$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aeb0e3d-5a28-3a37-824c-af72630e53c5.roa File: 9aeb0e3d-5a28-3a37-824c-af72630e53c5.roa (raw, json) Hash identifier: XKnNU1HrCJd1o/raXpWpY9dLrpFVVZgekcpfu0j9tbw= Subject key identifier: 8B:3F:32:4F:2C:47:0B:9D:4B:9F:F5:55:C3:9E:B6:AE:4A:85:A5:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A93A6C6A74C45F5221D0A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aeb0e3d-5a28-3a37-824c-af72630e53c5.roa Signing time: Fri 20 Jun 2025 09:33:28 +0000 ROA not before: Fri 20 Jun 2025 09:33:28 +0000 ROA not after: Thu 18 Sep 2025 09:33:28 +0000 asID: 22773 IP address blocks: 72.193.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:3a:6c:6a:74:c4:5f:52:21:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:28 2025 GMT Not After : Sep 18 09:33:28 2025 GMT Subject: CN=e69bcf65-52cb-42a3-b44e-f4a8ff3b7d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:cf:71:e0:b0:f4:f8:b4:60:15:ed:0e:eb: 30:49:91:79:e7:88:34:04:e5:d0:24:c0:c3:67:ab: 8c:08:9b:23:82:82:b7:da:41:4a:d0:b5:98:d3:a0: e4:75:94:46:02:40:76:e5:09:64:21:ae:42:2f:1a: 05:8e:0b:6f:90:56:2b:41:4f:f6:62:ec:58:7b:df: b9:b8:82:b9:4c:fc:08:fc:c3:e4:81:18:ad:76:60: 4a:c9:1e:7f:77:84:da:5c:4c:7a:b9:7d:40:63:bd: 98:0a:d6:ab:26:28:3e:97:b8:fd:0a:41:02:e6:fb: dc:94:00:c9:b0:17:a9:cc:40:85:d6:0f:94:68:05: 4a:e2:c6:c6:8f:34:ec:16:91:88:04:ed:d6:fb:c6: 2e:82:04:3a:cc:57:8a:78:18:1b:22:67:bb:58:f9: 55:04:7a:81:d0:26:9c:4a:55:dc:07:f5:22:d1:7b: d5:bc:6f:48:0f:b1:9a:1a:64:db:47:b1:93:6d:1d: d8:16:64:56:72:b0:bd:fb:39:ac:41:67:fe:90:5b: 87:78:1d:b8:cf:ed:df:1a:df:9e:fb:17:8a:20:ae: da:a8:17:ea:74:36:56:b4:a6:c3:ea:7a:1a:a2:dc: f4:c7:8d:e8:55:5f:b8:89:70:a5:05:33:a0:c4:ee: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:32:4F:2C:47:0B:9D:4B:9F:F5:55:C3:9E:B6:AE:4A:85:A5:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aeb0e3d-5a28-3a37-824c-af72630e53c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:56:b7:41:68:fa:80:29:f1:27:ae:ee:28:01:06:06:2b:6e: 17:c9:ca:aa:b5:a7:20:d2:10:f9:24:e2:a0:c3:b0:34:be:37: 71:2e:42:03:0d:9d:30:21:4a:44:97:55:ff:ed:06:25:ac:4c: 2f:5e:11:0f:33:f7:86:01:42:b8:68:cb:fd:e1:a2:35:d9:dd: 00:b5:de:bc:cb:0e:24:e2:e3:16:b9:d1:cb:11:6f:cb:40:4b: 7c:bd:b7:89:47:40:86:c8:53:56:f2:5d:8c:a3:eb:5f:9f:05: c9:2a:65:52:fc:77:44:87:86:aa:3b:86:27:e9:d4:f5:e1:df: 31:57:2b:1d:2b:44:e5:50:23:43:d8:e7:7c:0d:19:97:97:64: a2:ea:1a:39:21:10:7d:55:16:63:42:32:d5:ff:d1:d2:db:80: b3:e6:20:5f:dd:7d:ee:f8:22:2a:48:b9:1f:f8:b6:e2:76:73: 7a:c7:8a:30:96:2c:45:94:34:2a:08:66:8c:8f:66:e7:83:8a: 3c:84:03:2a:e7:74:39:72:e9:24:47:a2:a3:21:4d:d0:f8:b2: 4b:c6:ce:57:b2:40:8b:9c:29:e5:7d:40:2f:eb:d6:11:58:90: 46:22:b6:28:30:0f:aa:8b:f6:84:0d:f0:53:50:63:63:e2:17: f3:3e:b1:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqTpsanTEX1Ih0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzMyOFoXDTI1MDkxODA5MzMyOFowLzEtMCsGA1UEAxMk ZTY5YmNmNjUtNTJjYi00MmEzLWI0NGUtZjRhOGZmM2I3ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09/PceCw9Pi0YBXtDuswSZF554g0BOXQJMDD Z6uMCJsjgoK32kFK0LWY06DkdZRGAkB25QlkIa5CLxoFjgtvkFYrQU/2YuxYe9+5 uIK5TPwI/MPkgRitdmBKyR5/d4TaXEx6uX1AY72YCtarJig+l7j9CkEC5vvclADJ sBepzECF1g+UaAVK4sbGjzTsFpGIBO3W+8YuggQ6zFeKeBgbIme7WPlVBHqB0Cac SlXcB/Ui0XvVvG9ID7GaGmTbR7GTbR3YFmRWcrC9+zmsQWf+kFuHeB24z+3fGt+e +xeKIK7aqBfqdDZWtKbD6noaotz0x43oVV+4iXClBTOgxO4lkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs/Mk8sRwudS5/1VcOetq5KhaVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWFlYjBlM2QtNWEyOC0z YTM3LTgyNGMtYWY3MjYzMGU1M2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdWt0Fo+oAp8Seu7igBBgYrbhfJyqq1pyDSEPkk4qDDsDS+N3EuQgMN nTAhSkSXVf/tBiWsTC9eEQ8z94YBQrhoy/3hojXZ3QC13rzLDiTi4xa50csRb8tA S3y9t4lHQIbIU1byXYyj61+fBckqZVL8d0SHhqo7hifp1PXh3zFXKx0rROVQI0PY 53wNGZeXZKLqGjkhEH1VFmNCMtX/0dLbgLPmIF/dfe74IipIuR/4tuJ2c3rHijCW LEWUNCoIZoyPZueDijyEAyrndDly6SRHoqMhTdD4skvGzleyQIucKeV9QC/r1hFY kEYitigwD6qL9oQN8FNQY2PiF/M+sSI= -----END CERTIFICATE-----Generated at Mon Jun 30 09:54:16 2025 by rpki-client