$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1ddcfef-e3fa-359c-b830-e811db71b1a4.roa File: a1ddcfef-e3fa-359c-b830-e811db71b1a4.roa (raw, json) Hash identifier: CzUmrviE+wMmBcmaJYnRWeWY1wiOZlAdgvmk2chwH8E= Subject key identifier: AD:02:60:E4:67:82:82:71:A9:75:DE:98:24:B2:E0:06:57:B9:6F:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76C3D6C976BB2CA066C160 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1ddcfef-e3fa-359c-b830-e811db71b1a4.roa Signing time: Thu 19 Jun 2025 14:40:11 +0000 ROA not before: Thu 19 Jun 2025 14:40:11 +0000 ROA not after: Wed 17 Sep 2025 14:40:11 +0000 asID: 22773 IP address blocks: 72.211.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:c3:d6:c9:76:bb:2c:a0:66:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:11 2025 GMT Not After : Sep 17 14:40:11 2025 GMT Subject: CN=19d8cb71-c403-4f0f-94cb-36a3dd0536fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:71:47:59:82:eb:71:d6:ae:20:10:51:a2: cd:0a:4d:bb:55:aa:b5:bb:2d:5f:17:17:f7:f7:4a: e8:4d:48:e9:4a:17:1b:9b:ad:1e:ac:db:fb:38:2e: f8:dd:70:93:03:5c:be:0c:58:e8:7f:9f:d8:04:ec: 94:ca:f3:2a:a1:6a:f8:92:ad:45:15:5c:5a:c4:68: ce:c7:84:0f:b6:32:01:32:70:1f:28:40:65:f7:1f: fa:1b:ce:95:fe:f6:a3:4a:f8:48:0c:16:42:f9:af: 80:70:ae:3f:0a:25:a9:1e:14:aa:25:73:53:39:b7: a6:58:01:8f:13:18:8a:30:eb:af:5e:de:e5:a5:db: 50:8b:88:75:e5:3f:b0:2e:97:82:80:54:d1:18:97: 03:57:74:c2:18:53:bb:1b:58:27:67:3e:b2:16:c0: dd:ce:a4:9f:7f:fa:f9:54:c7:18:ea:5c:1a:d9:ac: 83:dd:dd:8c:0d:40:ea:d7:90:da:61:5d:e1:4c:b0: 46:73:6a:ef:96:d0:8a:55:0f:8e:4e:3f:4e:a5:5f: 69:db:49:a9:9b:8f:bb:5e:27:9e:43:a0:c5:84:be: 01:d0:48:5e:5c:41:22:62:bb:d7:7b:f9:41:e9:95: 7f:84:51:99:4d:9a:5a:0e:9c:1b:bc:64:81:3c:78: de:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:02:60:E4:67:82:82:71:A9:75:DE:98:24:B2:E0:06:57:B9:6F:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1ddcfef-e3fa-359c-b830-e811db71b1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4f:92:8d:39:c2:d3:36:d9:6d:c8:1f:cc:06:dc:8a:bc:56: ab:f8:6b:11:3c:6e:9b:4c:5e:70:58:a2:e5:9d:2d:73:ee:f2: df:c6:62:8e:23:eb:85:15:44:75:0b:c8:31:b2:45:df:e2:a1: 21:08:37:64:47:17:e2:f5:9d:89:6e:d1:44:94:55:51:38:7a: 76:c7:13:2c:40:5b:d6:df:d5:d1:d0:05:34:b9:48:d2:15:5e: 79:6a:ae:4a:2d:ae:09:1f:b0:d5:7b:c4:c6:98:94:cd:83:af: eb:e1:ca:ee:76:7b:9a:ac:0a:6d:23:f5:c7:f6:e5:fa:de:63: 92:37:7a:f8:d6:7d:aa:14:25:0a:46:75:5f:84:fd:f3:d3:95: 50:20:d6:0c:3d:d7:0a:65:6f:d5:90:05:61:57:70:41:63:2e: ac:58:c5:a6:f2:ba:7f:4f:c4:c2:58:80:0c:02:9d:42:4e:15: d9:f9:2c:0d:0e:5c:9b:98:b3:b4:6c:5c:85:b3:6a:67:dc:42: 0e:15:4e:0c:d4:de:7e:01:9e:5f:40:6f:a1:d2:21:a3:7b:59: 49:44:bc:1a:3f:ec:50:75:0c:08:bc:02:0c:85:1d:38:73:75: 65:fc:4c:db:84:23:b6:ae:ed:58:d8:67:c2:99:54:66:2d:33: 7d:f5:58:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dsPWyXa7LKBmwWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAxMVoXDTI1MDkxNzE0NDAxMVowLzEtMCsGA1UEAxMk MTlkOGNiNzEtYzQwMy00ZjBmLTk0Y2ItMzZhM2RkMDUzNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdNxR1mC63HWriAQUaLNCk27Vaq1uy1fFxf3 90roTUjpShcbm60erNv7OC743XCTA1y+DFjof5/YBOyUyvMqoWr4kq1FFVxaxGjO x4QPtjIBMnAfKEBl9x/6G86V/vajSvhIDBZC+a+AcK4/CiWpHhSqJXNTObemWAGP ExiKMOuvXt7lpdtQi4h15T+wLpeCgFTRGJcDV3TCGFO7G1gnZz6yFsDdzqSff/r5 VMcY6lwa2ayD3d2MDUDq15DaYV3hTLBGc2rvltCKVQ+OTj9OpV9p20mpm4+7Xiee Q6DFhL4B0EheXEEiYrvXe/lB6ZV/hFGZTZpaDpwbvGSBPHje9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0CYORngoJxqXXemCSy4AZXuW8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTFkZGNmZWYtZTNmYS0z NTljLWI4MzAtZTgxMWRiNzFiMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFPko05wtM22W3IH8wG3Iq8Vqv4axE8bptMXnBYouWdLXPu8t/GYo4j 64UVRHULyDGyRd/ioSEIN2RHF+L1nYlu0USUVVE4enbHEyxAW9bf1dHQBTS5SNIV XnlqrkotrgkfsNV7xMaYlM2Dr+vhyu52e5qsCm0j9cf25freY5I3evjWfaoUJQpG dV+E/fPTlVAg1gw91wplb9WQBWFXcEFjLqxYxabyun9PxMJYgAwCnUJOFdn5LA0O XJuYs7RsXIWzamfcQg4VTgzU3n4Bnl9Ab6HSIaN7WUlEvBo/7FB1DAi8AgyFHThz dWX8TNuEI7au7VjYZ8KZVGYtM331WDw= -----END CERTIFICATE-----Generated at Mon Jun 30 09:58:10 2025 by rpki-client