$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0af34f1-408e-3282-926b-1c3a335382f3.roa File: b0af34f1-408e-3282-926b-1c3a335382f3.roa (raw, json) Hash identifier: jnSYerkTmz1gGBT2foEsfW9GajdaOmATpS6X8QGy31g= Subject key identifier: 10:7A:D2:B6:DA:5D:C2:E6:4C:DA:B6:7D:FA:85:56:E6:9A:E0:82:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E764FFCF8E7B9E22531F0F8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0af34f1-408e-3282-926b-1c3a335382f3.roa Signing time: Thu 19 Jun 2025 14:39:16 +0000 ROA not before: Thu 19 Jun 2025 14:39:16 +0000 ROA not after: Wed 17 Sep 2025 14:39:16 +0000 asID: 22773 IP address blocks: 72.208.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:4f:fc:f8:e7:b9:e2:25:31:f0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:16 2025 GMT Not After : Sep 17 14:39:16 2025 GMT Subject: CN=80522e45-c21e-4ba6-8812-717e912f47cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:fb:24:b0:96:f3:d5:7f:0b:5d:d9:5f:ae: a8:bf:c4:c4:6e:81:5c:56:d9:cb:62:4d:65:ef:5b: 1c:c7:f0:60:0e:51:40:b8:e9:30:d6:c7:ba:30:52: cb:5f:68:27:28:ab:36:85:92:57:33:7b:dc:7c:4e: 67:e9:53:b7:e0:87:52:b9:6b:06:41:f0:d9:03:11: 94:ea:b0:f1:31:d8:46:db:24:80:35:2a:a5:6f:89: b2:d0:ca:1a:fe:6b:c9:2a:9a:51:f6:d5:5d:9f:06: e9:c6:d0:3d:6a:21:5c:64:a8:28:1f:5b:63:28:c5: 7a:3c:ff:86:af:c0:ff:20:ee:e3:e5:35:d1:9d:7b: bd:5a:a4:fc:73:54:d3:61:fb:1d:e9:99:48:aa:e5: b3:45:af:c5:da:bf:c3:41:06:f4:f0:ec:84:2c:ec: ed:05:53:ca:a8:29:bb:93:a0:c8:b8:7c:e5:49:77: d2:4d:1d:d5:1d:dd:ea:2d:25:40:f4:90:a1:f8:9b: 5a:61:8d:d1:cd:62:f4:8e:6f:91:f2:8c:d0:5b:14: 93:34:33:9f:bf:d8:42:3b:b7:08:96:17:cd:a2:cb: 36:d3:6d:c9:f8:79:de:4f:45:3e:e4:28:e3:26:be: 1a:f8:c4:21:c6:60:b2:72:e3:a8:86:5b:fd:7b:3b: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7A:D2:B6:DA:5D:C2:E6:4C:DA:B6:7D:FA:85:56:E6:9A:E0:82:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0af34f1-408e-3282-926b-1c3a335382f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e8:21:5f:ba:cd:4e:e8:46:c1:f6:33:36:1d:b2:bf:66:92: 84:c9:ab:46:ea:a7:94:5c:a8:22:55:e4:3c:47:5e:05:02:d7: 83:a6:0e:26:fb:60:0a:41:21:01:67:88:4d:d0:d6:5a:ad:8a: 69:ce:42:90:d0:ca:20:82:60:74:7b:d1:4d:01:4b:88:34:cb: bc:12:27:44:c8:66:b8:d9:f3:73:b3:29:01:70:c3:fb:cd:12: 6a:98:bb:0b:07:10:a9:f9:9b:78:ba:02:4b:38:58:41:35:22: 71:aa:18:de:6b:0f:4c:0b:4e:d5:2f:0c:3a:c1:55:da:53:1e: 24:7f:0f:d5:36:ed:80:33:45:04:c9:6c:be:1b:38:a4:82:d4: 1b:43:9b:fd:df:b3:f0:fe:b4:6c:e6:2c:22:1a:8c:8a:50:a5: 89:0e:13:95:8c:e4:ae:79:17:3c:e8:f0:c2:06:18:b3:bf:31: 51:03:99:87:ab:52:08:57:8b:ec:4c:18:14:43:fb:6e:57:48: 34:64:a1:7f:31:33:4e:cb:11:e1:a5:e4:e0:b7:0f:cc:8f:4a: a6:12:b4:9b:b0:e1:0a:fb:7e:e4:f8:9f:89:69:90:26:2c:8a: d9:1d:64:00:c0:f8:c5:a4:b8:b8:3a:65:d3:38:e4:fc:e0:25: 02:80:6e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dk/8+Oe54iUx8PgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkxNloXDTI1MDkxNzE0MzkxNlowLzEtMCsGA1UEAxMk ODA1MjJlNDUtYzIxZS00YmE2LTg4MTItNzE3ZTkxMmY0N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRL7JLCW89V/C13ZX66ov8TEboFcVtnLYk1l 71scx/BgDlFAuOkw1se6MFLLX2gnKKs2hZJXM3vcfE5n6VO34IdSuWsGQfDZAxGU 6rDxMdhG2ySANSqlb4my0Moa/mvJKppR9tVdnwbpxtA9aiFcZKgoH1tjKMV6PP+G r8D/IO7j5TXRnXu9WqT8c1TTYfsd6ZlIquWzRa/F2r/DQQb08OyELOztBVPKqCm7 k6DIuHzlSXfSTR3VHd3qLSVA9JCh+JtaYY3RzWL0jm+R8ozQWxSTNDOfv9hCO7cI lhfNoss2023J+HneT0U+5CjjJr4a+MQhxmCycuOohlv9ezuwiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBB60rbaXcLmTNq2ffqFVuaa4IKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjBhZjM0ZjEtNDA4ZS0z MjgyLTkyNmItMWMzYTMzNTM4MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/oIV+6zU7oRsH2MzYdsr9mkoTJq0bqp5RcqCJV5DxHXgUC14OmDib7 YApBIQFniE3Q1lqtimnOQpDQyiCCYHR70U0BS4g0y7wSJ0TIZrjZ83OzKQFww/vN EmqYuwsHEKn5m3i6Aks4WEE1InGqGN5rD0wLTtUvDDrBVdpTHiR/D9U27YAzRQTJ bL4bOKSC1BtDm/3fs/D+tGzmLCIajIpQpYkOE5WM5K55Fzzo8MIGGLO/MVEDmYer UghXi+xMGBRD+25XSDRkoX8xM07LEeGl5OC3D8yPSqYStJuw4Qr7fuT4n4lpkCYs itkdZADA+MWkuLg6ZdM45PzgJQKAbtY= -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:46 2025 by rpki-client