$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8af3deb0-194f-32f5-9a3d-d0b98cdcf2e3.roa File: 8af3deb0-194f-32f5-9a3d-d0b98cdcf2e3.roa (raw, json) Hash identifier: stgu0RchXhPpr5AgAe8FVhukfULhyPe6Bz3F/Zxga8w= Subject key identifier: C0:3E:AA:FB:A3:B0:AE:9A:D4:AF:0D:AB:BC:9B:7C:6E:14:B2:3B:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77FB21D979CF3DB9E53180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8af3deb0-194f-32f5-9a3d-d0b98cdcf2e3.roa Signing time: Thu 19 Jun 2025 14:42:38 +0000 ROA not before: Thu 19 Jun 2025 14:42:38 +0000 ROA not after: Wed 17 Sep 2025 14:42:38 +0000 asID: 22773 IP address blocks: 72.223.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:fb:21:d9:79:cf:3d:b9:e5:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:38 2025 GMT Not After : Sep 17 14:42:38 2025 GMT Subject: CN=afbd0e74-b8de-4124-89bc-f5282a9bf6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:62:11:66:de:d0:8d:cc:37:d5:5a:21:19: 38:20:87:dd:cc:13:87:11:4b:91:a6:c8:b2:3c:ba: cb:23:d3:bc:a8:df:d3:71:45:2c:21:64:4c:6e:e4: 3a:25:1f:58:b4:1a:b8:66:0c:c4:8b:da:35:5c:9e: ab:15:aa:12:fe:ea:1e:b8:eb:0f:d0:fd:03:f9:12: e7:1b:b2:0f:08:24:81:b1:24:f7:cb:c6:3f:4a:5a: 5d:17:4b:64:5a:4d:f5:0f:c5:6f:a7:04:51:82:c8: 32:e1:f2:b3:57:de:12:63:f6:cb:71:bb:9c:69:4e: a7:cd:99:ce:63:5a:38:fa:0e:1a:ec:ac:8f:27:10: 75:6d:e1:47:f0:08:4d:c5:5d:dc:45:1c:45:a1:70: 5e:8a:2a:c9:02:82:6c:fe:6e:9b:3b:34:5d:1b:c9: b1:7e:a5:db:ad:28:44:95:26:bd:c7:4a:25:2d:a3: d7:26:43:f0:7b:7a:9f:6a:fa:79:b0:6e:1f:db:cf: 84:de:b0:1e:70:78:db:3b:80:c0:74:98:ae:66:48: 24:d5:73:7f:dd:80:23:6d:a2:ac:9e:e6:f9:57:20: 3f:49:0b:4f:e7:60:52:4c:03:2e:70:48:cd:39:5b: a0:2d:45:fc:6f:4c:26:3e:ae:89:9a:1c:52:ed:1e: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3E:AA:FB:A3:B0:AE:9A:D4:AF:0D:AB:BC:9B:7C:6E:14:B2:3B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8af3deb0-194f-32f5-9a3d-d0b98cdcf2e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e3:05:ea:df:76:3b:09:bf:1e:ad:9d:eb:8f:9a:15:0a:fc: 15:e0:94:53:34:d9:aa:3a:90:8a:34:21:fe:a8:e2:1e:9b:78: 55:6c:71:88:9e:75:e8:ab:f6:19:d8:cf:d7:37:98:db:b0:8d: 8d:28:01:b7:a6:7f:45:e5:d3:0d:98:73:f5:96:a3:03:a0:8d: df:19:0a:c0:b3:6d:39:44:34:c6:81:06:aa:dc:6a:3e:f5:ed: a7:0c:31:62:d4:67:41:17:02:db:e5:55:3a:04:c9:36:1b:fb: fa:ff:c1:bc:63:6d:b8:c1:cb:04:75:06:ca:d2:e0:b6:03:6c: 33:0a:eb:47:34:6d:0f:41:35:17:8d:b7:18:a2:23:c2:a6:ba: 5a:36:49:6f:2d:3b:83:b4:0b:f5:27:6a:ff:9d:bf:03:f1:db: 2c:a6:09:96:60:c9:60:ad:9f:12:24:03:e2:55:bb:9d:98:f2: 32:62:cd:b2:a5:69:94:06:3d:05:50:3e:e3:d6:c1:05:c1:55: a1:6a:de:3f:3b:57:dd:90:94:ec:6f:24:39:1f:f3:d9:ba:28: cb:58:62:65:72:98:35:18:a7:4e:49:1d:39:24:f2:96:1e:af: 01:32:43:53:ff:57:e3:5d:8e:c1:fe:14:37:e5:50:9f:3f:1d: 59:76:32:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d/sh2XnPPbnlMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIzOFoXDTI1MDkxNzE0NDIzOFowLzEtMCsGA1UEAxMk YWZiZDBlNzQtYjhkZS00MTI0LTg5YmMtZjUyODJhOWJmNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq9iEWbe0I3MN9VaIRk4IIfdzBOHEUuRpsiy PLrLI9O8qN/TcUUsIWRMbuQ6JR9YtBq4ZgzEi9o1XJ6rFaoS/uoeuOsP0P0D+RLn G7IPCCSBsST3y8Y/SlpdF0tkWk31D8VvpwRRgsgy4fKzV94SY/bLcbucaU6nzZnO Y1o4+g4a7KyPJxB1beFH8AhNxV3cRRxFoXBeiirJAoJs/m6bOzRdG8mxfqXbrShE lSa9x0olLaPXJkPwe3qfavp5sG4f28+E3rAecHjbO4DAdJiuZkgk1XN/3YAjbaKs nub5VyA/SQtP52BSTAMucEjNOVugLUX8b0wmPq6JmhxS7R75GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA+qvujsK6a1K8Nq7ybfG4UsjtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGFmM2RlYjAtMTk0Zi0z MmY1LTlhM2QtZDBiOThjZGNmMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN9SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDjBerfdjsJvx6tneuPmhUK/BXglFM02ao6kIo0If6o4h6beFVscYie deir9hnYz9c3mNuwjY0oAbemf0Xl0w2Yc/WWowOgjd8ZCsCzbTlENMaBBqrcaj71 7acMMWLUZ0EXAtvlVToEyTYb+/r/wbxjbbjBywR1BsrS4LYDbDMK60c0bQ9BNReN txiiI8Kmulo2SW8tO4O0C/Unav+dvwPx2yymCZZgyWCtnxIkA+JVu52Y8jJizbKl aZQGPQVQPuPWwQXBVaFq3j87V92QlOxvJDkf89m6KMtYYmVymDUYp05JHTkk8pYe rwEyQ1P/V+NdjsH+FDflUJ8/HVl2Mq0= -----END CERTIFICATE-----Generated at Mon Jun 30 09:34:29 2025 by rpki-client