$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/948733a2-3c76-307f-8ea4-f50d995a9ede.roa File: 948733a2-3c76-307f-8ea4-f50d995a9ede.roa (raw, json) Hash identifier: 2Pht/JlSoO1UcxqcyT3ubVFYuqMI9lhtaORsysDe2wQ= Subject key identifier: 84:8B:D6:B2:0A:60:88:0B:4C:A0:73:4D:CD:AB:AE:A8:03:AC:6A:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E760CCD36638E2D489EB780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/948733a2-3c76-307f-8ea4-f50d995a9ede.roa Signing time: Thu 19 Jun 2025 14:38:44 +0000 ROA not before: Thu 19 Jun 2025 14:38:44 +0000 ROA not after: Wed 17 Sep 2025 14:38:44 +0000 asID: 22773 IP address blocks: 72.206.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:0c:cd:36:63:8e:2d:48:9e:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:44 2025 GMT Not After : Sep 17 14:38:44 2025 GMT Subject: CN=42d6158d-b93f-4751-940c-5be03affc0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:db:a6:e2:96:ea:0d:0e:9d:5c:e4:9c:44: 70:31:0f:ad:29:37:81:ba:88:13:d1:8b:d9:6e:3c: 5f:50:ba:06:74:7f:42:f8:82:4b:3e:b5:b1:84:81: 89:b0:e3:5e:c8:ef:41:ae:b6:dc:2e:35:f9:6c:7a: e6:87:cf:1f:ec:e7:55:69:dc:c4:79:50:63:47:e7: f5:6b:06:41:32:b9:9b:fd:e5:2a:db:d9:5e:b5:7f: 85:5a:d9:68:1f:5d:19:47:19:bb:be:b8:69:c1:5a: 9e:68:91:4a:f7:9f:0a:ca:84:f7:a4:13:3b:ec:0e: d3:93:2d:5f:54:cb:b5:13:fe:79:71:42:fd:30:c9: cb:59:ac:4a:58:ae:f1:05:6f:98:7e:af:e0:a6:92: ae:63:2f:fd:e1:9c:68:05:f8:6c:fa:89:e7:10:1c: 7e:60:d8:25:71:1d:8a:6e:47:f5:4a:38:74:c3:ef: 45:b0:d6:4b:fa:71:4d:e8:ef:c6:a7:1d:6c:91:57: a3:2e:21:be:34:03:3b:5e:02:e0:5d:a2:84:93:c5: 83:1f:f4:e2:b3:b7:81:0d:f9:9a:25:7c:26:ca:c1: 02:96:d1:11:5c:85:46:95:83:ed:6c:42:4e:26:ae: 7d:95:c8:86:29:96:cc:c8:0e:fa:23:06:cc:e0:19: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8B:D6:B2:0A:60:88:0B:4C:A0:73:4D:CD:AB:AE:A8:03:AC:6A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/948733a2-3c76-307f-8ea4-f50d995a9ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:49:82:b1:ae:50:66:a4:d6:e5:75:84:09:cf:60:82:dc:34: 3e:96:85:15:a2:c7:59:50:48:a1:f7:a0:0f:07:a9:65:6e:f9: 13:04:25:76:96:aa:c6:8f:09:fa:d6:24:f7:37:7a:aa:7e:82: 46:e4:31:5c:3e:e1:0f:b6:4f:c3:37:ea:23:fd:93:a0:f0:2b: 0c:70:62:0d:31:0c:f1:77:5a:8b:7a:9b:68:f9:e9:dd:92:03: fc:44:69:cb:8d:2d:77:7c:c2:9a:91:e7:d3:b3:00:61:65:fe: e9:65:7f:b1:b2:e8:68:5a:6f:69:16:cc:f6:0f:c7:38:bf:45: 47:57:b1:8a:0c:1e:0a:3c:ce:fb:94:93:7f:71:be:79:52:96: b2:10:34:a0:a3:89:36:d2:15:cc:95:7b:0f:e7:fd:f7:f2:9c: 92:fe:8a:e0:1d:97:91:29:ee:ee:6e:2e:d1:f0:6c:ae:b2:65: 11:25:cb:26:e0:bf:9d:0e:f8:e7:6b:a1:21:53:e2:f9:c9:b5: e8:cd:c9:bf:64:99:a4:f4:7c:4f:0e:f7:77:0b:a7:2d:9a:3f: b2:3a:69:f0:4d:a9:bf:23:2e:a0:96:a2:0b:7c:77:1a:50:7f: 45:8b:15:39:73:98:73:39:07:9d:72:57:f6:9a:92:53:fb:d0: ff:26:22:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dgzNNmOOLUiet4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzg0NFoXDTI1MDkxNzE0Mzg0NFowLzEtMCsGA1UEAxMk NDJkNjE1OGQtYjkzZi00NzUxLTk0MGMtNWJlMDNhZmZjMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx3bpuKW6g0OnVzknERwMQ+tKTeBuogT0YvZ bjxfULoGdH9C+IJLPrWxhIGJsONeyO9BrrbcLjX5bHrmh88f7OdVadzEeVBjR+f1 awZBMrmb/eUq29letX+FWtloH10ZRxm7vrhpwVqeaJFK958KyoT3pBM77A7Tky1f VMu1E/55cUL9MMnLWaxKWK7xBW+Yfq/gppKuYy/94ZxoBfhs+onnEBx+YNglcR2K bkf1Sjh0w+9FsNZL+nFN6O/Gpx1skVejLiG+NAM7XgLgXaKEk8WDH/Tis7eBDfma JXwmysECltERXIVGlYPtbEJOJq59lciGKZbMyA76IwbM4Bku6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISL1rIKYIgLTKBzTc2rrqgDrGrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTQ4NzMzYTItM2M3Ni0z MDdmLThlYTQtZjUwZDk5NWE5ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJJgrGuUGak1uV1hAnPYILcND6WhRWix1lQSKH3oA8HqWVu+RMEJXaW qsaPCfrWJPc3eqp+gkbkMVw+4Q+2T8M36iP9k6DwKwxwYg0xDPF3Wot6m2j56d2S A/xEacuNLXd8wpqR59OzAGFl/ullf7Gy6Ghab2kWzPYPxzi/RUdXsYoMHgo8zvuU k39xvnlSlrIQNKCjiTbSFcyVew/n/ffynJL+iuAdl5Ep7u5uLtHwbK6yZRElyybg v50O+OdroSFT4vnJtejNyb9kmaT0fE8O93cLpy2aP7I6afBNqb8jLqCWogt8dxpQ f0WLFTlzmHM5B51yV/aaklP70P8mIkg= -----END CERTIFICATE-----Generated at Tue Jul 1 17:52:26 2025 by rpki-client