$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0d25545-969d-39c4-b543-a69658b7ad68.roa File: d0d25545-969d-39c4-b543-a69658b7ad68.roa (raw, json) Hash identifier: 1/P8Y4NRwAjy5fQgRbmRh2uvEZlryxKyz1pL8EvqiP0= Subject key identifier: CF:B9:55:FE:19:34:76:22:57:68:CA:61:87:AD:89:F7:95:C1:84:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E780401C4591AFF5AC4DE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0d25545-969d-39c4-b543-a69658b7ad68.roa Signing time: Thu 19 Jun 2025 14:42:42 +0000 ROA not before: Thu 19 Jun 2025 14:42:42 +0000 ROA not after: Wed 17 Sep 2025 14:42:42 +0000 asID: 22773 IP address blocks: 72.223.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:78:04:01:c4:59:1a:ff:5a:c4:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:42 2025 GMT Not After : Sep 17 14:42:42 2025 GMT Subject: CN=2d29927b-bfd7-4074-914c-cd2d42309eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:22:3d:6e:88:74:0b:b2:83:b8:45:e2:31:c1: ca:be:37:f1:54:05:a8:bb:59:63:d5:c6:f9:ed:fa: 45:7a:f2:d7:1e:52:b9:41:4d:07:b0:16:06:6e:ec: c5:04:8c:81:4f:9e:6f:e3:f7:a5:a4:d6:db:0f:a6: 75:1d:78:4f:91:f3:d1:e6:4e:7d:ce:fe:a0:16:2d: 9d:c7:52:4f:67:44:d4:74:79:41:c4:ed:4b:24:93: 77:1d:a3:50:22:eb:cc:32:95:c5:ec:97:c2:5d:3a: 07:6e:55:06:3b:2a:52:b5:73:53:52:00:87:0b:77: 11:88:aa:a0:f0:47:0f:a2:00:ad:6b:50:84:7b:d6: 5a:eb:e3:79:45:82:3c:e8:01:43:20:27:30:bb:72: db:6c:97:cb:46:39:ba:99:5a:31:5a:43:ba:77:59: ad:b0:7d:32:16:1e:de:ec:88:ef:04:e5:0e:50:3c: 86:d9:cb:5c:dc:87:7a:0c:9b:23:02:48:a4:84:0b: 62:85:3d:bd:51:c5:ad:1b:a3:6b:a3:47:f7:10:a5: 87:ac:ba:b8:83:e8:5e:7b:8e:9e:3f:4c:42:13:13: 3c:41:2e:d1:d7:30:3a:5b:e8:b4:89:e3:3e:cb:dc: 94:75:e2:05:3d:b5:1b:9c:fe:bb:87:5a:10:2b:fb: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B9:55:FE:19:34:76:22:57:68:CA:61:87:AD:89:F7:95:C1:84:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0d25545-969d-39c4-b543-a69658b7ad68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:53:be:c1:56:cf:9b:ae:17:cb:4c:b2:f6:da:8a:c0:97:59: e4:93:f6:58:19:f9:03:13:a8:80:51:44:99:31:28:ed:08:18: 2c:0b:3f:c1:25:4c:a2:bf:55:d2:75:8f:c2:cd:f9:0d:99:91: d0:cb:c8:f5:4a:1e:bd:eb:0a:d3:ae:b8:f8:26:13:8a:41:61: 9a:e9:a5:e3:1d:9d:d7:f9:f0:9a:2a:d5:01:39:65:de:2c:d6: 8c:fc:61:21:49:63:ce:68:79:3c:02:20:fa:fd:2a:b5:3f:63: 5f:49:18:db:00:08:f1:41:9d:a8:ca:d5:2d:53:48:85:66:e9: fe:c3:26:cd:27:a7:23:e7:46:4f:d5:c0:88:de:7c:18:cf:d5: bc:22:37:8b:30:77:ff:b9:19:5d:12:d9:3d:b3:3f:d7:3e:7e: ac:e6:ba:d9:72:8d:a3:a8:02:db:95:e1:a4:03:29:e9:6a:7f: 80:4e:d8:cd:3f:a3:57:62:77:d2:1f:ce:ba:2f:54:ab:25:bc: f8:b3:ea:aa:0f:42:e8:06:3b:f1:2f:97:25:f4:b0:19:57:52: 94:a2:0a:61:2b:3f:71:a6:a8:d6:b1:63:aa:f1:c7:ab:91:81: 84:ae:c4:3b:f2:c5:e5:77:45:e9:54:8d:0e:e7:21:60:52:29: 89:14:e1:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+eAQBxFka/1rE3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDI0MloXDTI1MDkxNzE0NDI0MlowLzEtMCsGA1UEAxMk MmQyOTkyN2ItYmZkNy00MDc0LTkxNGMtY2QyZDQyMzA5ZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyI9boh0C7KDuEXiMcHKvjfxVAWou1lj1cb5 7fpFevLXHlK5QU0HsBYGbuzFBIyBT55v4/elpNbbD6Z1HXhPkfPR5k59zv6gFi2d x1JPZ0TUdHlBxO1LJJN3HaNQIuvMMpXF7JfCXToHblUGOypStXNTUgCHC3cRiKqg 8EcPogCta1CEe9Za6+N5RYI86AFDICcwu3LbbJfLRjm6mVoxWkO6d1mtsH0yFh7e 7IjvBOUOUDyG2ctc3Id6DJsjAkikhAtihT29UcWtG6Nro0f3EKWHrLq4g+hee46e P0xCExM8QS7R1zA6W+i0ieM+y9yUdeIFPbUbnP67h1oQK/s0vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+5Vf4ZNHYiV2jKYYetifeVwYRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDBkMjU1NDUtOTY5ZC0z OWM0LWI1NDMtYTY5NjU4YjdhZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN9kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpTvsFWz5uuF8tMsvbaisCXWeST9lgZ+QMTqIBRRJkxKO0IGCwLP8El TKK/VdJ1j8LN+Q2ZkdDLyPVKHr3rCtOuuPgmE4pBYZrppeMdndf58Joq1QE5Zd4s 1oz8YSFJY85oeTwCIPr9KrU/Y19JGNsACPFBnajK1S1TSIVm6f7DJs0npyPnRk/V wIjefBjP1bwiN4swd/+5GV0S2T2zP9c+fqzmutlyjaOoAtuV4aQDKelqf4BO2M0/ o1did9IfzrovVKslvPiz6qoPQugGO/EvlyX0sBlXUpSiCmErP3GmqNaxY6rxx6uR gYSuxDvyxeV3RelUjQ7nIWBSKYkU4Wo= -----END CERTIFICATE-----Generated at Tue Jul 1 14:17:27 2025 by rpki-client