$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9340879c-e185-3679-8e8e-b5976bdcf5cc.roa File: 9340879c-e185-3679-8e8e-b5976bdcf5cc.roa (raw, json) Hash identifier: vVy7hJg4/HokqXr2GNaXTobx7FQpDk8JcPaSSIMv0k0= Subject key identifier: 0F:20:0D:A2:EB:1B:82:BE:94:BA:8E:E2:2D:40:C1:F3:77:05:3B:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76635F61FA13646858E340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9340879c-e185-3679-8e8e-b5976bdcf5cc.roa Signing time: Thu 19 Jun 2025 14:39:25 +0000 ROA not before: Thu 19 Jun 2025 14:39:25 +0000 ROA not after: Wed 17 Sep 2025 14:39:25 +0000 asID: 22773 IP address blocks: 72.208.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:63:5f:61:fa:13:64:68:58:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:25 2025 GMT Not After : Sep 17 14:39:25 2025 GMT Subject: CN=aaf631e9-a057-4caa-a45f-6d2cbe2c3d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:46:58:4e:4a:4f:ce:56:f0:a2:71:7d:d1: 23:07:5d:26:12:3a:08:25:2f:30:7e:f6:7b:40:de: 16:99:8d:32:0b:6d:47:53:75:36:3e:18:e7:7f:03: f6:f5:8f:b2:fe:65:c4:e5:8f:36:2b:ee:f5:b7:e9: 60:87:69:6a:54:19:31:2f:fd:e6:4a:dc:59:43:fd: 1f:b1:70:9c:bf:0c:d2:f7:4e:85:b5:5c:3f:be:92: 4d:e6:0b:91:89:82:bc:32:4a:71:68:1a:ee:fa:f8: 55:f3:1c:64:86:c4:da:8b:0f:8b:02:f3:a8:41:38: e6:93:b6:b1:ed:16:bb:b6:fc:36:68:5c:38:b1:e1: 69:5f:9b:32:65:e3:17:75:f6:17:a5:b3:f2:c7:f0: 9c:a3:fd:1e:59:11:64:5f:71:8c:36:cc:af:09:79: 10:af:4e:d6:94:83:74:a9:06:8d:c3:e8:33:75:3f: 4b:ac:2e:d0:7e:2f:75:6e:f6:68:df:a2:05:a4:29: 9e:b7:29:ed:62:3d:82:d4:76:b7:f5:b5:47:76:68: 4e:3b:8a:54:35:32:b1:73:55:72:44:4f:b0:67:e2: 3c:7d:73:d0:82:53:bc:0b:36:cc:8b:1e:04:c7:bc: 20:de:b1:f9:a2:f0:68:1d:9c:b5:11:2a:b4:2a:7c: 00:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:20:0D:A2:EB:1B:82:BE:94:BA:8E:E2:2D:40:C1:F3:77:05:3B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9340879c-e185-3679-8e8e-b5976bdcf5cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5b:26:c3:75:85:b3:15:6c:79:66:a0:9d:26:d1:04:58:89: 38:8b:50:b4:4b:b0:25:13:17:2a:ac:cd:85:2e:e5:d2:10:ce: 24:ea:07:b7:b9:d6:bb:b7:a3:9c:5b:b3:90:4f:43:e7:86:bc: be:0b:2a:cc:70:05:82:9b:52:70:e7:43:22:46:1a:1d:27:11: 54:ae:a6:75:ce:bd:41:33:45:a6:d1:b2:db:31:a4:0f:cd:fa: c0:19:e9:8b:60:73:de:b9:40:bd:87:75:7d:e5:48:bf:0e:5e: 35:c5:45:52:0f:2d:a1:ce:69:87:1f:75:93:c0:48:fb:a0:40: 8c:a1:35:e0:5d:7b:15:0a:66:0a:49:7a:a4:4b:76:9f:bd:2c: 28:cd:49:9e:3d:92:b5:20:30:3f:5d:44:6d:72:93:8b:63:53: 19:a8:89:10:5b:04:23:71:af:01:94:17:50:d3:bd:68:ca:40: 51:1c:21:d9:57:97:5a:00:a9:c0:e5:e5:c5:1d:b1:46:6f:ce: 63:97:19:cc:64:31:50:59:2a:a3:63:ea:e6:6f:3e:ee:65:d1: cc:47:29:18:05:09:72:be:6f:ec:87:75:13:1d:5f:d5:85:a0: c2:e9:ae:f6:6f:ff:51:f5:52:30:00:cd:f3:67:8e:68:b4:55: f5:b9:e2:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dmNfYfoTZGhY40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkyNVoXDTI1MDkxNzE0MzkyNVowLzEtMCsGA1UEAxMk YWFmNjMxZTktYTA1Ny00Y2FhLWE0NWYtNmQyY2JlMmMzZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iJGWE5KT85W8KJxfdEjB10mEjoIJS8wfvZ7 QN4WmY0yC21HU3U2PhjnfwP29Y+y/mXE5Y82K+71t+lgh2lqVBkxL/3mStxZQ/0f sXCcvwzS906FtVw/vpJN5guRiYK8MkpxaBru+vhV8xxkhsTaiw+LAvOoQTjmk7ax 7Ra7tvw2aFw4seFpX5syZeMXdfYXpbPyx/Cco/0eWRFkX3GMNsyvCXkQr07WlIN0 qQaNw+gzdT9LrC7Qfi91bvZo36IFpCmetyntYj2C1Ha39bVHdmhOO4pUNTKxc1Vy RE+wZ+I8fXPQglO8CzbMix4Ex7wg3rH5ovBoHZy1ESq0KnwAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8gDaLrG4K+lLqO4i1AwfN3BTsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTM0MDg3OWMtZTE4NS0z Njc5LThlOGUtYjU5NzZiZGNmNWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhbJsN1hbMVbHlmoJ0m0QRYiTiLULRLsCUTFyqszYUu5dIQziTqB7e5 1ru3o5xbs5BPQ+eGvL4LKsxwBYKbUnDnQyJGGh0nEVSupnXOvUEzRabRstsxpA/N +sAZ6Ytgc965QL2HdX3lSL8OXjXFRVIPLaHOaYcfdZPASPugQIyhNeBdexUKZgpJ eqRLdp+9LCjNSZ49krUgMD9dRG1yk4tjUxmoiRBbBCNxrwGUF1DTvWjKQFEcIdlX l1oAqcDl5cUdsUZvzmOXGcxkMVBZKqNj6uZvPu5l0cxHKRgFCXK+b+yHdRMdX9WF oMLprvZv/1H1UjAAzfNnjmi0VfW54q4= -----END CERTIFICATE-----Generated at Tue Jul 1 06:50:30 2025 by rpki-client