$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf819e71-ef47-3aa8-9ba9-8228ff1f99f5.roa File: bf819e71-ef47-3aa8-9ba9-8228ff1f99f5.roa (raw, json) Hash identifier: 6ZtR0xrgd/yQSSgKoRNY5BeGSL/OuYYASgeBaL5V2qw= Subject key identifier: 7F:3A:F2:E7:80:D3:53:1D:4D:0A:BB:7A:7F:5A:96:6B:CB:67:BC:88 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77C7ECBE9ED62AE2475600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf819e71-ef47-3aa8-9ba9-8228ff1f99f5.roa Signing time: Thu 19 Jun 2025 14:42:13 +0000 ROA not before: Thu 19 Jun 2025 14:42:13 +0000 ROA not after: Wed 17 Sep 2025 14:42:13 +0000 asID: 22773 IP address blocks: 72.222.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:c7:ec:be:9e:d6:2a:e2:47:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:13 2025 GMT Not After : Sep 17 14:42:13 2025 GMT Subject: CN=d1e369f6-cf85-4164-90d1-1cd760aed649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:19:28:a6:d5:c2:64:24:ab:ea:9e:c7:24: 5c:a0:77:d5:14:41:2e:46:3c:2c:fc:69:e6:ce:70: 0b:22:4e:2c:ea:e4:8b:01:d9:f0:bc:32:80:c8:e1: f1:6c:d9:f5:5e:42:3d:c6:e4:cf:2b:d2:12:9a:ad: 98:b6:b9:df:31:1b:56:6b:d7:08:62:2e:97:f4:52: 79:be:55:72:1e:8c:3f:cb:5d:7b:b6:1e:b9:a2:5c: ec:f1:0c:9a:d5:b1:5d:a9:f8:a1:42:05:cd:ef:4c: 17:87:b6:22:11:64:cf:98:3d:1a:78:72:b6:ea:af: 21:2e:25:d3:4f:84:68:8e:32:1f:77:99:9e:ff:4a: 09:e7:10:0d:a4:9d:3c:79:be:5d:f3:35:6c:5a:36: ac:c1:16:b1:29:b4:f4:bc:84:3c:65:af:80:4d:dd: da:e2:7d:5a:b2:01:4c:67:e3:a8:12:22:a8:a5:28: a9:cd:c4:92:63:ea:9e:6a:91:05:b4:64:53:e1:e1: a8:3f:38:32:09:dd:39:aa:fd:6e:6e:94:c0:bf:bf: d5:26:45:27:fe:30:5e:f7:7d:ab:e0:f9:8b:9a:4c: e0:91:c8:34:6b:d5:de:3a:3a:e7:ce:4c:19:37:62: e9:4b:de:6d:b8:e8:31:79:f1:c9:71:67:e4:26:62: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3A:F2:E7:80:D3:53:1D:4D:0A:BB:7A:7F:5A:96:6B:CB:67:BC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf819e71-ef47-3aa8-9ba9-8228ff1f99f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:15:46:3e:d9:27:02:84:ef:4a:bc:d0:52:fc:6b:52:ee:1d: b2:df:a1:9d:b2:92:82:13:60:aa:b1:18:d4:b0:49:bd:6c:0b: 5e:9a:ee:03:8f:6d:20:12:af:c6:c9:b9:22:d7:61:b0:c6:d1: a7:34:4e:a4:19:0a:25:e4:df:15:e9:1c:e3:dc:e3:38:b7:f2: e1:f9:ba:17:dd:f0:34:41:39:24:e2:98:73:23:6d:60:14:79: df:37:3e:bd:e4:db:34:19:41:7f:0c:6e:27:27:53:75:82:de: f2:49:87:8a:c7:2c:2e:6f:fe:4f:bc:0d:62:0d:1a:72:ad:44: 31:bb:0f:73:b2:ff:ab:85:18:94:56:c1:42:9f:00:73:1e:0d: f9:d7:2e:d8:e0:b8:a3:f8:db:bc:5d:0c:5e:e2:84:b5:3b:9b: d3:ab:c9:05:a6:91:3b:95:8f:f4:bf:14:87:29:2d:38:05:64: cc:83:ef:d6:6e:cd:bf:67:c8:b2:46:d8:c2:87:f0:ce:86:23: 90:de:12:ab:e9:27:3e:82:8e:72:c3:34:e6:b4:43:ca:6e:63: 8d:09:21:0d:00:e5:7b:e4:bc:80:9b:02:0a:d7:7d:66:52:db: d2:97:14:90:91:6f:88:72:1b:61:f7:0f:40:4e:31:ed:97:41: 85:3a:78:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d8fsvp7WKuJHVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIxM1oXDTI1MDkxNzE0NDIxM1owLzEtMCsGA1UEAxMk ZDFlMzY5ZjYtY2Y4NS00MTY0LTkwZDEtMWNkNzYwYWVkNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL4ZKKbVwmQkq+qexyRcoHfVFEEuRjws/Gnm znALIk4s6uSLAdnwvDKAyOHxbNn1XkI9xuTPK9ISmq2YtrnfMRtWa9cIYi6X9FJ5 vlVyHow/y117th65olzs8Qya1bFdqfihQgXN70wXh7YiEWTPmD0aeHK26q8hLiXT T4RojjIfd5me/0oJ5xANpJ08eb5d8zVsWjaswRaxKbT0vIQ8Za+ATd3a4n1asgFM Z+OoEiKopSipzcSSY+qeapEFtGRT4eGoPzgyCd05qv1ubpTAv7/VJkUn/jBe932r 4PmLmkzgkcg0a9XeOjrnzkwZN2LpS95tuOgxefHJcWfkJmJfAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH868ueA01MdTQq7en9almvLZ7yIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmY4MTllNzEtZWY0Ny0z YWE4LTliYTktODIyOGZmMWY5OWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQVRj7ZJwKE70q80FL8a1LuHbLfoZ2ykoITYKqxGNSwSb1sC16a7gOP bSASr8bJuSLXYbDG0ac0TqQZCiXk3xXpHOPc4zi38uH5uhfd8DRBOSTimHMjbWAU ed83Pr3k2zQZQX8MbicnU3WC3vJJh4rHLC5v/k+8DWINGnKtRDG7D3Oy/6uFGJRW wUKfAHMeDfnXLtjguKP427xdDF7ihLU7m9OryQWmkTuVj/S/FIcpLTgFZMyD79Zu zb9nyLJG2MKH8M6GI5DeEqvpJz6CjnLDNOa0Q8puY40JIQ0A5XvkvICbAgrXfWZS 29KXFJCRb4hyG2H3D0BOMe2XQYU6eIc= -----END CERTIFICATE-----Generated at Tue Jul 1 08:19:57 2025 by rpki-client