$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb6e95b1-8774-36c1-a7a3-2273fe86c312.roa File: bb6e95b1-8774-36c1-a7a3-2273fe86c312.roa (raw, json) Hash identifier: cX054mZVSygQe12ae+sd3dAM/tF3GIrg/CEKgCMuDFc= Subject key identifier: BA:FB:DC:F0:FA:9E:68:C5:10:70:51:DC:42:7B:3E:93:00:DB:37:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75CA04FA7698EA7B009700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb6e95b1-8774-36c1-a7a3-2273fe86c312.roa Signing time: Thu 19 Jun 2025 14:38:13 +0000 ROA not before: Thu 19 Jun 2025 14:38:13 +0000 ROA not after: Wed 17 Sep 2025 14:38:13 +0000 asID: 22773 IP address blocks: 72.201.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:ca:04:fa:76:98:ea:7b:00:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:13 2025 GMT Not After : Sep 17 14:38:13 2025 GMT Subject: CN=b5d4046d-1cd0-4e50-95a7-663e9e893a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:93:cc:f6:c5:41:18:4a:d1:ee:d0:0d:2d: e2:1f:12:4d:1a:d3:c6:07:bb:fe:fe:11:ba:c1:68: 8b:a3:18:ae:cb:16:dd:cb:9c:51:a0:82:ad:5c:55: f6:4a:e1:f1:42:b3:c1:8c:2f:d1:26:c6:86:dc:73: 15:a0:35:64:ea:97:7e:ca:be:8d:56:2c:13:7f:fe: b7:cb:da:56:7a:71:75:22:03:41:1d:91:1b:b5:1f: ad:8e:df:3b:89:a6:40:62:ec:86:ba:4c:c4:a5:3f: 31:67:4b:f3:f2:6c:34:cb:68:f2:4f:10:25:a2:0e: 25:cc:d9:f4:ba:ee:0d:56:eb:55:e2:5c:7e:60:4a: 5d:2f:db:58:0d:09:94:a3:e4:3f:a1:8b:34:81:56: 0c:f5:33:c6:e3:7b:c0:81:d2:6f:12:49:1a:1f:5d: be:1c:c0:66:54:8c:f9:cd:a6:65:73:fa:3c:ad:8e: 6a:4b:ac:5f:a4:14:e6:24:68:c1:34:f0:77:ee:a0: 4b:ca:b9:a9:28:c3:b2:49:32:ad:9f:25:de:f9:9d: 6e:d8:ff:be:4c:90:c1:a6:29:a8:dd:22:69:75:8c: 00:28:f7:cf:c9:db:04:a4:a7:27:fb:a1:0d:27:ea: 87:1b:97:7d:d2:04:10:11:79:ed:fb:3a:d4:06:99: 17:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FB:DC:F0:FA:9E:68:C5:10:70:51:DC:42:7B:3E:93:00:DB:37:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb6e95b1-8774-36c1-a7a3-2273fe86c312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f4:47:55:a3:b9:1b:6e:d9:0d:8c:82:cb:cb:b8:47:69:1e: 94:98:42:d9:86:30:ed:f1:7f:f9:41:bc:14:5b:86:0c:c3:44: 1f:c7:48:fd:4f:b5:41:e2:68:9b:d9:92:53:af:32:04:58:c1: 36:f6:e7:2e:5d:05:69:a7:3d:70:3b:cf:ba:eb:cf:ff:01:e6: 94:b5:26:83:df:e3:2d:3e:f4:08:30:19:a7:e9:18:4b:83:38: 30:c0:88:2b:68:b1:f6:d7:19:a3:11:43:72:11:cf:51:d4:11: 62:03:7d:88:14:22:33:32:85:f5:dc:25:8f:60:bc:a9:95:87: 34:fa:b3:88:6f:bc:f9:6a:62:ad:bc:4a:92:e2:19:4f:1c:13: b7:08:a9:15:62:1b:cf:10:35:e9:da:cb:f2:be:21:cf:3a:6a: 5f:53:51:76:87:d2:6b:f6:4c:79:eb:b3:a8:19:6a:66:99:10: 2f:c4:83:d9:66:66:52:ed:db:6e:60:e6:51:e7:e6:8b:9f:5f: 85:32:40:58:23:06:98:50:1a:1f:9c:96:5e:59:00:b8:ce:7c: c4:28:4a:01:c0:38:be:a9:2a:1d:97:fe:f2:ae:34:58:b2:41: a5:b3:2e:35:f4:93:45:e1:4a:fb:41:9e:82:b2:be:34:1a:18: 7e:58:5a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dcoE+naY6nsAlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgxM1oXDTI1MDkxNzE0MzgxM1owLzEtMCsGA1UEAxMk YjVkNDA0NmQtMWNkMC00ZTUwLTk1YTctNjYzZTllODkzYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq+TzPbFQRhK0e7QDS3iHxJNGtPGB7v+/hG6 wWiLoxiuyxbdy5xRoIKtXFX2SuHxQrPBjC/RJsaG3HMVoDVk6pd+yr6NViwTf/63 y9pWenF1IgNBHZEbtR+tjt87iaZAYuyGukzEpT8xZ0vz8mw0y2jyTxAlog4lzNn0 uu4NVutV4lx+YEpdL9tYDQmUo+Q/oYs0gVYM9TPG43vAgdJvEkkaH12+HMBmVIz5 zaZlc/o8rY5qS6xfpBTmJGjBNPB37qBLyrmpKMOySTKtnyXe+Z1u2P++TJDBpimo 3SJpdYwAKPfPydsEpKcn+6ENJ+qHG5d90gQQEXnt+zrUBpkXNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr73PD6nmjFEHBR3EJ7PpMA2zeRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI2ZTk1YjEtODc3NC0z NmMxLWE3YTMtMjI3M2ZlODZjMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv0R1WjuRtu2Q2MgsvLuEdpHpSYQtmGMO3xf/lBvBRbhgzDRB/HSP1P tUHiaJvZklOvMgRYwTb25y5dBWmnPXA7z7rrz/8B5pS1JoPf4y0+9AgwGafpGEuD ODDAiCtosfbXGaMRQ3IRz1HUEWIDfYgUIjMyhfXcJY9gvKmVhzT6s4hvvPlqYq28 SpLiGU8cE7cIqRViG88QNenay/K+Ic86al9TUXaH0mv2THnrs6gZamaZEC/Eg9lm ZlLt225g5lHn5oufX4UyQFgjBphQGh+cll5ZALjOfMQoSgHAOL6pKh2X/vKuNFiy QaWzLjX0k0XhSvtBnoKyvjQaGH5YWhM= -----END CERTIFICATE-----Generated at Tue Jul 1 18:32:41 2025 by rpki-client