$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9daf897d-e3c9-3505-b5df-5304b554eb66.roa File: 9daf897d-e3c9-3505-b5df-5304b554eb66.roa (raw, json) Hash identifier: DDOhcoEuevIcw/pE+O5OlMt9eTvigHivzw3DqoVpksE= Subject key identifier: 5D:72:DD:7A:F1:9E:03:E2:C9:07:75:9D:E2:D7:82:E4:7C:3F:FA:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7729D49149D511E26FA700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9daf897d-e3c9-3505-b5df-5304b554eb66.roa Signing time: Thu 19 Jun 2025 14:40:59 +0000 ROA not before: Thu 19 Jun 2025 14:40:59 +0000 ROA not after: Wed 17 Sep 2025 14:40:59 +0000 asID: 22773 IP address blocks: 72.216.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:29:d4:91:49:d5:11:e2:6f:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:59 2025 GMT Not After : Sep 17 14:40:59 2025 GMT Subject: CN=f969d4f1-d32b-467a-943e-cfb78a59fa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7b:6d:88:94:d6:b9:6b:cc:3c:b7:c2:49:3c: 91:07:a6:37:58:c4:5a:1f:dd:3a:d6:51:27:97:c6: 48:2f:1f:d4:1e:9b:77:6b:15:1f:3b:17:78:e8:42: bc:ac:f3:cf:d3:8a:6c:3e:ea:04:95:0b:4f:55:6e: 1a:c6:4e:ef:f1:04:51:e1:f8:ee:48:66:45:08:8d: b9:b1:d2:fc:33:e9:74:a1:bd:ad:a2:2a:cc:43:ce: 81:56:53:12:1f:d3:f9:01:1b:13:0f:2a:c8:ad:c1: 07:1c:0d:57:08:76:67:38:3b:a7:b7:92:3c:7e:3c: 15:86:91:18:91:82:f2:08:6d:cc:aa:8f:c7:bc:87: 51:70:30:a0:a0:49:18:14:1a:18:ef:89:d5:f8:7b: ce:3d:8b:d3:d7:c0:f5:bd:91:1d:a3:db:0c:9e:05: d6:87:a2:9d:bf:52:ec:b4:71:e6:fd:bf:13:d9:5b: 8e:9a:d0:7f:8b:fc:35:49:53:68:73:b3:43:b7:50: 90:49:47:f8:6b:14:43:44:96:5d:52:11:b1:70:61: a6:7e:ed:62:8d:9a:6b:d3:c2:d2:f0:08:9e:21:ed: ef:d2:e2:0d:b3:0a:b4:94:86:30:7d:d7:d7:a1:c2: 22:69:0e:6d:8b:3f:1e:65:ff:e8:7f:c8:65:3c:ab: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:72:DD:7A:F1:9E:03:E2:C9:07:75:9D:E2:D7:82:E4:7C:3F:FA:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9daf897d-e3c9-3505-b5df-5304b554eb66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:5a:72:40:4a:aa:a6:15:69:c3:7b:cd:7b:fa:43:7d:21:e1: 82:cc:f4:2d:49:78:f7:c9:c1:21:ce:47:46:ef:e4:f3:65:34: 76:d7:d3:8c:09:c7:48:5e:3f:e2:cc:18:7f:4c:29:7e:c7:fc: 99:1a:5a:07:30:f6:ee:cf:83:46:b4:17:78:92:c1:f0:93:83: 5f:17:ba:a1:64:bb:7f:78:8e:8c:68:4e:29:00:6f:94:8a:e9: 09:37:fe:c7:5e:c8:bf:c8:cd:84:4c:11:38:6f:a0:6b:7a:9c: 37:d1:6b:2c:cd:dc:d1:e9:5e:56:f1:23:cb:1e:53:55:ba:62: bf:83:a0:84:fd:b4:ba:45:5b:99:3d:46:be:62:f9:e1:7a:97: e3:0a:95:2e:06:cf:43:b2:50:8a:82:46:c1:9a:b9:2a:40:53: 97:ce:80:20:ec:27:be:4c:bf:e3:b5:17:63:7e:26:b2:e9:da: a0:50:9d:6d:b7:8a:56:a7:3f:56:49:53:12:e0:df:cf:53:50: b0:73:71:9a:76:56:db:8c:57:12:ac:10:e5:39:38:44:03:5d: b5:b6:0c:d1:e0:c4:ac:af:5d:72:d4:b8:a8:81:3d:ed:3b:69: 01:b4:04:06:11:52:46:ba:70:87:1b:8d:bc:c9:9c:1c:bc:8f: 08:20:cb:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dynUkUnVEeJvpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDA1OVoXDTI1MDkxNzE0NDA1OVowLzEtMCsGA1UEAxMk Zjk2OWQ0ZjEtZDMyYi00NjdhLTk0M2UtY2ZiNzhhNTlmYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXttiJTWuWvMPLfCSTyRB6Y3WMRaH9061lEn l8ZILx/UHpt3axUfOxd46EK8rPPP04psPuoElQtPVW4axk7v8QRR4fjuSGZFCI25 sdL8M+l0ob2toirMQ86BVlMSH9P5ARsTDyrIrcEHHA1XCHZnODunt5I8fjwVhpEY kYLyCG3Mqo/HvIdRcDCgoEkYFBoY74nV+HvOPYvT18D1vZEdo9sMngXWh6Kdv1Ls tHHm/b8T2VuOmtB/i/w1SVNoc7NDt1CQSUf4axRDRJZdUhGxcGGmfu1ijZpr08LS 8AieIe3v0uINswq0lIYwfdfXocIiaQ5tiz8eZf/of8hlPKu2oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1y3XrxngPiyQd1neLXguR8P/rIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWRhZjg5N2QtZTNjOS0z NTA1LWI1ZGYtNTMwNGI1NTRlYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlackBKqqYVacN7zXv6Q30h4YLM9C1JePfJwSHOR0bv5PNlNHbX04wJ x0heP+LMGH9MKX7H/JkaWgcw9u7Pg0a0F3iSwfCTg18XuqFku394joxoTikAb5SK 6Qk3/sdeyL/IzYRMEThvoGt6nDfRayzN3NHpXlbxI8seU1W6Yr+DoIT9tLpFW5k9 Rr5i+eF6l+MKlS4Gz0OyUIqCRsGauSpAU5fOgCDsJ75Mv+O1F2N+JrLp2qBQnW23 ilanP1ZJUxLg389TULBzcZp2VtuMVxKsEOU5OEQDXbW2DNHgxKyvXXLUuKiBPe07 aQG0BAYRUka6cIcbjbzJnBy8jwggyxw= -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:11 2025 by rpki-client