$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b547961-476e-393d-a59a-953bf08d3170.roa File: 8b547961-476e-393d-a59a-953bf08d3170.roa (raw, json) Hash identifier: 2RRBdPXARcVpv+8047pigSSuZy1nJ6sOb5fPAfxFqZw= Subject key identifier: 02:FD:1B:38:C5:CB:94:16:9E:29:E7:CB:25:FF:24:5E:FE:AB:D9:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75872226A3195F5B01CE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b547961-476e-393d-a59a-953bf08d3170.roa Signing time: Thu 19 Jun 2025 14:37:41 +0000 ROA not before: Thu 19 Jun 2025 14:37:41 +0000 ROA not after: Wed 17 Sep 2025 14:37:41 +0000 asID: 22773 IP address blocks: 72.201.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:87:22:26:a3:19:5f:5b:01:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:41 2025 GMT Not After : Sep 17 14:37:41 2025 GMT Subject: CN=3447c587-de9a-4fd3-8ac1-bbd5639d89a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:d0:96:e0:69:4f:6a:37:76:04:b0:22:0c: 23:7b:d4:a3:5e:29:40:60:b8:3d:ba:27:64:a1:27: ed:26:1c:53:0d:cb:19:f1:53:d0:54:b1:61:1e:cb: 98:2d:1e:81:c7:a9:bb:5b:64:2b:b0:44:65:db:d8: 24:5b:80:7d:cf:ee:b6:69:ef:49:7d:ba:62:1a:db: 33:79:8e:46:35:0f:0f:38:7b:30:30:c1:73:84:2c: f2:e5:aa:ab:35:6f:e4:32:72:8c:33:a3:de:57:0f: bb:c5:d8:6f:03:01:a1:2a:1a:5f:c4:93:fb:5b:fb: 3f:ee:95:7f:e5:e6:82:5f:5b:d6:ec:2f:a0:c9:0c: 04:4f:e8:d1:ff:64:b9:cc:ba:28:d0:ca:24:86:56: 32:60:76:6d:78:c8:ca:78:3e:13:be:56:5b:90:18: 77:f6:b4:5d:20:f5:44:3f:78:4f:f6:ee:eb:07:fe: a1:4d:93:65:c0:c9:73:ab:7a:65:5b:4e:bc:e6:c2: dd:0a:4c:7c:11:1c:39:25:98:8f:62:71:bf:d5:20: ae:da:7e:b3:52:8f:b8:a0:39:a3:36:15:33:5c:fe: 86:55:23:53:de:4b:c2:b8:84:41:11:96:90:35:0c: df:c4:14:2e:30:ab:fa:67:c4:18:b8:1b:d0:5b:56: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FD:1B:38:C5:CB:94:16:9E:29:E7:CB:25:FF:24:5E:FE:AB:D9:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b547961-476e-393d-a59a-953bf08d3170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:cc:09:af:83:9d:9c:f0:c2:71:6f:94:dc:53:a0:09:65:7b: 96:e0:c2:f2:c1:92:f6:51:3d:76:64:3b:f5:46:28:80:43:33: 94:95:73:55:a0:23:b5:49:2a:0b:e1:6e:e7:06:27:d0:eb:0b: 73:f2:e0:ac:a6:35:a9:3f:9b:06:7d:c7:60:df:8f:7a:6e:36: 04:8b:b1:51:6c:9a:1c:8e:43:b3:e6:ca:9a:b5:38:01:ac:44: 58:f4:75:c7:60:e3:26:78:1b:2b:4b:5f:f2:f2:36:ca:68:e5: 3b:40:29:3e:f4:78:63:98:aa:55:20:d3:eb:4b:0e:62:6d:41: 2d:6a:19:a9:0b:cf:3a:01:ef:e7:55:e1:bf:7b:2a:a1:0a:72: 28:18:77:db:22:e0:19:39:fa:a5:e1:9a:7d:b4:8c:8f:ef:62: 8f:ff:4d:c3:4d:25:10:cd:1f:24:df:0c:d0:55:ac:8d:d6:20: 90:25:21:f3:34:d1:cd:43:d2:90:a9:53:17:d9:6e:08:42:fc: 98:c8:39:d0:7d:9a:d3:25:57:a5:a4:5a:e9:52:c3:8a:79:e4: ee:35:4d:83:21:9d:17:20:a5:5b:55:58:1d:4b:63:fd:9a:05: e8:f2:f3:05:8d:8a:5b:df:3d:c6:50:63:18:c6:34:18:64:e7: b2:e3:8e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dYciJqMZX1sBzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzc0MVoXDTI1MDkxNzE0Mzc0MVowLzEtMCsGA1UEAxMk MzQ0N2M1ODctZGU5YS00ZmQzLThhYzEtYmJkNTYzOWQ4OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH3QluBpT2o3dgSwIgwje9SjXilAYLg9uidk oSftJhxTDcsZ8VPQVLFhHsuYLR6Bx6m7W2QrsERl29gkW4B9z+62ae9JfbpiGtsz eY5GNQ8POHswMMFzhCzy5aqrNW/kMnKMM6PeVw+7xdhvAwGhKhpfxJP7W/s/7pV/ 5eaCX1vW7C+gyQwET+jR/2S5zLoo0MokhlYyYHZteMjKeD4TvlZbkBh39rRdIPVE P3hP9u7rB/6hTZNlwMlzq3plW0685sLdCkx8ERw5JZiPYnG/1SCu2n6zUo+4oDmj NhUzXP6GVSNT3kvCuIRBEZaQNQzfxBQuMKv6Z8QYuBvQW1YelQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL9GzjFy5QWninnyyX/JF7+q9kCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGI1NDc5NjEtNDc2ZS0z OTNkLWE1OWEtOTUzYmYwOGQzMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvMCa+DnZzwwnFvlNxToAlle5bgwvLBkvZRPXZkO/VGKIBDM5SVc1Wg I7VJKgvhbucGJ9DrC3Py4KymNak/mwZ9x2Dfj3puNgSLsVFsmhyOQ7Pmypq1OAGs RFj0dcdg4yZ4GytLX/LyNspo5TtAKT70eGOYqlUg0+tLDmJtQS1qGakLzzoB7+dV 4b97KqEKcigYd9si4Bk5+qXhmn20jI/vYo//TcNNJRDNHyTfDNBVrI3WIJAlIfM0 0c1D0pCpUxfZbghC/JjIOdB9mtMlV6WkWulSw4p55O41TYMhnRcgpVtVWB1LY/2a Bejy8wWNilvfPcZQYxjGNBhk57Ljjms= -----END CERTIFICATE-----Generated at Wed Jul 2 19:10:29 2025 by rpki-client