$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85baeef9-9458-3b1b-b443-12f257c44a5a.roa File: 85baeef9-9458-3b1b-b443-12f257c44a5a.roa (raw, json) Hash identifier: DpxHu09s/gtomHLjZDCi90WP2fC5AwDiaqlh1ErtH5c= Subject key identifier: 0B:1E:92:2C:2A:7B:32:6C:AA:0C:78:99:D1:5D:CC:0F:67:18:13:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76CD5026D07671FE00D640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85baeef9-9458-3b1b-b443-12f257c44a5a.roa Signing time: Thu 19 Jun 2025 14:40:15 +0000 ROA not before: Thu 19 Jun 2025 14:40:15 +0000 ROA not after: Wed 17 Sep 2025 14:40:15 +0000 asID: 22773 IP address blocks: 72.211.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:cd:50:26:d0:76:71:fe:00:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:15 2025 GMT Not After : Sep 17 14:40:15 2025 GMT Subject: CN=1f35b4c6-6555-4c25-b737-ae6b5aa777b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:6b:60:d3:e0:09:11:da:24:d0:12:cb:8e: 26:45:84:6c:2e:00:e9:e1:25:fa:f9:7f:39:07:42: 04:91:01:44:e5:dd:86:b3:45:3b:e2:eb:d7:3c:f0: 6f:bf:10:3c:01:f1:0a:26:f9:94:3d:e7:f4:8e:9d: 07:fe:80:9f:56:87:21:44:d3:34:75:09:d9:39:15: 9d:cc:56:9f:fa:7b:eb:ef:eb:2e:2f:db:5d:38:56: 8a:90:80:66:3e:f0:68:7f:1e:20:65:ac:6a:4a:62: 72:58:82:81:8a:63:85:a5:a4:6e:8f:db:92:eb:6d: 6c:78:d9:77:1e:1c:0a:a0:e4:d7:9f:bd:a0:a7:9f: 9e:ce:f4:c6:01:b3:bd:c2:be:13:12:90:38:6d:33: 5c:c5:d3:3a:70:ca:bc:b4:7a:07:fe:0a:47:c1:41: 2c:71:cc:4c:18:e6:d4:e2:08:32:17:06:eb:37:f0: 1b:e5:dc:4d:07:2d:65:df:b9:ea:fd:9f:22:a8:e0: b8:1e:b7:87:bb:a6:10:2f:b9:97:39:29:46:4c:d0: 6c:49:1f:87:e8:9f:72:0c:9b:c4:be:b2:e2:29:d1: 3c:78:a6:73:c0:42:ac:f7:d7:1c:9f:7f:ba:d7:09: e8:41:ac:d5:e2:2f:84:96:94:61:0a:0a:26:5c:b2: 16:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1E:92:2C:2A:7B:32:6C:AA:0C:78:99:D1:5D:CC:0F:67:18:13:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85baeef9-9458-3b1b-b443-12f257c44a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:37:b4:40:27:b8:b9:2d:ef:f2:be:de:00:0c:f2:5b:ec:83: 68:4d:12:fa:22:f6:43:da:dc:dc:22:12:48:ee:d7:6c:c9:c6: ad:6b:8b:29:cf:0c:ff:69:3f:8e:f9:3e:94:4a:d8:49:d5:dc: 5c:f3:40:21:0d:9a:86:84:69:c2:1e:e8:c7:4c:7d:4d:3f:38: be:43:07:a6:50:e9:9b:00:82:98:77:7e:51:b8:36:c3:06:67: 6c:f7:47:6a:53:e1:a4:64:37:ab:cf:84:50:9b:c0:2d:5d:ed: fd:d9:35:29:39:4e:3c:67:61:02:d3:f9:9f:4f:91:dc:10:ad: cb:ca:4f:54:ba:57:4e:c4:0c:05:5f:fb:f9:bf:48:b8:d3:36: 82:c8:27:fb:38:f7:85:70:75:5e:0d:5a:14:08:ea:be:0a:0b: 5a:97:04:06:c3:01:42:bc:b9:fa:cc:51:14:e5:82:62:07:fb: b2:b8:f3:d0:f9:fe:1a:c3:09:c7:1f:20:de:c5:f1:fe:70:6a: d8:9d:30:29:a8:fd:96:4a:75:56:75:2c:8b:b0:6c:24:e3:6f: f7:c8:34:5b:53:5e:3b:6e:67:87:36:a4:57:74:62:fe:c6:a5: 32:93:1d:dc:ec:74:f2:ee:a9:fe:2b:b9:61:1a:a9:57:46:f1: 4c:bf:49:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+ds1QJtB2cf4A1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAxNVoXDTI1MDkxNzE0NDAxNVowLzEtMCsGA1UEAxMk MWYzNWI0YzYtNjU1NS00YzI1LWI3MzctYWU2YjVhYTc3N2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/1rYNPgCRHaJNASy44mRYRsLgDp4SX6+X85 B0IEkQFE5d2Gs0U74uvXPPBvvxA8AfEKJvmUPef0jp0H/oCfVochRNM0dQnZORWd zFaf+nvr7+suL9tdOFaKkIBmPvBofx4gZaxqSmJyWIKBimOFpaRuj9uS621seNl3 HhwKoOTXn72gp5+ezvTGAbO9wr4TEpA4bTNcxdM6cMq8tHoH/gpHwUEsccxMGObU 4ggyFwbrN/Ab5dxNBy1l37nq/Z8iqOC4HreHu6YQL7mXOSlGTNBsSR+H6J9yDJvE vrLiKdE8eKZzwEKs99ccn3+61wnoQazV4i+ElpRhCgomXLIWxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsekiwqezJsqgx4mdFdzA9nGBNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODViYWVlZjktOTQ1OC0z YjFiLWI0NDMtMTJmMjU3YzQ0YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA3tEAnuLkt7/K+3gAM8lvsg2hNEvoi9kPa3NwiEkju12zJxq1riynP DP9pP475PpRK2EnV3FzzQCENmoaEacIe6MdMfU0/OL5DB6ZQ6ZsAgph3flG4NsMG Z2z3R2pT4aRkN6vPhFCbwC1d7f3ZNSk5TjxnYQLT+Z9PkdwQrcvKT1S6V07EDAVf +/m/SLjTNoLIJ/s494VwdV4NWhQI6r4KC1qXBAbDAUK8ufrMURTlgmIH+7K489D5 /hrDCccfIN7F8f5watidMCmo/ZZKdVZ1LIuwbCTjb/fINFtTXjtuZ4c2pFd0Yv7G pTKTHdzsdPLuqf4ruWEaqVdG8Uy/SUA= -----END CERTIFICATE-----Generated at Tue Jul 1 19:10:26 2025 by rpki-client