$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2a8a3fb-9d93-3491-bb86-8c036b8f403d.roa File: c2a8a3fb-9d93-3491-bb86-8c036b8f403d.roa (raw, json) Hash identifier: NxG/0qEKJ10jUXK69AXZbB50yrcE1vu2B7CZKaMau0I= Subject key identifier: C5:B1:9C:0F:3B:18:55:F5:43:AC:44:20:30:C5:0E:D3:01:D3:F5:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7675054068E1C46036C880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2a8a3fb-9d93-3491-bb86-8c036b8f403d.roa Signing time: Thu 19 Jun 2025 14:39:33 +0000 ROA not before: Thu 19 Jun 2025 14:39:33 +0000 ROA not after: Wed 17 Sep 2025 14:39:33 +0000 asID: 22773 IP address blocks: 72.208.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:75:05:40:68:e1:c4:60:36:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:33 2025 GMT Not After : Sep 17 14:39:33 2025 GMT Subject: CN=52ba4b27-a819-4f33-abd6-f2c4bb9bfe99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:96:5f:14:98:72:90:e8:e7:9c:01:f7:7f: 6e:cd:32:09:32:f5:ff:a6:fd:00:92:a0:57:06:6f: 84:25:c3:b9:08:62:60:3c:70:84:80:1d:0c:1f:6d: 21:a8:d7:6e:fe:5e:00:2f:d8:43:3b:00:8c:ad:b4: 00:18:da:f0:25:e7:02:54:45:9d:f8:34:5e:39:36: b8:95:1f:29:34:f8:c4:ae:51:d9:b1:74:6a:0d:e6: c1:9d:e4:e3:4b:31:e2:a3:0a:43:0f:31:74:1c:9d: 0e:b9:a6:1d:d8:86:e8:67:71:a7:e2:b7:da:f6:46: d1:0f:0e:e5:d5:f0:90:ed:c5:f3:75:7e:ff:0f:e8: 2a:82:6e:e6:30:21:bd:43:32:24:dd:dd:97:5c:52: cf:26:ee:58:16:85:b8:b4:8d:e5:e5:97:94:53:26: 87:4c:fe:3c:d0:38:01:17:9f:6a:15:67:d8:69:9a: d2:fa:31:c1:c9:39:d4:6d:ce:e8:48:fa:d3:e8:d8: bb:ab:44:e3:d0:12:e7:f1:7b:e6:d4:ce:fd:fc:d4: ba:f3:84:3f:1f:9e:3e:4a:4d:b6:6d:06:b3:37:f5: 96:11:c1:fd:7c:5e:c3:f1:4c:d1:a1:8f:54:c1:68: 73:4b:83:6d:0b:6a:0c:1e:7e:a3:cc:87:57:ee:9a: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B1:9C:0F:3B:18:55:F5:43:AC:44:20:30:C5:0E:D3:01:D3:F5:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2a8a3fb-9d93-3491-bb86-8c036b8f403d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:49:95:60:4d:50:b5:10:e5:15:b4:65:5d:e1:86:aa:72:2c: 2a:be:a0:88:52:24:f6:6c:3e:53:af:c8:08:32:10:45:e1:35: 5e:62:a6:29:8f:c2:31:fa:00:f1:78:32:a0:89:2e:5d:7b:ab: 60:05:99:7c:f1:77:6c:68:c2:0e:44:c2:7e:b5:3d:a1:0a:9e: 1c:a7:32:e0:0e:ca:a0:03:68:af:c9:be:64:f8:91:e9:58:f4: a8:a5:eb:9a:6b:a3:f2:d6:bb:25:ab:c0:44:e5:5a:a8:e3:5a: a4:84:01:6f:e8:67:81:05:8c:d4:be:ac:04:6a:c3:c3:10:1b: e3:7a:7a:2b:e5:a2:c1:20:85:c9:14:b6:08:a4:b1:e4:30:19: 8c:75:fb:de:b6:88:b0:5f:1a:1f:88:d0:f9:95:5a:34:ec:ed: e5:42:1d:d0:72:06:e7:1e:5a:52:17:4b:ae:66:0b:5c:ab:9b: 3d:c0:7d:50:ab:fd:eb:8d:f1:0f:1f:22:57:7d:fa:7a:d1:98: fe:33:eb:2b:71:85:a3:5c:12:0b:eb:f1:08:15:33:ba:6c:72: df:08:55:66:84:df:4b:d0:af:75:99:f1:5d:f8:fa:b0:0a:7b: 7b:fc:c5:18:14:04:74:75:52:bd:40:45:d4:ce:38:46:8b:08: 39:01:5e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dnUFQGjhxGA2yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkzM1oXDTI1MDkxNzE0MzkzM1owLzEtMCsGA1UEAxMk NTJiYTRiMjctYTgxOS00ZjMzLWFiZDYtZjJjNGJiOWJmZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9WWXxSYcpDo55wB939uzTIJMvX/pv0AkqBX Bm+EJcO5CGJgPHCEgB0MH20hqNdu/l4AL9hDOwCMrbQAGNrwJecCVEWd+DReOTa4 lR8pNPjErlHZsXRqDebBneTjSzHiowpDDzF0HJ0OuaYd2IboZ3Gn4rfa9kbRDw7l 1fCQ7cXzdX7/D+gqgm7mMCG9QzIk3d2XXFLPJu5YFoW4tI3l5ZeUUyaHTP480DgB F59qFWfYaZrS+jHByTnUbc7oSPrT6Ni7q0Tj0BLn8Xvm1M79/NS684Q/H54+Sk22 bQazN/WWEcH9fF7D8UzRoY9UwWhzS4NtC2oMHn6jzIdX7prQMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWxnA87GFX1Q6xEIDDFDtMB0/VQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzJhOGEzZmItOWQ5My0z NDkxLWJiODYtOGMwMzZiOGY0MDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5JlWBNULUQ5RW0ZV3hhqpyLCq+oIhSJPZsPlOvyAgyEEXhNV5ipimP wjH6APF4MqCJLl17q2AFmXzxd2xowg5Ewn61PaEKnhynMuAOyqADaK/JvmT4kelY 9Kil65pro/LWuyWrwETlWqjjWqSEAW/oZ4EFjNS+rARqw8MQG+N6eivlosEghckU tgikseQwGYx1+962iLBfGh+I0PmVWjTs7eVCHdByBuceWlIXS65mC1yrmz3AfVCr /euN8Q8fIld9+nrRmP4z6ytxhaNcEgvr8QgVM7psct8IVWaE30vQr3WZ8V34+rAK e3v8xRgUBHR1Ur1ARdTOOEaLCDkBXg4= -----END CERTIFICATE-----Generated at Tue Jul 1 07:23:53 2025 by rpki-client