$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f29b514-0bc1-31d6-ad7d-512f5bd7042f.roa File: 9f29b514-0bc1-31d6-ad7d-512f5bd7042f.roa (raw, json) Hash identifier: gs/g2P1qIfJ9ObRyHHig//7tMG6IBucfez29xk2Nff4= Subject key identifier: 66:63:70:3B:0B:E6:92:B9:43:DC:60:9E:FF:72:B5:ED:AB:91:ED:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A46A5B1F873DF6C20AE0B0900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f29b514-0bc1-31d6-ad7d-512f5bd7042f.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 22773 IP address blocks: 72.192.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:b1:f8:73:df:6c:20:ae:0b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=3e22207a-836b-4702-ad59-8a88b5fa9989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:e8:c8:85:78:86:27:98:8a:e2:5f:06:20: bd:e2:81:b5:f1:a5:0b:c8:85:7a:92:24:d4:ac:99: 0d:ac:ed:d3:ad:61:6f:b6:4c:c0:3c:b8:a8:c9:1b: 15:84:bc:f3:ec:04:b7:f2:cb:54:f8:d2:30:1c:ee: b2:73:5f:64:a4:67:9b:6c:bb:df:1e:83:8f:38:61: 32:e2:9c:1d:06:93:16:b5:f8:8d:91:71:bf:58:38: 00:0c:9e:29:67:c8:a0:a0:5a:c6:c6:1c:70:42:51: 4e:09:58:a5:1b:82:11:ca:cb:76:7e:1e:a1:7d:c6: 58:c9:09:3d:14:dd:f4:60:5a:d5:d4:92:cf:22:24: e5:54:ee:04:6a:47:20:04:a8:82:4d:bf:99:ab:94: 73:0b:1f:94:f2:b5:b5:44:34:aa:53:e6:6c:ed:81: 43:ef:1e:1a:14:5b:ce:0e:54:40:e3:a8:41:24:97: a7:6b:46:c4:24:e7:05:cc:7e:2e:6a:19:49:e9:39: 7e:9d:c5:a1:eb:12:ca:fb:d9:4f:f6:9e:ac:dc:b0: 59:dc:c5:ec:f0:2f:5f:9f:cf:28:b7:f4:4e:2a:17: ea:95:03:84:af:96:94:5c:11:6a:93:7b:49:9e:64: 6e:82:aa:34:b1:cf:92:f4:83:25:7b:fe:75:86:11: ab:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:63:70:3B:0B:E6:92:B9:43:DC:60:9E:FF:72:B5:ED:AB:91:ED:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f29b514-0bc1-31d6-ad7d-512f5bd7042f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:29:03:a4:c5:6e:b0:60:c0:49:f4:b9:aa:10:80:bc:65:93: 4c:82:95:83:73:dc:59:55:f2:4a:9f:01:47:af:6e:d6:1d:94: 8a:0d:0a:57:53:19:2d:3d:5f:5b:5c:f1:2c:3f:51:fb:88:28: 1f:bd:95:08:29:f6:85:d8:92:d6:54:08:8d:35:a7:d0:c7:7b: 17:66:21:df:21:77:7a:a8:a7:a0:36:04:a8:62:6d:73:da:b6: cf:65:df:66:50:b9:17:d5:a4:aa:9f:e5:ad:3d:14:49:a5:2d: f3:d1:3b:f8:e9:87:00:55:ba:1f:9c:4f:81:a5:e0:5a:c7:89: 95:71:8b:f7:e1:83:53:35:ef:48:08:91:64:67:fb:bd:cc:5c: 80:90:c4:85:8f:8e:15:32:fe:93:13:58:35:34:8b:6c:75:c8: ff:a2:76:86:cf:86:f0:c0:1a:c5:dc:9a:ed:c3:2f:e6:50:c9: b9:a0:bf:26:e2:ef:f1:6a:54:de:44:14:e8:12:4d:11:f9:a5: ac:bb:57:0e:47:11:48:38:87:3e:00:79:4d:71:db:a0:de:e6: ed:63:50:0a:81:db:b3:61:1f:b3:4b:93:99:28:e3:58:ba:0f: 45:44:d1:75:04:cf:8d:28:bd:98:fc:fd:f8:de:a0:46:f5:fd: c6:a5:e3:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpbH4c99sIK4LCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk M2UyMjIwN2EtODM2Yi00NzAyLWFkNTktOGE4OGI1ZmE5OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgfoyIV4hieYiuJfBiC94oG18aULyIV6kiTU rJkNrO3TrWFvtkzAPLioyRsVhLzz7AS38stU+NIwHO6yc19kpGebbLvfHoOPOGEy 4pwdBpMWtfiNkXG/WDgADJ4pZ8igoFrGxhxwQlFOCVilG4IRyst2fh6hfcZYyQk9 FN30YFrV1JLPIiTlVO4EakcgBKiCTb+Zq5RzCx+U8rW1RDSqU+Zs7YFD7x4aFFvO DlRA46hBJJena0bEJOcFzH4uahlJ6Tl+ncWh6xLK+9lP9p6s3LBZ3MXs8C9fn88o t/ROKhfqlQOEr5aUXBFqk3tJnmRugqo0sc+S9IMle/51hhGrfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZjcDsL5pK5Q9xgnv9yte2rke1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWYyOWI1MTQtMGJjMS0z MWQ2LWFkN2QtNTEyZjViZDcwNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESMDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACopA6TFbrBgwEn0uaoQgLxlk0yClYNz3FlV8kqfAUevbtYdlIoNCldT GS09X1tc8Sw/UfuIKB+9lQgp9oXYktZUCI01p9DHexdmId8hd3qop6A2BKhibXPa ts9l32ZQuRfVpKqf5a09FEmlLfPRO/jphwBVuh+cT4Gl4FrHiZVxi/fhg1M170gI kWRn+73MXICQxIWPjhUy/pMTWDU0i2x1yP+idobPhvDAGsXcmu3DL+ZQybmgvybi 7/FqVN5EFOgSTRH5pay7Vw5HEUg4hz4AeU1x26De5u1jUAqB27NhH7NLk5ko41i6 D0VE0XUEz40ovZj8/fjeoEb1/cal43I= -----END CERTIFICATE-----Generated at Tue Jul 1 16:47:59 2025 by rpki-client