$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac2892cf-b8fd-34c2-820a-f2eefef7a5d5.roa File: ac2892cf-b8fd-34c2-820a-f2eefef7a5d5.roa (raw, json) Hash identifier: LyOEh09nSmuXst9Ydv14nVh26Fk8AD/8WNXX4NJi3vA= Subject key identifier: 22:B8:70:84:9A:B7:82:7B:C8:4E:78:B4:0E:F2:7A:A2:E2:8A:CC:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77FA60D644F5A984808B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac2892cf-b8fd-34c2-820a-f2eefef7a5d5.roa Signing time: Thu 19 Jun 2025 14:42:37 +0000 ROA not before: Thu 19 Jun 2025 14:42:37 +0000 ROA not after: Wed 17 Sep 2025 14:42:37 +0000 asID: 22773 IP address blocks: 72.223.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:fa:60:d6:44:f5:a9:84:80:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:37 2025 GMT Not After : Sep 17 14:42:37 2025 GMT Subject: CN=58b6d744-9d0e-48e7-83e3-0bd3abf2b4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:46:80:03:9d:de:6d:05:e8:c7:41:07:e1: a2:8c:36:ad:fb:62:e0:2f:ab:d3:c1:37:65:43:d4: 85:a2:49:29:ee:3a:c0:d7:52:2b:ae:60:42:16:a4: ab:f8:af:f2:a7:3a:1c:e2:7f:27:d9:28:b7:c4:9f: b2:f2:75:b4:83:21:f9:16:4f:a7:f3:5c:54:90:80: 21:1d:7d:c2:6d:23:e2:ca:82:a7:2b:1c:fd:69:ae: 98:7f:e6:1a:27:b7:4f:53:75:4d:22:a0:da:0b:10: 85:eb:18:bc:93:46:b8:7f:e3:8c:1e:30:14:28:37: 51:33:fc:0e:d9:17:c6:62:50:a6:5f:ad:2a:7a:85: d1:d6:a5:d5:4a:f4:24:56:26:9d:1d:23:37:0a:04: f0:89:93:8d:71:60:39:a3:ce:32:5a:03:bc:ff:db: 8b:c2:41:6f:17:a3:36:4b:22:56:44:ce:40:25:64: d9:1e:a6:1e:25:d3:92:58:14:0a:5f:e6:f1:09:dd: ea:3e:65:21:8f:a5:b1:a2:3b:ab:c8:fc:88:cc:2d: 24:5d:d4:50:aa:2c:4c:65:65:b6:6e:0b:18:9f:f8: 03:2d:b4:68:e9:b3:a2:5c:45:51:35:4c:bc:5b:62: 08:63:15:eb:1c:4b:b9:2a:d7:a0:df:c9:93:59:89: 7a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B8:70:84:9A:B7:82:7B:C8:4E:78:B4:0E:F2:7A:A2:E2:8A:CC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac2892cf-b8fd-34c2-820a-f2eefef7a5d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a2:09:09:ae:8e:14:d7:80:f7:1e:f1:c9:2e:35:6c:de:05: 21:85:ff:91:bc:a3:9e:7f:1d:78:90:e0:b1:0e:9d:76:89:a2: 6c:3c:fa:6d:49:ed:d9:c5:3e:18:69:d7:95:fb:59:7a:10:ad: b8:20:13:de:d7:03:d6:29:84:cf:99:26:17:bf:46:f0:38:84: 53:33:f8:97:00:f1:ae:d6:d6:57:57:42:23:70:52:81:0a:aa: d2:1b:26:eb:ca:95:67:99:5c:01:17:23:bd:e1:d9:83:8e:58: 17:57:11:7c:be:dd:81:63:ae:08:ac:7b:b6:b9:5f:a1:bd:1c: 7a:05:e0:2a:d8:b1:51:ad:1d:32:06:36:b3:9f:38:d0:6f:04: ff:ad:0c:53:19:a4:42:f1:f2:8c:e2:a5:14:24:29:e8:be:01: a5:80:68:b5:a0:d8:52:ad:f8:cb:7f:f7:4b:47:be:53:48:42: 3a:0b:be:3f:a1:b7:0d:a9:58:3a:43:da:6f:0f:60:1d:39:4e: 28:af:70:c5:cd:9e:05:a6:47:47:3a:01:5d:3d:ce:eb:30:7e: b3:78:b5:22:0d:e0:5f:d2:9f:5c:83:23:e2:91:ad:c8:cd:c5: a9:c2:1a:4e:55:5b:b4:64:27:80:b8:1f:32:89:e0:b2:08:62: e5:bf:cc:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d/pg1kT1qYSAiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIzN1oXDTI1MDkxNzE0NDIzN1owLzEtMCsGA1UEAxMk NThiNmQ3NDQtOWQwZS00OGU3LTgzZTMtMGJkM2FiZjJiNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKhGgAOd3m0F6MdBB+GijDat+2LgL6vTwTdl Q9SFokkp7jrA11IrrmBCFqSr+K/ypzoc4n8n2Si3xJ+y8nW0gyH5Fk+n81xUkIAh HX3CbSPiyoKnKxz9aa6Yf+YaJ7dPU3VNIqDaCxCF6xi8k0a4f+OMHjAUKDdRM/wO 2RfGYlCmX60qeoXR1qXVSvQkViadHSM3CgTwiZONcWA5o84yWgO8/9uLwkFvF6M2 SyJWRM5AJWTZHqYeJdOSWBQKX+bxCd3qPmUhj6WxojuryPyIzC0kXdRQqixMZWW2 bgsYn/gDLbRo6bOiXEVRNUy8W2IIYxXrHEu5Kteg38mTWYl68wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK4cISat4J7yE54tA7yeqLiisyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWMyODkyY2YtYjhmZC0z NGMyLTgyMGEtZjJlZWZlZjdhNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2iCQmujhTXgPce8ckuNWzeBSGF/5G8o55/HXiQ4LEOnXaJomw8+m1J 7dnFPhhp15X7WXoQrbggE97XA9YphM+ZJhe/RvA4hFMz+JcA8a7W1ldXQiNwUoEK qtIbJuvKlWeZXAEXI73h2YOOWBdXEXy+3YFjrgise7a5X6G9HHoF4CrYsVGtHTIG NrOfONBvBP+tDFMZpELx8ozipRQkKei+AaWAaLWg2FKt+Mt/90tHvlNIQjoLvj+h tw2pWDpD2m8PYB05TiivcMXNngWmR0c6AV09zuswfrN4tSIN4F/Sn1yDI+KRrcjN xanCGk5VW7RkJ4C4HzKJ4LIIYuW/zAQ= -----END CERTIFICATE-----Generated at Tue Jul 1 14:19:05 2025 by rpki-client