$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/942b4201-445d-39cd-817c-6f2ab349c8a1.roa File: 942b4201-445d-39cd-817c-6f2ab349c8a1.roa (raw, json) Hash identifier: oQtAh75uWT8iJvdcgNBFix39VrgcHJCho+rHoR9mo5Q= Subject key identifier: B7:3A:B2:C1:B7:B1:B9:A1:92:08:B0:8C:E6:15:AB:8B:C4:A0:AD:24 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77934CF8CE1B1DEF9B1960 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/942b4201-445d-39cd-817c-6f2ab349c8a1.roa Signing time: Thu 19 Jun 2025 14:41:49 +0000 ROA not before: Thu 19 Jun 2025 14:41:49 +0000 ROA not after: Wed 17 Sep 2025 14:41:49 +0000 asID: 22773 IP address blocks: 72.221.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:93:4c:f8:ce:1b:1d:ef:9b:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:49 2025 GMT Not After : Sep 17 14:41:49 2025 GMT Subject: CN=4657e4d8-d7b1-4faf-b695-01aeee6902d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:de:4b:3c:27:cf:02:16:08:14:8a:95:49:10: 54:1e:39:c7:e1:c6:76:d9:c1:7a:b3:d6:2e:59:0b: 28:12:f3:d6:52:2c:47:c8:40:c2:48:5e:90:b7:4b: b6:7a:dc:39:27:d9:06:d7:6a:9c:5a:f4:dd:aa:2a: a0:9b:89:9a:8c:51:ff:50:25:c1:6e:fc:59:f1:74: 82:0d:74:4b:d2:ba:09:6d:51:e2:a5:0e:86:d3:6b: 7a:8d:5e:39:30:fb:cc:e8:3e:98:99:e9:79:aa:4f: 61:12:49:16:77:1f:5a:7b:15:c4:4c:d5:4f:b4:58: 74:52:78:64:40:43:81:ff:a5:58:28:ac:1b:bd:b3: 90:57:6b:96:df:4f:b6:2c:a5:c8:ac:b8:2d:9a:a4: 42:62:be:e2:e7:3c:7d:37:73:87:f2:a3:51:54:f6: f1:eb:2b:b3:88:dc:25:6c:46:9d:81:fd:e7:fa:9e: bf:c3:da:b2:93:57:7b:fb:4c:22:16:df:4c:eb:fb: b9:40:64:2b:e8:0e:48:f7:7c:4c:c3:a8:32:87:ac: 72:90:46:e7:4e:66:6b:d2:da:65:8f:00:05:59:b8: 7e:c5:28:1c:14:b4:da:20:65:b4:de:f0:aa:68:5e: 42:9c:1e:f1:ec:39:71:76:c7:39:05:5b:25:02:df: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3A:B2:C1:B7:B1:B9:A1:92:08:B0:8C:E6:15:AB:8B:C4:A0:AD:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/942b4201-445d-39cd-817c-6f2ab349c8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:1d:5b:08:a1:4a:31:79:2b:ed:d2:80:83:da:38:5a:d3:3b: 05:a8:f8:13:32:7e:03:d4:86:c9:77:1f:ac:13:73:33:8d:90: 7e:c9:7a:6d:3f:69:87:c8:90:32:05:e4:a4:27:ed:03:7d:f5: 12:25:b8:ce:30:57:85:a9:30:a7:0e:a3:32:50:8f:6c:32:85: 72:6f:81:d5:c0:2c:98:0e:3c:18:ce:14:13:03:4f:1b:60:d8: 27:06:9d:df:8d:e5:1e:e0:4a:f1:79:cb:68:1e:8a:3f:dc:30: 23:13:d9:f0:ae:b2:c7:02:b9:63:fe:fd:c9:32:a0:3f:a6:fe: 8d:ae:81:9e:a3:cb:cb:01:fe:5d:06:58:2c:53:c9:a5:07:38: c4:bf:2f:d9:2a:de:06:ad:9a:c5:46:25:fd:52:46:81:36:4b: bc:03:e1:42:5d:e1:29:58:f5:9b:da:d2:66:0d:83:6b:0f:c6: 4d:58:25:ce:c9:3b:78:23:c3:92:ad:10:71:c2:17:29:30:07: 8a:f9:2c:e6:3c:75:ce:c3:36:e0:57:8e:28:a8:3a:43:a3:97: bb:46:e0:68:af:68:c8:fd:05:6a:86:e0:b2:77:0c:1c:20:2c: fb:08:06:0f:af:5c:e6:48:d5:0e:3d:c6:00:8a:c5:46:ba:7c: 68:08:27:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d5NM+M4bHe+bGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDE0OVoXDTI1MDkxNzE0NDE0OVowLzEtMCsGA1UEAxMk NDY1N2U0ZDgtZDdiMS00ZmFmLWI2OTUtMDFhZWVlNjkwMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN5LPCfPAhYIFIqVSRBUHjnH4cZ22cF6s9Yu WQsoEvPWUixHyEDCSF6Qt0u2etw5J9kG12qcWvTdqiqgm4majFH/UCXBbvxZ8XSC DXRL0roJbVHipQ6G02t6jV45MPvM6D6Ymel5qk9hEkkWdx9aexXETNVPtFh0Unhk QEOB/6VYKKwbvbOQV2uW30+2LKXIrLgtmqRCYr7i5zx9N3OH8qNRVPbx6yuziNwl bEadgf3n+p6/w9qyk1d7+0wiFt9M6/u5QGQr6A5I93xMw6gyh6xykEbnTmZr0tpl jwAFWbh+xSgcFLTaIGW03vCqaF5CnB7x7Dlxdsc5BVslAt+NcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc6ssG3sbmhkgiwjOYVq4vEoK0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTQyYjQyMDEtNDQ1ZC0z OWNkLTgxN2MtNmYyYWIzNDljOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQdWwihSjF5K+3SgIPaOFrTOwWo+BMyfgPUhsl3H6wTczONkH7Jem0/ aYfIkDIF5KQn7QN99RIluM4wV4WpMKcOozJQj2wyhXJvgdXALJgOPBjOFBMDTxtg 2CcGnd+N5R7gSvF5y2geij/cMCMT2fCusscCuWP+/ckyoD+m/o2ugZ6jy8sB/l0G WCxTyaUHOMS/L9kq3gatmsVGJf1SRoE2S7wD4UJd4SlY9Zva0mYNg2sPxk1YJc7J O3gjw5KtEHHCFykwB4r5LOY8dc7DNuBXjiioOkOjl7tG4GivaMj9BWqG4LJ3DBwg LPsIBg+vXOZI1Q49xgCKxUa6fGgIJ2g= -----END CERTIFICATE-----Generated at Tue Jul 1 18:34:46 2025 by rpki-client