$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890d9e8a-6670-3e1b-8280-652be119e5e5.roa File: 890d9e8a-6670-3e1b-8280-652be119e5e5.roa (raw, json) Hash identifier: qxI1Xw1WOwnq8rYMGo6SlSDvDEZe2r6YT8YHgbDAWzw= Subject key identifier: 38:BF:F8:05:C7:26:6E:BE:28:5B:30:93:CC:7E:7E:3F:6A:D4:80:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7577912B74443AD423D140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890d9e8a-6670-3e1b-8280-652be119e5e5.roa Signing time: Thu 19 Jun 2025 14:37:34 +0000 ROA not before: Thu 19 Jun 2025 14:37:34 +0000 ROA not after: Wed 17 Sep 2025 14:37:34 +0000 asID: 22773 IP address blocks: 72.201.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:77:91:2b:74:44:3a:d4:23:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:34 2025 GMT Not After : Sep 17 14:37:34 2025 GMT Subject: CN=00aefbc5-d467-4c25-b531-54f9a349f00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:18:53:2f:01:8a:a3:fe:ec:f5:54:b1:24:b7: 5b:e4:2f:0b:3a:18:fe:d7:d9:7b:23:8e:42:05:e3: aa:90:5c:c5:e2:4d:1c:7b:70:1e:d5:8f:07:72:49: 8d:e6:8d:bb:0e:c0:9b:17:46:7e:19:18:88:0e:e2: b9:71:f1:5c:bc:a8:82:7c:a3:15:12:d6:8c:89:01: ec:66:64:69:4b:fd:9a:e8:6c:ce:31:9f:f7:13:37: 02:26:50:b7:c3:89:18:80:c5:df:29:82:c8:28:fd: fb:d5:8f:7b:91:fc:fe:ef:a8:ee:63:43:74:dd:7c: 5b:cd:ff:8a:8d:d4:74:1d:73:b1:83:77:7e:e7:26: 63:27:da:16:a8:aa:5b:0c:0b:3e:74:66:18:a1:e1: 63:95:a2:13:0b:db:9e:4f:58:5c:52:c0:b4:ea:3b: cd:b2:3a:c0:7f:5c:96:33:75:67:72:dd:09:5a:17: 4d:0e:5f:1f:8e:f7:f8:da:6b:86:ed:3e:5e:03:28: 91:ed:f4:63:82:7e:0f:69:de:62:76:58:c1:ce:14: 8b:a1:d5:40:02:6d:1f:43:33:98:66:58:90:3a:e4: cc:cd:02:1d:13:63:3c:05:8f:d0:83:66:6b:ac:e0: fa:bb:c5:1a:24:cc:77:ec:bd:53:62:e7:0a:2c:d5: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BF:F8:05:C7:26:6E:BE:28:5B:30:93:CC:7E:7E:3F:6A:D4:80:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890d9e8a-6670-3e1b-8280-652be119e5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:3d:da:41:9d:ed:8b:b6:67:d7:91:86:70:36:55:cb:74:12: ab:2d:c3:ce:b5:3b:ad:5f:e6:b8:cd:38:01:72:45:75:51:8a: 59:19:45:9a:4c:ec:29:af:fa:61:31:65:ca:41:6a:fb:83:65: 0a:39:81:14:d5:e8:4f:a8:76:4d:87:9d:da:71:d6:54:58:74: 6f:fc:9f:54:a2:4b:1b:44:04:33:94:3d:5e:48:ba:9b:a5:3b: f4:37:26:2b:e9:23:fd:0c:d5:07:53:fc:ac:16:3c:9e:91:4b: 21:7f:a4:af:3c:e1:48:b2:f9:11:69:b4:44:5c:f8:4b:ae:07: 72:c6:d8:1f:aa:39:45:34:18:b7:72:42:f8:1b:d3:ff:7a:79: 92:85:59:16:d9:5c:a5:6d:a7:4a:9c:0c:18:e8:a1:ef:0c:e6: 7e:12:98:b6:53:48:2e:2d:ae:a0:7a:e9:fa:28:00:df:c4:d8: 13:be:6f:e3:4d:d0:fe:0d:d8:12:49:43:b4:fb:8e:70:4e:0a: ca:be:1c:6f:e3:fb:8d:f5:bc:6c:e2:d6:5c:11:04:f8:34:5c: f7:74:e0:99:22:6d:ea:ac:5d:b4:2a:00:22:9b:30:41:72:2f: 2c:df:0a:b9:79:5d:da:16:b9:71:61:33:4b:47:3f:7e:1a:6e: 9f:0b:6a:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dXeRK3REOtQj0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzczNFoXDTI1MDkxNzE0MzczNFowLzEtMCsGA1UEAxMk MDBhZWZiYzUtZDQ2Ny00YzI1LWI1MzEtNTRmOWEzNDlmMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxhTLwGKo/7s9VSxJLdb5C8LOhj+19l7I45C BeOqkFzF4k0ce3Ae1Y8HckmN5o27DsCbF0Z+GRiIDuK5cfFcvKiCfKMVEtaMiQHs ZmRpS/2a6GzOMZ/3EzcCJlC3w4kYgMXfKYLIKP371Y97kfz+76juY0N03Xxbzf+K jdR0HXOxg3d+5yZjJ9oWqKpbDAs+dGYYoeFjlaITC9ueT1hcUsC06jvNsjrAf1yW M3Vnct0JWhdNDl8fjvf42muG7T5eAyiR7fRjgn4Pad5idljBzhSLodVAAm0fQzOY ZliQOuTMzQIdE2M8BY/Qg2ZrrOD6u8UaJMx37L1TYucKLNXFnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi/+AXHJm6+KFswk8x+fj9q1IAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODkwZDllOGEtNjY3MC0z ZTFiLTgyODAtNjUyYmUxMTllNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk92kGd7Yu2Z9eRhnA2Vct0Eqstw861O61f5rjNOAFyRXVRilkZRZpM 7Cmv+mExZcpBavuDZQo5gRTV6E+odk2Hndpx1lRYdG/8n1SiSxtEBDOUPV5Iupul O/Q3JivpI/0M1QdT/KwWPJ6RSyF/pK884Uiy+RFptERc+EuuB3LG2B+qOUU0GLdy Qvgb0/96eZKFWRbZXKVtp0qcDBjooe8M5n4SmLZTSC4trqB66fooAN/E2BO+b+NN 0P4N2BJJQ7T7jnBOCsq+HG/j+431vGzi1lwRBPg0XPd04JkibeqsXbQqACKbMEFy LyzfCrl5XdoWuXFhM0tHP34abp8LaoY= -----END CERTIFICATE-----Generated at Tue Jul 1 13:47:16 2025 by rpki-client