$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a667be05-da89-3b0e-afc3-248ea60a9fa2.roa File: a667be05-da89-3b0e-afc3-248ea60a9fa2.roa (raw, json) Hash identifier: jiHUzzRpdSz4U+tGda2fOcJk60Nuf//bbkxX9NDf56k= Subject key identifier: 5A:09:E1:40:E0:7F:BE:E0:BC:8E:04:5B:97:E2:3E:4F:93:88:C5:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E778DCF58B7A5EAAFCFCF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a667be05-da89-3b0e-afc3-248ea60a9fa2.roa Signing time: Thu 19 Jun 2025 14:41:46 +0000 ROA not before: Thu 19 Jun 2025 14:41:46 +0000 ROA not after: Wed 17 Sep 2025 14:41:46 +0000 asID: 22773 IP address blocks: 72.217.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:8d:cf:58:b7:a5:ea:af:cf:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:46 2025 GMT Not After : Sep 17 14:41:46 2025 GMT Subject: CN=0fc5bfc8-0106-4f1c-bccc-e7174e4d3912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fc:84:ca:32:14:f7:7b:8d:98:26:ff:60:42: cb:49:01:05:47:7c:e2:bd:fa:64:19:f6:a4:f0:bf: d0:8d:1c:81:f5:33:80:cb:fc:41:0b:6f:e1:a9:e5: 7b:7c:0b:4f:dd:c9:87:79:d4:7b:63:8d:88:b8:01: 5e:b3:a9:f9:20:ce:a5:91:6f:7c:7b:3b:c1:5f:53: 34:84:29:7b:3c:26:26:88:f4:67:86:0d:a9:46:3a: bc:ef:61:38:d2:c8:ca:27:a6:5e:a6:36:ce:d6:4b: 6a:c3:dd:7d:30:9d:b8:6a:5a:8e:82:09:0a:1e:cc: e2:5b:7d:46:77:89:6e:20:a8:71:21:3c:c7:32:6d: 7e:e2:6d:c8:20:53:73:08:0f:39:96:d2:30:4c:65: 05:c8:81:98:73:40:3c:4c:b8:54:1e:fd:3b:6f:9b: 3b:eb:d4:4f:4c:39:17:3d:cf:57:39:68:a8:8b:0e: c3:4a:89:a3:50:51:92:cf:45:45:04:ed:b8:c4:e5: 96:0e:a2:d3:ce:af:44:e4:7d:e6:89:2a:15:2a:4c: 70:06:3b:a8:39:3f:52:97:39:1b:0f:ca:34:b7:a7: 39:1e:00:43:48:00:83:29:6a:5a:38:c6:2d:9b:5d: cf:a0:d1:19:85:a8:ae:54:d5:3e:de:72:25:32:af: 00:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:09:E1:40:E0:7F:BE:E0:BC:8E:04:5B:97:E2:3E:4F:93:88:C5:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a667be05-da89-3b0e-afc3-248ea60a9fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c5:d9:92:bb:32:ba:e6:4d:46:7f:b0:e1:57:36:6c:8f:bd: 81:17:9d:e9:1b:55:8f:cd:66:2d:b0:6c:9a:fa:c6:12:e3:0c: d9:4e:9d:51:fb:d9:3b:e7:25:91:a9:7a:b4:3b:85:89:9d:58: c4:77:c1:d7:12:e1:74:a7:81:4c:08:80:92:bd:af:b8:c6:d4: 7b:ff:b2:2b:37:8c:5c:91:5c:b2:4b:3c:4a:d3:75:59:cf:66: 5e:bb:b7:77:ea:3d:78:67:d0:c7:bd:e7:6b:c7:42:2f:23:5b: e4:5b:8d:69:2d:cb:23:33:f4:6f:54:69:31:85:92:8d:db:95: 7f:83:e7:c0:1d:dd:49:42:93:b9:d3:5f:30:4d:4f:32:34:d3: b6:64:4b:ba:df:ef:81:9a:25:e8:37:a2:7e:35:ea:f4:aa:0b: 8b:05:ff:8b:84:2a:b3:10:3a:8b:2e:f5:a1:1f:c9:fc:92:9d: 9f:99:1d:49:3e:27:21:2a:4c:d7:3e:08:cf:57:c0:81:ba:82: 37:48:77:e0:ed:61:7e:fc:ff:37:34:da:60:39:19:76:c5:d0: 14:6b:b0:7e:fc:1c:38:bb:f8:1e:06:38:5e:36:d8:13:ca:88: ff:2e:fd:45:4f:e1:a4:c4:5c:b4:bf:a2:3c:06:ba:a6:42:2d: 99:b9:d3:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d43PWLel6q/PzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDE0NloXDTI1MDkxNzE0NDE0NlowLzEtMCsGA1UEAxMk MGZjNWJmYzgtMDEwNi00ZjFjLWJjY2MtZTcxNzRlNGQzOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/yEyjIU93uNmCb/YELLSQEFR3zivfpkGfak 8L/QjRyB9TOAy/xBC2/hqeV7fAtP3cmHedR7Y42IuAFes6n5IM6lkW98ezvBX1M0 hCl7PCYmiPRnhg2pRjq872E40sjKJ6ZepjbO1ktqw919MJ24alqOggkKHsziW31G d4luIKhxITzHMm1+4m3IIFNzCA85ltIwTGUFyIGYc0A8TLhUHv07b5s769RPTDkX Pc9XOWioiw7DSomjUFGSz0VFBO24xOWWDqLTzq9E5H3miSoVKkxwBjuoOT9Slzkb D8o0t6c5HgBDSACDKWpaOMYtm13PoNEZhaiuVNU+3nIlMq8AoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoJ4UDgf77gvI4EW5fiPk+TiMXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2N2JlMDUtZGE4OS0z YjBlLWFmYzMtMjQ4ZWE2MGE5ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvF2ZK7MrrmTUZ/sOFXNmyPvYEXnekbVY/NZi2wbJr6xhLjDNlOnVH7 2TvnJZGperQ7hYmdWMR3wdcS4XSngUwIgJK9r7jG1Hv/sis3jFyRXLJLPErTdVnP Zl67t3fqPXhn0Me952vHQi8jW+RbjWktyyMz9G9UaTGFko3blX+D58Ad3UlCk7nT XzBNTzI007ZkS7rf74GaJeg3on416vSqC4sF/4uEKrMQOosu9aEfyfySnZ+ZHUk+ JyEqTNc+CM9XwIG6gjdId+DtYX78/zc02mA5GXbF0BRrsH78HDi7+B4GOF422BPK iP8u/UVP4aTEXLS/ojwGuqZCLZm50wg= -----END CERTIFICATE-----Generated at Wed Jul 2 00:22:37 2025 by rpki-client