$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cac42599-cea4-3ca2-ae02-c7948a638b77.roa File: cac42599-cea4-3ca2-ae02-c7948a638b77.roa (raw, json) Hash identifier: NhT5e4x0UDlRAszjyvr0F/RxywLLR2lX3ZsX5Llko0U= Subject key identifier: 57:C8:0E:F4:61:F2:38:AC:44:89:C6:EA:DE:0A:C0:D1:DB:4B:E0:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E774A80A164597804289AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cac42599-cea4-3ca2-ae02-c7948a638b77.roa Signing time: Thu 19 Jun 2025 14:41:14 +0000 ROA not before: Thu 19 Jun 2025 14:41:14 +0000 ROA not after: Wed 17 Sep 2025 14:41:14 +0000 asID: 22773 IP address blocks: 72.217.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:4a:80:a1:64:59:78:04:28:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:14 2025 GMT Not After : Sep 17 14:41:14 2025 GMT Subject: CN=8a668905-9f08-4dd1-944f-5b7085e12f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a7:04:25:f4:3e:8c:3d:28:17:ea:8d:32:a5: 8d:ae:85:d0:2e:b9:60:16:4c:8f:55:5f:90:a4:f4: 8c:3c:54:52:9c:98:14:fd:38:6b:1e:83:38:23:9b: bf:ea:0b:bc:e4:f6:d0:74:ce:c9:a3:8d:d5:da:9e: de:69:c1:68:87:e8:99:66:94:dd:a3:12:e2:92:f3: 01:53:74:b9:89:0a:b1:f9:d5:43:ac:6c:35:7c:8b: 09:85:fc:16:ed:08:22:5c:12:fc:98:e4:e4:b9:12: 84:c6:61:6a:99:15:86:3f:70:e6:36:5d:b0:2f:6b: 57:e4:bb:2c:1c:e1:fa:8c:88:b8:42:d9:c4:43:e4: 20:7f:8e:28:f4:ee:bc:3d:05:29:7c:cf:e8:f6:64: 42:99:f7:0e:0b:0d:c1:00:97:c9:38:58:a8:73:53: 39:f0:59:c7:cb:0f:ac:38:09:c5:b4:ab:cf:08:b4: 60:fb:ca:41:07:47:b5:3d:fe:31:76:ce:ca:31:b2: 72:a4:f1:63:86:0c:36:cf:7f:58:f0:f4:6d:f9:e5: 6d:77:77:73:48:2a:31:71:92:a7:2a:7c:41:38:7d: 56:78:08:c2:d8:08:c9:60:fd:5a:ba:2b:7a:ac:ec: 9d:0e:4e:f9:23:d8:e9:5a:d8:18:51:b7:84:77:48: 9c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C8:0E:F4:61:F2:38:AC:44:89:C6:EA:DE:0A:C0:D1:DB:4B:E0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cac42599-cea4-3ca2-ae02-c7948a638b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:65:04:28:56:92:85:0e:3a:ef:f6:e5:0b:b0:08:49:9b:ba: 10:4f:72:77:20:aa:fc:8e:d3:38:18:ac:4a:32:85:a2:e5:71: cc:6c:7c:e2:97:d8:0c:b8:71:57:c5:db:77:fa:0a:d1:bf:90: 01:d3:b4:9d:65:9a:61:4c:d8:27:f2:d1:aa:6e:18:db:6d:e7: f8:c5:51:9a:cb:ce:db:e9:e3:ac:23:37:7f:24:4b:39:29:06: 5a:8a:93:d9:83:8f:d6:b3:48:ea:8b:b8:d5:e9:d5:27:1f:67: fc:4d:91:98:18:b8:b3:7c:d1:ad:af:c4:71:34:35:53:d6:79: 9b:8a:77:9d:bc:50:44:35:7f:a5:bb:0b:83:16:52:9e:09:62: 8e:7a:4a:ca:08:a9:ce:f9:e6:ff:1e:e0:30:17:47:95:b9:49: c1:8c:7b:88:15:e6:65:43:c3:84:53:8d:65:31:c7:43:47:c0: f3:c4:49:c5:38:62:f9:bd:cb:53:06:05:f7:c5:9a:f2:a7:de: 2d:22:9a:9f:29:8d:dc:75:40:98:c2:cf:5e:0e:ee:b7:d4:73: 30:2c:ae:e1:e3:81:2b:1a:45:7e:85:8e:62:39:0c:32:15:62: fb:1e:3c:e3:35:30:0c:2d:5d:d2:1e:9b:24:70:cb:d3:2c:5e: 41:0a:9e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d0qAoWRZeAQomsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDExNFoXDTI1MDkxNzE0NDExNFowLzEtMCsGA1UEAxMk OGE2Njg5MDUtOWYwOC00ZGQxLTk0NGYtNWI3MDg1ZTEyZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qcEJfQ+jD0oF+qNMqWNroXQLrlgFkyPVV+Q pPSMPFRSnJgU/ThrHoM4I5u/6gu85PbQdM7Jo43V2p7eacFoh+iZZpTdoxLikvMB U3S5iQqx+dVDrGw1fIsJhfwW7QgiXBL8mOTkuRKExmFqmRWGP3DmNl2wL2tX5Lss HOH6jIi4QtnEQ+Qgf44o9O68PQUpfM/o9mRCmfcOCw3BAJfJOFioc1M58FnHyw+s OAnFtKvPCLRg+8pBB0e1Pf4xds7KMbJypPFjhgw2z39Y8PRt+eVtd3dzSCoxcZKn KnxBOH1WeAjC2AjJYP1auit6rOydDk75I9jpWtgYUbeEd0icnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfIDvRh8jisRInG6t4KwNHbS+CRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2FjNDI1OTktY2VhNC0z Y2EyLWFlMDItYzc5NDhhNjM4Yjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdlBChWkoUOOu/25QuwCEmbuhBPcncgqvyO0zgYrEoyhaLlccxsfOKX 2Ay4cVfF23f6CtG/kAHTtJ1lmmFM2Cfy0apuGNtt5/jFUZrLztvp46wjN38kSzkp BlqKk9mDj9azSOqLuNXp1ScfZ/xNkZgYuLN80a2vxHE0NVPWeZuKd528UEQ1f6W7 C4MWUp4JYo56SsoIqc755v8e4DAXR5W5ScGMe4gV5mVDw4RTjWUxx0NHwPPEScU4 Yvm9y1MGBffFmvKn3i0imp8pjdx1QJjCz14O7rfUczAsruHjgSsaRX6FjmI5DDIV YvsePOM1MAwtXdIemyRwy9MsXkEKnoA= -----END CERTIFICATE-----Generated at Tue Jul 1 16:11:12 2025 by rpki-client