20:6b:0b:30:46:28:0b:76: 46:ae:7b:64:05:8d:e1:e7:18:f6:28:42:3d:c9:93:4e:c7:78: d0:86:2e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dkP0Ni78CgA6R/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkxMFoXDTI1MDkxNzE0MzkxMFowLzEtMCsGA1UEAxMk YTIzNTRhNjEtODZlMi00OGVlLWFlZmMtOGFjZDAzM2EwOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEeNHWTdTveDQnFZrEAMYRRHIgIcV7xP+1en dB35Z/rrv2qkJDvPXNwMamj+wM0FxEeG8E4vj3HHo4B0aVeyFMTBY3xxi8Iern8d FE7aPYdG8EVIGF/7viXiEUH3rOgBfCms1JquzdSvN0yfHqYiRvu1RGU5WayaEMg3 ZZglA6cV0dPblGqzrGGDlGw4smzio4PHmw87YzQ8k99SO/ewAXympBOQGpqQw5W7 aVBShZ02NdsDRSTv+K24gU9RDxq9pOVV3TRpQOsbC5qyqs+ZxKV0bwCF8Dkcgyjy aDuW5ppshfTy1fIXjC6b7bV8/eRDpM3uGrBUg69TVVtIaEvOjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI53RfxqwemYwMdUlGfM7reLKoRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzk1MzExZTktMmQ0Mi0z ZjE1LThiNGEtN2I2NzkyMmE5MzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmw5tAYu2VDDxUbGKaXJ/f+zTlO+Jzdfr4fB5/QxeOzhQRI1BWoUkDG niNvlyi7mLajxKZKp0Lmded+nEwr5Nj8cNZpY1MgJZwkUlGVXOTrvwA48CBDXAZ5 H5untB7ThAdYxbAhh1mZ9YNADrHO+u79+E1d/afDqymo0oDMFBKHqloJbxH2Ecfi Ty11QOCsSGGi/FhfgSgcWuKd+Mh9qKvkHwNcatN5+RlIwWFfpi2dAKQAdgFZjimB cjlKpDNyhmAUHwnrHh6a1EN+DmWovHOLfseYC35mHPTDv8ciMP6tHTUgawswRigL dkaue2QFjeHnGPYoQj3Jk07HeNCGLoY= -----END CERTIFICATE-----Generated at Tue Jul 1 20:50:00 2025 by rpki-client