$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceaffd38-1440-3984-a7ac-7ad4f11c210d.roa File: ceaffd38-1440-3984-a7ac-7ad4f11c210d.roa (raw, json) Hash identifier: rBSc5KxXddp/yaBQoxy0TY/ekYM9F7XkR6j16gzxh2Q= Subject key identifier: 67:6C:7D:92:10:A5:16:B1:32:5D:D0:56:DF:13:2F:9A:85:35:8B:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76A39839F30F1276973D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceaffd38-1440-3984-a7ac-7ad4f11c210d.roa Signing time: Thu 19 Jun 2025 14:39:55 +0000 ROA not before: Thu 19 Jun 2025 14:39:55 +0000 ROA not after: Wed 17 Sep 2025 14:39:55 +0000 asID: 22773 IP address blocks: 72.210.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:a3:98:39:f3:0f:12:76:97:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:55 2025 GMT Not After : Sep 17 14:39:55 2025 GMT Subject: CN=d79f1bf0-9da0-43cb-9528-a9985c4c8b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3d:5c:2b:af:16:2d:88:68:2e:a1:1c:85:8a: 72:fe:8e:4d:31:0d:e0:35:c5:0a:7a:3d:b3:2c:9f: c6:2b:8b:bf:0c:5a:61:fb:18:40:8c:e3:f5:9d:4f: 29:5b:68:1b:12:b9:98:ce:16:5d:b3:f4:26:c2:a7: 5f:56:27:c8:13:04:23:41:ba:0e:94:d2:f3:e1:c8: b1:5a:16:c6:07:e5:ae:53:e0:62:cd:07:d6:4e:55: d1:b2:cb:fd:4e:d7:20:ca:d6:ca:f3:e8:b4:8a:ed: 20:c2:d0:26:81:2c:9a:b8:69:1f:67:14:f2:fe:8f: 51:b6:5d:d1:fe:a9:20:ad:5d:da:af:1c:1a:33:8b: 59:d0:3c:ca:c1:20:c3:bd:4e:da:73:aa:8d:4f:86: 95:3e:25:7f:89:5a:f5:03:5a:3a:fa:fe:9b:b0:0f: d6:c3:8b:fd:8c:e1:69:02:69:a0:41:9f:86:8c:2a: ff:19:6a:a9:c7:5a:42:9e:6c:63:48:24:d4:9f:85: 85:dc:10:52:d6:27:eb:6b:d5:73:0b:a3:f3:45:cb: 0d:a0:51:03:c3:cb:8a:ff:97:ec:76:29:4e:b5:ca: a0:50:ae:3f:24:2b:f6:c2:1f:34:2f:7b:1a:d3:1c: b8:e1:05:52:5a:56:1e:a6:69:e4:bd:07:c0:0a:f0: 56:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6C:7D:92:10:A5:16:B1:32:5D:D0:56:DF:13:2F:9A:85:35:8B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceaffd38-1440-3984-a7ac-7ad4f11c210d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e9:43:a5:f1:2d:92:61:d8:f6:a7:e4:99:d9:58:e6:e8:3e: bd:e0:c1:4b:46:ef:b9:61:b8:37:02:de:1b:be:4c:0b:58:05: 5c:80:32:cb:a8:e6:d0:0a:11:68:1c:11:0c:32:b2:65:c1:6c: 55:dc:23:66:39:bd:fc:01:87:da:8c:f5:16:d8:91:4e:ef:94: 19:89:7c:5f:bd:75:f1:50:ce:20:99:14:de:7c:23:cb:ff:7d: 59:63:2d:f7:b1:99:9a:b5:af:7d:32:11:d1:00:c1:e7:7d:94: 06:ec:08:71:25:8a:08:a0:d1:6b:bd:25:44:10:c9:77:77:4f: 52:40:1c:fd:78:c6:b0:9e:69:5d:a2:52:7d:c2:4f:4a:68:47: 95:7b:a4:0a:01:18:77:81:ae:a6:19:fd:80:83:96:c3:cb:bf: 2b:25:a4:b3:38:2e:7a:63:40:a3:02:36:95:67:3d:3f:a0:77: 26:9e:82:b6:f8:57:d8:b3:07:be:bc:10:47:34:27:e1:7e:c3: 5a:c3:5e:3f:65:9c:81:bb:65:54:a4:84:8e:a6:d2:36:ba:8e: ab:cd:6f:ff:4c:c6:57:fd:4f:a4:e5:0f:3b:f1:10:bc:db:d3: 5c:4e:da:b6:4b:50:a2:e9:e2:e3:31:b5:ff:75:bb:4c:57:bc: e5:56:fc:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dqOYOfMPEnaXPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzk1NVoXDTI1MDkxNzE0Mzk1NVowLzEtMCsGA1UEAxMk ZDc5ZjFiZjAtOWRhMC00M2NiLTk1MjgtYTk5ODVjNGM4YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7z1cK68WLYhoLqEchYpy/o5NMQ3gNcUKej2z LJ/GK4u/DFph+xhAjOP1nU8pW2gbErmYzhZds/QmwqdfVifIEwQjQboOlNLz4cix WhbGB+WuU+BizQfWTlXRssv9TtcgytbK8+i0iu0gwtAmgSyauGkfZxTy/o9Rtl3R /qkgrV3arxwaM4tZ0DzKwSDDvU7ac6qNT4aVPiV/iVr1A1o6+v6bsA/Ww4v9jOFp AmmgQZ+GjCr/GWqpx1pCnmxjSCTUn4WF3BBS1ifra9VzC6PzRcsNoFEDw8uK/5fs dilOtcqgUK4/JCv2wh80L3sa0xy44QVSWlYepmnkvQfACvBWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdsfZIQpRaxMl3QVt8TL5qFNYucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2VhZmZkMzgtMTQ0MC0z OTg0LWE3YWMtN2FkNGYxMWMyMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNIvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/pQ6XxLZJh2Pan5JnZWOboPr3gwUtG77lhuDcC3hu+TAtYBVyAMsuo 5tAKEWgcEQwysmXBbFXcI2Y5vfwBh9qM9RbYkU7vlBmJfF+9dfFQziCZFN58I8v/ fVljLfexmZq1r30yEdEAwed9lAbsCHEligig0Wu9JUQQyXd3T1JAHP14xrCeaV2i Un3CT0poR5V7pAoBGHeBrqYZ/YCDlsPLvyslpLM4LnpjQKMCNpVnPT+gdyaegrb4 V9izB768EEc0J+F+w1rDXj9lnIG7ZVSkhI6m0ja6jqvNb/9Mxlf9T6TlDzvxELzb 01xO2rZLUKLp4uMxtf91u0xXvOVW/OA= -----END CERTIFICATE-----Generated at Tue Jul 1 09:11:36 2025 by rpki-client