$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5f9b35-ba69-3d66-9a23-dcf68fcdce8a.roa File: cb5f9b35-ba69-3d66-9a23-dcf68fcdce8a.roa (raw, json) Hash identifier: ordqlFdXZF+tHlGkpvHefA9U149e4OH5/K+UEDbbRtU= Subject key identifier: 89:61:2A:EA:19:9C:E9:77:86:27:FA:F3:7F:9A:1D:5F:62:1B:C2:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E760D8D1B3AB2EE6AF9C440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5f9b35-ba69-3d66-9a23-dcf68fcdce8a.roa Signing time: Thu 19 Jun 2025 14:38:45 +0000 ROA not before: Thu 19 Jun 2025 14:38:45 +0000 ROA not after: Wed 17 Sep 2025 14:38:45 +0000 asID: 22773 IP address blocks: 72.206.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:0d:8d:1b:3a:b2:ee:6a:f9:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:45 2025 GMT Not After : Sep 17 14:38:45 2025 GMT Subject: CN=2737ae48-0468-45dc-8cab-eff8ad7d4378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:61:aa:9e:c1:9d:3d:59:fd:25:62:49:2b: f6:25:bc:ca:fd:8d:84:32:6c:f4:4a:a8:88:77:e0: 1c:d4:7d:b2:8a:41:f3:75:21:14:06:e0:5d:e4:3c: 5a:7c:f3:a6:bd:ae:e6:85:f0:1e:a4:ea:80:73:9b: 70:5f:08:19:d7:a4:68:cd:3e:ef:19:95:78:22:c5: 46:45:5d:a4:bb:73:97:07:aa:13:ac:6a:11:6c:8f: 06:a4:4c:37:37:5b:a2:ef:da:d5:32:15:13:c8:59: 94:27:d0:df:21:9e:9e:5d:c4:b8:3e:3d:85:9d:de: e1:23:f0:63:33:7a:cf:9d:cf:8a:4f:10:e2:ed:af: 1e:7d:34:14:d8:83:ef:f1:72:1e:00:6b:7e:92:20: 8b:fb:52:a8:37:2d:6c:c1:8d:ae:9c:14:14:fe:82: 82:45:8c:46:84:ad:d9:f9:03:3e:b9:f2:22:99:69: 31:70:2f:be:3a:d2:c5:db:75:10:54:01:6f:79:cc: c7:58:33:1c:7d:3c:8a:b6:8d:a7:e3:22:8e:b4:ab: 3b:07:34:3e:7d:47:d8:66:72:23:91:e1:d4:be:7a: 2d:67:21:6b:1c:db:b9:92:31:17:e9:01:05:b4:5c: a7:05:9e:18:ed:2b:d8:ed:5b:ad:87:44:0c:03:24: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:61:2A:EA:19:9C:E9:77:86:27:FA:F3:7F:9A:1D:5F:62:1B:C2:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5f9b35-ba69-3d66-9a23-dcf68fcdce8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3d:cf:a1:09:a3:72:a9:6a:f7:62:a1:9d:4f:94:a4:0c:50: 08:aa:50:4d:65:9c:3a:18:4b:1c:1b:cd:22:40:61:65:d1:63: f1:a8:ce:54:fe:fd:97:d2:c6:a0:46:96:68:ab:b4:51:32:bb: b8:b4:9d:89:d6:2a:3b:ed:d6:4c:f9:44:92:5d:bd:a5:db:de: 30:58:6b:2f:72:d2:e8:1c:1e:5a:e8:fe:82:57:4a:2e:9e:ab: 6c:5d:c5:08:7a:cc:db:01:ce:71:63:b0:86:2d:1c:54:eb:8c: 09:d2:22:f5:47:9b:19:cf:5b:76:9c:a6:3f:6b:4c:6b:6f:13: f7:f9:44:40:06:b9:06:bf:f1:96:c5:24:03:12:7f:89:82:c0: f8:f1:d0:89:ad:e6:9d:e2:88:96:e5:9a:27:27:51:cc:c7:59: c4:39:fb:a8:3c:5d:13:f0:2d:bf:4d:6c:b9:60:37:16:a1:7a: 39:b6:73:5e:3c:8e:67:40:18:fd:ab:16:59:bd:42:d9:da:c8: ab:ea:4e:34:10:2e:d7:5e:c2:f9:44:76:d5:d7:3e:44:63:eb: 85:e3:52:7d:eb:56:14:65:3f:20:e1:c7:03:8f:6c:75:e8:61: 3c:f7:d9:ce:c5:fc:85:e6:ae:52:a5:c7:f5:81:1b:c9:f5:73: ef:bf:9f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dg2NGzqy7mr5xEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzg0NVoXDTI1MDkxNzE0Mzg0NVowLzEtMCsGA1UEAxMk MjczN2FlNDgtMDQ2OC00NWRjLThjYWItZWZmOGFkN2Q0Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb5hqp7BnT1Z/SViSSv2JbzK/Y2EMmz0SqiI d+Ac1H2yikHzdSEUBuBd5DxafPOmva7mhfAepOqAc5twXwgZ16RozT7vGZV4IsVG RV2ku3OXB6oTrGoRbI8GpEw3N1ui79rVMhUTyFmUJ9DfIZ6eXcS4Pj2Fnd7hI/Bj M3rPnc+KTxDi7a8efTQU2IPv8XIeAGt+kiCL+1KoNy1swY2unBQU/oKCRYxGhK3Z +QM+ufIimWkxcC++OtLF23UQVAFveczHWDMcfTyKto2n4yKOtKs7BzQ+fUfYZnIj keHUvnotZyFrHNu5kjEX6QEFtFynBZ4Y7SvY7Vuth0QMAyTI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlhKuoZnOl3hif683+aHV9iG8KvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2I1ZjliMzUtYmE2OS0z ZDY2LTlhMjMtZGNmNjhmY2RjZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI9z6EJo3KpavdioZ1PlKQMUAiqUE1lnDoYSxwbzSJAYWXRY/GozlT+ /ZfSxqBGlmirtFEyu7i0nYnWKjvt1kz5RJJdvaXb3jBYay9y0ugcHlro/oJXSi6e q2xdxQh6zNsBznFjsIYtHFTrjAnSIvVHmxnPW3acpj9rTGtvE/f5REAGuQa/8ZbF JAMSf4mCwPjx0Imt5p3iiJblmicnUczHWcQ5+6g8XRPwLb9NbLlgNxahejm2c148 jmdAGP2rFlm9QtnayKvqTjQQLtdewvlEdtXXPkRj64XjUn3rVhRlPyDhxwOPbHXo YTz32c7F/IXmrlKlx/WBG8n1c++/nyQ= -----END CERTIFICATE-----Generated at Tue Jul 1 09:25:09 2025 by rpki-client