$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c235c3c-780c-347e-86b9-9078791b442e.roa File: 9c235c3c-780c-347e-86b9-9078791b442e.roa (raw, json) Hash identifier: BLGCTFO77cEf7wyNjMsGsiT4KE4ExXKYcVQZHT04C1Y= Subject key identifier: FA:12:52:6C:78:D7:05:3B:0B:7D:F0:E8:8B:34:20:ED:18:83:E1:7F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E780F46D82D3EB81C49AC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c235c3c-780c-347e-86b9-9078791b442e.roa Signing time: Thu 19 Jun 2025 14:42:47 +0000 ROA not before: Thu 19 Jun 2025 14:42:47 +0000 ROA not after: Wed 17 Sep 2025 14:42:47 +0000 asID: 22773 IP address blocks: 72.223.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:78:0f:46:d8:2d:3e:b8:1c:49:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:47 2025 GMT Not After : Sep 17 14:42:47 2025 GMT Subject: CN=ae158a66-86af-4d26-9e63-1df4f231af18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:18:67:a5:c0:41:14:70:c3:53:9f:0c:06: c9:20:92:e1:4a:a5:b1:75:71:a2:37:db:6d:70:04: 70:70:84:8c:55:70:22:b8:50:be:c9:10:cb:67:07: ec:95:4d:42:f6:44:b8:46:cc:75:9b:22:2a:af:98: ff:f8:67:e0:18:04:04:76:99:b3:ed:5b:82:a5:14: 40:43:cf:5f:00:44:49:1d:1c:16:81:b3:b6:77:98: 5a:df:e2:ef:e2:24:61:e9:e0:56:4a:dc:ec:37:95: 37:14:14:a2:22:bd:4f:81:17:d2:31:54:a9:1a:5f: 95:14:75:94:2d:12:30:20:c9:83:8d:a3:c4:f6:55: 27:f1:f7:37:22:01:75:6e:dd:43:3f:e6:a9:1b:54: 34:af:ab:4d:98:26:e5:bb:21:e4:a5:fe:1e:3f:c3: e8:69:03:15:18:0a:53:b0:7f:3a:0a:ee:a4:f9:b9: f6:99:3d:b3:cf:df:82:c0:e8:aa:28:d6:d7:22:f4: ba:f2:aa:d6:82:42:91:5c:2c:dc:5b:81:5a:9f:cd: f0:cc:7d:6d:14:1f:1f:e7:8d:f4:ea:a2:b0:38:4d: aa:e8:43:df:c0:08:40:be:b2:6d:fb:68:b0:ce:96: 23:82:b0:04:22:df:f8:0c:48:9a:4e:51:57:c7:28: 84:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:12:52:6C:78:D7:05:3B:0B:7D:F0:E8:8B:34:20:ED:18:83:E1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c235c3c-780c-347e-86b9-9078791b442e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ef:7e:1b:fc:26:d6:c4:98:26:ed:6c:da:0c:e9:81:17:aa: 71:f7:0a:85:fb:45:87:66:06:e9:b9:7d:8c:8e:2f:6a:67:e0: 6d:6f:e0:57:b4:70:48:b7:6a:84:32:3b:d7:57:8b:9b:8d:74: 2a:dd:43:7c:8d:ef:55:24:f0:42:5a:01:b6:b0:fd:23:c0:fe: c0:4d:a9:f5:63:b9:5b:7f:ee:21:69:12:33:31:94:fb:6e:b3: 54:b5:26:80:04:8c:88:03:c4:39:76:47:f9:e2:d1:15:03:e6: d3:97:85:33:86:4d:92:bc:6d:ab:34:bd:e6:99:ed:24:ba:05: c6:90:c3:0f:60:f7:70:ab:ae:12:f2:c8:0a:e1:c4:d4:41:44: e6:d0:cc:2b:74:00:f0:5e:f6:78:51:00:aa:e5:6e:88:4e:e2: 5f:db:d3:30:fc:0e:5c:e8:86:51:9c:7e:93:a7:72:77:0e:79: 6d:8f:bf:b6:31:57:44:01:f5:90:19:bc:3a:d8:25:40:26:e7: 40:8d:2f:51:65:a2:bf:72:68:aa:e9:c1:62:ef:6c:f0:55:76: 2b:22:12:3f:72:43:5d:69:85:25:f9:6c:28:7f:75:4d:26:ff: 52:46:1a:d3:36:5d:a0:f4:b6:9f:1d:f2:d3:ad:c6:8c:6e:77: 41:13:7c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+eA9G2C0+uBxJrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDI0N1oXDTI1MDkxNzE0NDI0N1owLzEtMCsGA1UEAxMk YWUxNThhNjYtODZhZi00ZDI2LTllNjMtMWRmNGYyMzFhZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzoYZ6XAQRRww1OfDAbJIJLhSqWxdXGiN9tt cARwcISMVXAiuFC+yRDLZwfslU1C9kS4Rsx1myIqr5j/+GfgGAQEdpmz7VuCpRRA Q89fAERJHRwWgbO2d5ha3+Lv4iRh6eBWStzsN5U3FBSiIr1PgRfSMVSpGl+VFHWU LRIwIMmDjaPE9lUn8fc3IgF1bt1DP+apG1Q0r6tNmCbluyHkpf4eP8PoaQMVGApT sH86Cu6k+bn2mT2zz9+CwOiqKNbXIvS68qrWgkKRXCzcW4Fan83wzH1tFB8f5430 6qKwOE2q6EPfwAhAvrJt+2iwzpYjgrAEIt/4DEiaTlFXxyiEkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoSUmx41wU7C33w6Is0IO0Yg+F/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWMyMzVjM2MtNzgwYy0z NDdlLTg2YjktOTA3ODc5MWI0NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfvfhv8JtbEmCbtbNoM6YEXqnH3CoX7RYdmBum5fYyOL2pn4G1v4Fe0 cEi3aoQyO9dXi5uNdCrdQ3yN71Uk8EJaAbaw/SPA/sBNqfVjuVt/7iFpEjMxlPtu s1S1JoAEjIgDxDl2R/ni0RUD5tOXhTOGTZK8bas0veaZ7SS6BcaQww9g93CrrhLy yArhxNRBRObQzCt0APBe9nhRAKrlbohO4l/b0zD8DlzohlGcfpOncncOeW2Pv7Yx V0QB9ZAZvDrYJUAm50CNL1Flor9yaKrpwWLvbPBVdisiEj9yQ11phSX5bCh/dU0m /1JGGtM2XaD0tp8d8tOtxoxud0ETfAI= -----END CERTIFICATE-----Generated at Wed Jul 2 06:29:59 2025 by rpki-client