$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89ae5efe-32d9-32d0-8c0d-11c97aaa1c34.roa File: 89ae5efe-32d9-32d0-8c0d-11c97aaa1c34.roa (raw, json) Hash identifier: FRqTrsdDblG0cq2Itt0i6KcDNFVdiV5pI61b0VgKnj8= Subject key identifier: 49:C7:D5:3C:71:E3:70:A5:AC:B5:78:1B:8C:00:8A:09:F5:62:19:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A973F54D3D64AF0C970180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89ae5efe-32d9-32d0-8c0d-11c97aaa1c34.roa Signing time: Fri 20 Jun 2025 09:33:55 +0000 ROA not before: Fri 20 Jun 2025 09:33:55 +0000 ROA not after: Thu 18 Sep 2025 09:33:55 +0000 asID: 22773 IP address blocks: 72.193.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:73:f5:4d:3d:64:af:0c:97:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:55 2025 GMT Not After : Sep 18 09:33:55 2025 GMT Subject: CN=a971809a-5811-4230-913b-2de8bbfcc0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f7:a7:cb:21:13:31:fc:2c:c7:d6:d1:c5:20: 48:fd:4e:d8:60:70:d3:f4:d2:7d:78:11:b6:7a:4b: 07:59:38:12:da:af:3d:82:2b:41:74:89:e6:47:85: bb:d0:6a:82:08:dc:23:a3:92:b4:2a:62:18:82:a7: 3b:8d:89:32:64:60:44:f0:99:df:60:7b:0c:a6:9b: cf:8e:99:42:8d:2a:dd:ac:bc:68:7e:83:5c:c1:8e: 09:f7:39:a7:35:68:d3:03:39:fa:ca:e1:d0:99:59: 0b:53:58:0e:21:34:83:5d:36:6c:9f:36:14:29:80: 19:13:79:5a:6e:b8:c0:00:f7:3c:92:cd:cd:ed:3b: 94:61:d0:7c:fa:4b:06:d5:13:4d:e8:fe:bf:5a:17: c1:24:0d:2e:87:34:1c:cf:13:a8:e0:4d:42:a1:d2: 78:48:f9:1f:53:b4:eb:8d:f5:6f:9a:3d:13:bc:34: 91:15:c3:3f:06:c9:07:a3:6c:1a:82:ef:2f:55:85: fc:0b:04:e0:f9:14:6b:4c:46:bd:11:77:6a:5d:80: 77:85:8e:df:5f:c0:47:06:b0:ba:0f:ad:cc:dd:b1: ff:16:cc:e6:87:80:55:81:4e:75:3b:14:68:ca:a7: 6b:14:9e:82:d0:96:c8:3c:c1:4a:7a:75:e0:05:bd: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C7:D5:3C:71:E3:70:A5:AC:B5:78:1B:8C:00:8A:09:F5:62:19:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89ae5efe-32d9-32d0-8c0d-11c97aaa1c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:58:a9:02:2b:14:c5:74:09:e6:b3:36:b7:58:16:16:94:6e: 58:cc:6b:93:a9:d5:33:5d:c0:7f:d3:8a:26:78:42:e4:44:5e: 4b:e9:23:33:79:ee:c9:9e:5e:87:a4:d0:65:2e:b3:be:05:66: f8:27:66:1e:02:01:14:a2:d0:b0:35:30:e2:ae:ef:41:0a:33: 03:dc:02:3f:b3:be:e3:c1:ed:53:8a:b4:e5:90:a9:3b:a1:aa: d7:09:54:f0:90:18:46:9e:f9:90:51:a2:93:28:e0:fe:cf:ad: 3d:9b:7d:be:86:57:2a:5b:fd:a4:13:68:97:d7:a1:f8:72:76: 67:4a:73:6d:4a:eb:37:cd:82:2c:eb:ed:12:c1:65:5e:b4:42: 9f:94:76:be:b8:3c:68:de:a9:c0:5e:b6:bf:ff:e6:7e:e0:aa: 28:4d:25:76:f1:23:18:69:fa:12:2e:45:1a:00:6b:ea:a7:d7: 3e:1c:1f:f9:9e:43:4d:40:61:f5:93:12:4a:46:51:9a:3f:25: e8:4a:2b:f6:e7:11:fc:08:09:9a:96:2c:98:9d:20:9d:d4:f9: 3b:c5:2c:01:48:95:01:e3:88:df:46:f2:87:08:47:56:c9:36: f5:29:7c:49:79:69:46:73:a2:06:81:28:7a:48:2e:46:3d:84: 35:12:f3:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqXP1TT1krwyXAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzM1NVoXDTI1MDkxODA5MzM1NVowLzEtMCsGA1UEAxMk YTk3MTgwOWEtNTgxMS00MjMwLTkxM2ItMmRlOGJiZmNjMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/enyyETMfwsx9bRxSBI/U7YYHDT9NJ9eBG2 eksHWTgS2q89gitBdInmR4W70GqCCNwjo5K0KmIYgqc7jYkyZGBE8JnfYHsMppvP jplCjSrdrLxofoNcwY4J9zmnNWjTAzn6yuHQmVkLU1gOITSDXTZsnzYUKYAZE3la brjAAPc8ks3N7TuUYdB8+ksG1RNN6P6/WhfBJA0uhzQczxOo4E1CodJ4SPkfU7Tr jfVvmj0TvDSRFcM/BskHo2wagu8vVYX8CwTg+RRrTEa9EXdqXYB3hY7fX8BHBrC6 D63M3bH/Fszmh4BVgU51OxRoyqdrFJ6C0JbIPMFKenXgBb2/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnH1Txx43ClrLV4G4wAign1YhlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODlhZTVlZmUtMzJkOS0z MmQwLThjMGQtMTFjOTdhYWExYzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMHiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVYqQIrFMV0CeazNrdYFhaUbljMa5Op1TNdwH/TiiZ4QuREXkvpIzN5 7smeXoek0GUus74FZvgnZh4CARSi0LA1MOKu70EKMwPcAj+zvuPB7VOKtOWQqTuh qtcJVPCQGEae+ZBRopMo4P7PrT2bfb6GVypb/aQTaJfXofhydmdKc21K6zfNgizr 7RLBZV60Qp+Udr64PGjeqcBetr//5n7gqihNJXbxIxhp+hIuRRoAa+qn1z4cH/me Q01AYfWTEkpGUZo/JehKK/bnEfwICZqWLJidIJ3U+TvFLAFIlQHjiN9G8ocIR1bJ NvUpfEl5aUZzogaBKHpILkY9hDUS8yA= -----END CERTIFICATE-----Generated at Tue Jul 1 22:34:28 2025 by rpki-client