$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e45d82e-99fa-3d80-a7b7-f6d5477d8830.roa File: 8e45d82e-99fa-3d80-a7b7-f6d5477d8830.roa (raw, json) Hash identifier: hPIIokDZeRqhI7DcgozxbtxaZnS/C02cUPHoIvCuz4Q= Subject key identifier: 79:E2:E1:C9:DA:A2:CC:B0:CB:BF:48:D0:66:C1:7B:95:AD:77:2B:D6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A97575A8DF924C1F872E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e45d82e-99fa-3d80-a7b7-f6d5477d8830.roa Signing time: Fri 20 Jun 2025 09:33:56 +0000 ROA not before: Fri 20 Jun 2025 09:33:56 +0000 ROA not after: Thu 18 Sep 2025 09:33:56 +0000 asID: 22773 IP address blocks: 72.193.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:75:75:a8:df:92:4c:1f:87:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:56 2025 GMT Not After : Sep 18 09:33:56 2025 GMT Subject: CN=008e07b7-bdb2-4175-aab1-f077b8056180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:88:af:1d:4b:c7:ad:46:7c:cf:3e:2a:3d: 2d:84:5f:ee:2b:39:b9:f0:d2:7c:19:46:95:24:3a: d6:ee:30:e3:d1:87:9b:e3:23:87:82:d4:e0:4a:fc: db:bf:24:f2:a9:8e:15:b5:18:18:9f:8c:1d:8b:96: ff:4a:22:fa:bf:33:07:6e:12:c3:67:32:07:a0:bf: fb:28:3f:42:10:06:c5:70:60:71:f6:df:fe:0e:14: 17:98:a6:43:7d:0d:b2:bc:16:c2:a1:86:b6:d0:35: c1:cb:76:04:db:35:0f:20:11:79:db:9a:10:24:43: 82:e9:25:18:5e:94:4e:b6:07:ab:40:78:36:18:99: 71:55:11:31:42:34:07:a2:ea:35:63:01:9c:21:4c: 32:44:5f:05:d3:23:fd:7e:dd:75:17:7b:0c:65:84: 77:ac:97:7b:55:c5:12:51:2a:2a:ad:21:72:de:93: dc:86:e7:cf:47:21:d4:79:44:6f:b6:3c:07:b2:72: 69:2f:28:b7:fe:10:58:32:0a:37:43:91:9a:b6:1a: a5:5c:7b:cb:3b:03:df:f0:29:eb:a3:bf:be:c1:ba: 36:1e:7e:86:18:c4:c5:12:96:3d:97:c3:ba:ab:d8: 6f:41:e7:a2:3b:0b:e3:2b:76:4d:8b:cf:8c:75:db: ea:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E2:E1:C9:DA:A2:CC:B0:CB:BF:48:D0:66:C1:7B:95:AD:77:2B:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e45d82e-99fa-3d80-a7b7-f6d5477d8830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e7:d4:da:f1:57:35:01:5a:77:6e:b0:30:13:2f:a2:b4:4c: e6:84:76:b1:71:fa:dc:b4:6d:fa:27:88:85:33:2d:8a:90:6b: c9:5b:aa:d6:94:bb:0f:32:91:a9:df:7b:24:64:8c:18:b3:d6: b1:e6:9d:ad:9d:82:54:48:a3:6f:53:99:7e:df:a7:50:74:6f: 84:a6:16:fa:83:e3:be:02:b9:33:5d:4e:88:61:c9:f8:4d:38: 03:01:7d:43:71:b9:05:a7:d8:5d:db:79:48:dc:43:b1:fa:a9: 09:0f:b5:e5:0a:f8:89:52:04:2b:12:7d:64:a3:35:9b:f9:48: 45:53:be:98:0b:c8:f7:ca:4a:13:7c:03:92:69:0d:98:ab:76: f2:5b:78:62:e0:cd:b6:45:65:84:b8:aa:2f:23:c0:e8:08:5f: 06:3d:5d:43:bc:3e:d7:bf:e3:e3:9d:b3:8e:45:4a:c0:4d:e3: 31:84:5c:78:2e:72:10:e8:cb:69:23:69:c5:d2:07:86:63:a4: 5f:1e:63:7f:e9:23:e3:57:c9:ba:b4:1a:26:dd:3e:10:d8:17: 3e:61:38:84:63:1a:8c:81:a0:df:be:23:34:dc:b0:57:e2:c3: d3:75:6d:68:18:22:8f:d5:b1:02:61:5a:63:40:13:36:52:6d: 46:d5:f4:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqXV1qN+STB+HLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzM1NloXDTI1MDkxODA5MzM1NlowLzEtMCsGA1UEAxMk MDA4ZTA3YjctYmRiMi00MTc1LWFhYjEtZjA3N2I4MDU2MTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7mIrx1Lx61GfM8+Kj0thF/uKzm58NJ8GUaV JDrW7jDj0Yeb4yOHgtTgSvzbvyTyqY4VtRgYn4wdi5b/SiL6vzMHbhLDZzIHoL/7 KD9CEAbFcGBx9t/+DhQXmKZDfQ2yvBbCoYa20DXBy3YE2zUPIBF525oQJEOC6SUY XpROtgerQHg2GJlxVRExQjQHouo1YwGcIUwyRF8F0yP9ft11F3sMZYR3rJd7VcUS USoqrSFy3pPchufPRyHUeURvtjwHsnJpLyi3/hBYMgo3Q5GathqlXHvLOwPf8Cnr o7++wbo2Hn6GGMTFEpY9l8O6q9hvQeeiOwvjK3ZNi8+Mddvq1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHni4cnaosywy79I0GbBe5WtdyvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGU0NWQ4MmUtOTlmYS0z ZDgwLWE3YjctZjZkNTQ3N2Q4ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMHmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTn1NrxVzUBWndusDATL6K0TOaEdrFx+ty0bfoniIUzLYqQa8lbqtaU uw8ykanfeyRkjBiz1rHmna2dglRIo29TmX7fp1B0b4SmFvqD474CuTNdTohhyfhN OAMBfUNxuQWn2F3beUjcQ7H6qQkPteUK+IlSBCsSfWSjNZv5SEVTvpgLyPfKShN8 A5JpDZirdvJbeGLgzbZFZYS4qi8jwOgIXwY9XUO8Pte/4+Ods45FSsBN4zGEXHgu chDoy2kjacXSB4ZjpF8eY3/pI+NXybq0GibdPhDYFz5hOIRjGoyBoN++IzTcsFfi w9N1bWgYIo/VsQJhWmNAEzZSbUbV9Ek= -----END CERTIFICATE-----Generated at Mon Jun 30 06:18:33 2025 by rpki-client