$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2af659f-35d9-3f6c-8ba9-13d9cc98c96f.roa File: d2af659f-35d9-3f6c-8ba9-13d9cc98c96f.roa (raw, json) Hash identifier: hBFYUR89nGejr64ZS1ab231cK8E20ohyPveEtP355VU= Subject key identifier: 7B:06:77:D6:6C:2B:D6:F8:4A:11:06:B7:88:72:1D:BF:81:C5:3C:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7603509D021A16C464C480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2af659f-35d9-3f6c-8ba9-13d9cc98c96f.roa Signing time: Thu 19 Jun 2025 14:38:40 +0000 ROA not before: Thu 19 Jun 2025 14:38:40 +0000 ROA not after: Wed 17 Sep 2025 14:38:40 +0000 asID: 22773 IP address blocks: 72.206.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:03:50:9d:02:1a:16:c4:64:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:40 2025 GMT Not After : Sep 17 14:38:40 2025 GMT Subject: CN=de2a59a5-bc5e-4d4f-9765-6cf31240e100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:17:da:a0:3d:51:35:d1:5c:39:28:39:40: 58:c4:8b:6e:91:29:32:43:f5:fd:cd:83:85:ee:1b: d7:0e:27:f3:fd:cc:7b:62:a0:de:75:e9:d7:31:5f: ee:cf:d0:02:26:bb:8d:5a:b6:66:8b:fa:ff:5d:99: 3f:90:42:55:22:c0:8a:5f:f4:67:3d:75:8c:84:a7: 43:8b:0a:a0:05:b6:1f:c9:5f:60:43:62:22:f1:c6: 33:f8:7f:65:57:96:24:26:a2:da:55:85:a6:1d:7e: f5:11:81:c9:f7:44:77:c6:d5:10:ff:3c:d2:d0:8f: c3:87:66:f1:63:2c:3d:0e:ac:4b:e0:75:df:71:2c: 0f:61:8d:51:c1:a9:4d:40:c8:fc:e4:0f:6b:7e:f7: 72:46:dd:df:92:18:b2:25:74:a9:88:91:8e:c9:21: f4:e9:cc:b6:4f:7e:08:b5:70:f9:20:ef:92:d5:30: a3:6b:66:ea:61:bf:24:d9:49:ae:50:e5:83:98:51: 5c:d4:97:55:59:2b:9a:49:95:e0:86:78:ed:cb:39: 40:94:c1:83:b9:e6:1f:75:b3:8a:83:74:37:f8:c7: ac:13:cc:7a:5e:59:0a:c7:97:b5:dc:23:da:f4:a5: 4d:bf:5e:53:25:0d:07:af:22:2e:eb:29:d1:29:b6: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:06:77:D6:6C:2B:D6:F8:4A:11:06:B7:88:72:1D:BF:81:C5:3C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2af659f-35d9-3f6c-8ba9-13d9cc98c96f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f6:ff:29:7b:43:6e:7e:ed:70:ef:64:50:66:b2:d3:fc:39: b1:ba:0f:79:f3:5e:b7:9d:3a:61:33:8e:31:45:d0:08:be:1c: e9:a3:48:e4:d3:37:c9:79:9e:52:95:9d:6d:17:bb:dc:8a:75: 8d:25:e7:dc:b3:ce:2a:b8:db:a5:28:26:ec:63:1f:14:15:2b: 26:1e:b3:89:50:66:cd:da:fb:87:5e:07:85:04:ac:ed:c5:70: 6e:0e:b9:b9:da:86:4b:98:f4:cb:eb:54:6d:ad:ab:05:d9:23: a3:7f:0b:fd:96:46:bc:0f:2a:bd:f0:22:5e:0f:30:93:67:9a: 1a:25:5e:70:51:c1:46:93:eb:e6:f5:c7:b1:e1:c9:c4:bb:40: 8b:a4:5e:c0:06:96:90:97:65:29:4e:2e:a8:d9:39:f3:d2:d6: 32:fd:e1:18:70:a2:a1:62:70:90:29:41:48:0a:b4:35:4f:bd: d4:f3:bb:fd:c1:0b:6c:a8:3d:99:bb:12:e7:23:0a:e4:83:0c: 59:3d:3a:0f:03:3b:71:a1:8b:e9:02:bc:fc:d8:4f:b8:e6:57: 2b:c3:44:53:f9:99:09:08:47:d0:07:6f:58:2e:f6:03:4d:7b: 97:fb:e9:1c:ed:b5:4c:d8:53:7b:09:2f:f6:5f:8c:af:31:3d: 4f:7e:91:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dgNQnQIaFsRkxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzg0MFoXDTI1MDkxNzE0Mzg0MFowLzEtMCsGA1UEAxMk ZGUyYTU5YTUtYmM1ZS00ZDRmLTk3NjUtNmNmMzEyNDBlMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfkX2qA9UTXRXDkoOUBYxItukSkyQ/X9zYOF 7hvXDifz/cx7YqDedenXMV/uz9ACJruNWrZmi/r/XZk/kEJVIsCKX/RnPXWMhKdD iwqgBbYfyV9gQ2Ii8cYz+H9lV5YkJqLaVYWmHX71EYHJ90R3xtUQ/zzS0I/Dh2bx Yyw9DqxL4HXfcSwPYY1RwalNQMj85A9rfvdyRt3fkhiyJXSpiJGOySH06cy2T34I tXD5IO+S1TCja2bqYb8k2UmuUOWDmFFc1JdVWSuaSZXghnjtyzlAlMGDueYfdbOK g3Q3+MesE8x6XlkKx5e13CPa9KVNv15TJQ0HryIu6ynRKbZj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsGd9ZsK9b4ShEGt4hyHb+BxTzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDJhZjY1OWYtMzVkOS0z ZjZjLThiYTktMTNkOWNjOThjOTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC32/yl7Q25+7XDvZFBmstP8ObG6D3nzXredOmEzjjFF0Ai+HOmjSOTT N8l5nlKVnW0Xu9yKdY0l59yzziq426UoJuxjHxQVKyYes4lQZs3a+4deB4UErO3F cG4OubnahkuY9MvrVG2tqwXZI6N/C/2WRrwPKr3wIl4PMJNnmholXnBRwUaT6+b1 x7HhycS7QIukXsAGlpCXZSlOLqjZOfPS1jL94RhwoqFicJApQUgKtDVPvdTzu/3B C2yoPZm7EucjCuSDDFk9Og8DO3Ghi+kCvPzYT7jmVyvDRFP5mQkIR9AHb1gu9gNN e5f76RzttUzYU3sJL/ZfjK8xPU9+kaE= -----END CERTIFICATE-----Generated at Mon Jun 30 11:52:26 2025 by rpki-client