$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e261f9a-2c13-3b01-b1c6-1333ba23455c.roa File: 8e261f9a-2c13-3b01-b1c6-1333ba23455c.roa (raw, json) Hash identifier: rzyqyDlt8JKtCmS/kyYnO+qS1wrrMna2Bn0/BwnQQkc= Subject key identifier: F2:A2:C6:B2:3F:56:A7:8A:54:BF:63:0F:1C:6B:FD:D5:98:EA:0B:CA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76FEEB72BA2AA636F40D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e261f9a-2c13-3b01-b1c6-1333ba23455c.roa Signing time: Thu 19 Jun 2025 14:40:38 +0000 ROA not before: Thu 19 Jun 2025 14:40:38 +0000 ROA not after: Wed 17 Sep 2025 14:40:38 +0000 asID: 22773 IP address blocks: 72.212.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:fe:eb:72:ba:2a:a6:36:f4:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:38 2025 GMT Not After : Sep 17 14:40:38 2025 GMT Subject: CN=c3d22f4d-9a31-45ad-84d4-e2a32182d92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:d2:60:2b:35:f3:51:63:3e:29:cc:a4:b6: 67:71:14:b5:18:02:14:35:d1:f7:74:52:f8:d0:04: 77:db:2f:5f:33:1f:99:64:40:bb:5b:73:c2:b9:29: 7b:df:77:01:ae:5f:b5:69:86:06:8e:54:38:d2:c5: 11:68:04:60:49:d1:93:a8:e1:a2:63:3b:ff:67:9f: 13:06:45:1a:d5:62:e6:58:07:21:0f:78:45:a7:31: c2:b1:c5:6b:5d:0c:e7:13:fe:61:71:77:c9:d3:16: ad:66:02:bc:0a:c6:b4:13:33:59:1b:54:6c:22:ac: 08:c0:25:83:50:26:c5:fd:96:f6:df:c2:56:f2:ff: 2a:26:3a:a7:8a:f6:3e:5e:e2:ab:40:55:db:8f:f1: c0:23:6b:d5:cd:f4:ec:fc:d0:76:dc:0e:8c:c4:67: 67:90:40:0b:b8:36:9e:10:d7:0d:2e:8e:b3:47:c2: 66:14:b6:6c:74:6e:fd:50:dd:92:fc:7c:ec:7a:29: 69:1d:e0:a3:1f:27:ae:cd:16:7d:4a:67:45:cf:f4: be:0f:d3:d6:4c:de:8b:7e:fe:2e:cc:ee:5c:52:dd: ac:16:6e:4e:32:96:72:7a:e7:54:79:ac:d9:9f:3b: 65:f3:9e:2b:45:9d:91:27:58:0f:46:51:bc:9e:0a: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:C6:B2:3F:56:A7:8A:54:BF:63:0F:1C:6B:FD:D5:98:EA:0B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e261f9a-2c13-3b01-b1c6-1333ba23455c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:3f:2e:4d:f1:b9:69:37:6a:3b:73:92:72:ba:21:de:fb:e1: 95:6f:64:82:fc:d1:d1:21:9f:b6:0d:9b:9f:96:83:19:3f:f5: 04:f7:0a:33:6c:bf:08:93:b7:ac:b6:88:fb:52:7b:fa:83:82: eb:26:01:3c:a2:19:00:86:33:84:50:dc:81:4f:c2:ae:ec:bc: 7c:f0:a4:81:a6:28:69:68:f0:a4:04:df:3e:25:c1:25:30:03: bb:53:83:eb:c2:c6:ea:0f:df:e6:5d:9d:9b:e0:21:08:79:bf: c9:d1:31:d3:0d:68:a8:27:be:3e:3e:22:97:b7:e3:55:71:9a: 66:26:26:65:1b:a0:9e:1d:ba:5e:b4:64:c8:a2:79:5e:4d:4a: dd:c7:99:d7:a9:5d:05:dd:da:cb:ec:0d:55:1e:70:54:ad:48: ff:62:90:9c:71:74:0c:01:33:ec:8c:b8:4b:20:cb:7a:06:dc: 04:11:ca:c3:d0:6b:5f:04:e6:53:34:e1:9a:ef:70:98:0f:41: 75:84:02:3a:5b:67:5e:85:31:e1:4e:de:69:58:47:fd:7e:31: 18:c7:f8:b1:1b:0b:3d:a0:d1:e3:99:63:e7:92:68:78:86:5d: 12:a0:60:9f:6d:89:71:64:d7:65:8f:67:00:c8:a1:1e:8e:4d: b1:41:30:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dv7rcroqpjb0DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAzOFoXDTI1MDkxNzE0NDAzOFowLzEtMCsGA1UEAxMk YzNkMjJmNGQtOWEzMS00NWFkLTg0ZDQtZTJhMzIxODJkOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqALSYCs181FjPinMpLZncRS1GAIUNdH3dFL4 0AR32y9fMx+ZZEC7W3PCuSl733cBrl+1aYYGjlQ40sURaARgSdGTqOGiYzv/Z58T BkUa1WLmWAchD3hFpzHCscVrXQznE/5hcXfJ0xatZgK8Csa0EzNZG1RsIqwIwCWD UCbF/Zb238JW8v8qJjqnivY+XuKrQFXbj/HAI2vVzfTs/NB23A6MxGdnkEALuDae ENcNLo6zR8JmFLZsdG79UN2S/HzseilpHeCjHyeuzRZ9SmdFz/S+D9PWTN6Lfv4u zO5cUt2sFm5OMpZyeudUeazZnztl854rRZ2RJ1gPRlG8ngpTmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKixrI/VqeKVL9jDxxr/dWY6gvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGUyNjFmOWEtMmMxMy0z YjAxLWIxYzYtMTMzM2JhMjM0NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA/Lk3xuWk3ajtzknK6Id774ZVvZIL80dEhn7YNm5+Wgxk/9QT3CjNs vwiTt6y2iPtSe/qDgusmATyiGQCGM4RQ3IFPwq7svHzwpIGmKGlo8KQE3z4lwSUw A7tTg+vCxuoP3+ZdnZvgIQh5v8nRMdMNaKgnvj4+Ipe341VxmmYmJmUboJ4dul60 ZMiieV5NSt3HmdepXQXd2svsDVUecFStSP9ikJxxdAwBM+yMuEsgy3oG3AQRysPQ a18E5lM04ZrvcJgPQXWEAjpbZ16FMeFO3mlYR/1+MRjH+LEbCz2g0eOZY+eSaHiG XRKgYJ9tiXFk12WPZwDIoR6OTbFBMEo= -----END CERTIFICATE-----Generated at Tue Jul 1 15:28:12 2025 by rpki-client