$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a396cfdc-702d-3b61-bc79-03b426f1be3f.roa File: a396cfdc-702d-3b61-bc79-03b426f1be3f.roa (raw, json) Hash identifier: 16yaiHYWR/Fa74K4OgoZBHJ/L8P5RPF3kwex7t1QLCA= Subject key identifier: 5D:9A:57:27:4B:A9:E7:FE:4A:94:A2:64:5A:B6:0B:05:77:10:23:73 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75642D24A41CBF145A4340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a396cfdc-702d-3b61-bc79-03b426f1be3f.roa Signing time: Thu 19 Jun 2025 14:37:25 +0000 ROA not before: Thu 19 Jun 2025 14:37:25 +0000 ROA not after: Wed 17 Sep 2025 14:37:25 +0000 asID: 22773 IP address blocks: 72.200.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:64:2d:24:a4:1c:bf:14:5a:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:25 2025 GMT Not After : Sep 17 14:37:25 2025 GMT Subject: CN=68c193da-696f-4fff-8f54-d64a966d8431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:c8:fc:a3:d3:8e:e5:d6:b9:d7:56:1c:5f: 3b:83:d4:f4:19:89:4c:75:ed:6e:35:18:d5:b9:2d: f6:c2:56:87:e2:be:28:f5:63:42:67:d6:ef:7e:2e: 05:34:cb:b9:33:ad:c8:d6:ff:0a:d9:8f:75:3b:1d: f7:17:ce:b7:89:5c:ed:b8:d7:c0:b8:12:1d:ff:38: 83:64:59:02:a0:80:86:20:23:86:4c:54:e7:4d:f0: b3:b5:5c:39:81:34:9d:c7:29:6a:50:5c:57:43:3f: 54:ff:5d:47:ba:ab:52:9b:dc:da:ba:c5:21:d6:35: 6c:f9:35:f0:cd:4e:ef:9e:5f:26:af:4e:9f:72:71: ce:a5:3c:b1:c1:1b:89:55:7c:80:b3:7b:7f:55:3f: 50:2c:c9:b5:26:4f:33:b8:b0:15:8c:0d:82:69:20: ad:0c:df:71:12:d0:7a:c6:40:df:28:70:87:20:70: cf:61:fa:9d:b1:8d:20:5b:b1:7f:cf:4a:3e:42:01: f8:40:39:98:06:eb:ee:4d:40:19:d5:3e:d4:ac:f0: 0e:3f:92:65:c3:58:18:bb:80:4f:33:3e:e8:eb:82: d5:7f:07:02:ca:c2:e6:a0:f0:28:f8:84:75:9d:57: 61:1b:9f:86:d2:ca:96:83:f8:9f:1e:e2:fe:42:55: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9A:57:27:4B:A9:E7:FE:4A:94:A2:64:5A:B6:0B:05:77:10:23:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a396cfdc-702d-3b61-bc79-03b426f1be3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4a:06:50:ec:3d:4d:f3:d1:27:90:69:8c:ba:8b:cc:83:eb: 1a:12:1a:a2:ad:57:fd:68:73:bc:b8:f6:f0:a2:98:5d:29:03: 01:59:ea:4f:51:7e:f7:76:82:8f:22:1f:b2:b6:85:52:64:2d: a3:e1:cf:99:41:08:d9:da:45:73:30:18:2b:c1:c9:8a:7b:c1: 1b:95:d0:ef:04:23:c8:c3:4f:36:a9:07:79:83:e9:ab:9f:38: 0a:21:ca:f3:4e:0e:2c:7e:bc:77:1d:96:13:5f:cd:5e:dc:0a: 99:d7:b9:31:6a:2c:7e:d4:37:60:aa:58:fe:94:dc:58:0c:05: 06:7c:3b:44:02:0a:f6:49:33:c3:d3:5b:2b:92:0f:19:c2:c2: 52:ad:85:b0:ce:32:70:7b:81:d9:be:01:ef:1c:2d:d0:27:aa: 51:5b:d0:06:08:66:de:16:23:99:72:f8:51:e2:d2:2b:d2:5a: 2e:4d:8f:5a:39:2e:df:a5:3f:16:bc:6f:6a:64:ba:1d:e8:9a: 84:62:60:af:8f:4b:39:7d:8d:04:61:65:36:f8:f6:76:50:48: b3:51:dc:ce:0d:db:80:4b:51:88:c8:a8:17:3f:c5:2c:81:a8: fc:30:ec:53:5e:c9:85:0a:34:bf:48:47:5d:dc:32:30:a3:46: 80:97:a1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dWQtJKQcvxRaQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzcyNVoXDTI1MDkxNzE0MzcyNVowLzEtMCsGA1UEAxMk NjhjMTkzZGEtNjk2Zi00ZmZmLThmNTQtZDY0YTk2NmQ4NDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphfI/KPTjuXWuddWHF87g9T0GYlMde1uNRjV uS32wlaH4r4o9WNCZ9bvfi4FNMu5M63I1v8K2Y91Ox33F863iVztuNfAuBId/ziD ZFkCoICGICOGTFTnTfCztVw5gTSdxylqUFxXQz9U/11HuqtSm9zausUh1jVs+TXw zU7vnl8mr06fcnHOpTyxwRuJVXyAs3t/VT9QLMm1Jk8zuLAVjA2CaSCtDN9xEtB6 xkDfKHCHIHDPYfqdsY0gW7F/z0o+QgH4QDmYBuvuTUAZ1T7UrPAOP5Jlw1gYu4BP Mz7o64LVfwcCysLmoPAo+IR1nVdhG5+G0sqWg/ifHuL+QlWtbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2aVydLqef+SpSiZFq2CwV3ECNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTM5NmNmZGMtNzAyZC0z YjYxLWJjNzktMDNiNDI2ZjFiZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMhSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhKBlDsPU3z0SeQaYy6i8yD6xoSGqKtV/1oc7y49vCimF0pAwFZ6k9R fvd2go8iH7K2hVJkLaPhz5lBCNnaRXMwGCvByYp7wRuV0O8EI8jDTzapB3mD6auf OAohyvNODix+vHcdlhNfzV7cCpnXuTFqLH7UN2CqWP6U3FgMBQZ8O0QCCvZJM8PT WyuSDxnCwlKthbDOMnB7gdm+Ae8cLdAnqlFb0AYIZt4WI5ly+FHi0ivSWi5Nj1o5 Lt+lPxa8b2pkuh3omoRiYK+PSzl9jQRhZTb49nZQSLNR3M4N24BLUYjIqBc/xSyB qPww7FNeyYUKNL9IR13cMjCjRoCXocw= -----END CERTIFICATE-----Generated at Mon Jun 30 23:12:46 2025 by rpki-client