$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5d7e7d1-6825-328b-8c98-79b1eb2e7f5a.roa File: d5d7e7d1-6825-328b-8c98-79b1eb2e7f5a.roa (raw, json) Hash identifier: VHXTx0aC/1Yy3Lk+p4gPP8dnjKfNcbtv9ASEO6531pg= Subject key identifier: 98:1A:8B:E2:6F:2E:54:F4:D7:53:CB:DC:D2:BA:99:60:E7:02:D5:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E767DD7A52D43391FB10C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5d7e7d1-6825-328b-8c98-79b1eb2e7f5a.roa Signing time: Thu 19 Jun 2025 14:39:38 +0000 ROA not before: Thu 19 Jun 2025 14:39:38 +0000 ROA not after: Wed 17 Sep 2025 14:39:38 +0000 asID: 22773 IP address blocks: 72.208.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:7d:d7:a5:2d:43:39:1f:b1:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:38 2025 GMT Not After : Sep 17 14:39:38 2025 GMT Subject: CN=db7aeac9-7107-4cbb-b813-7bc16e93ecd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0c:7a:7e:75:0a:e2:f0:7c:46:b7:5a:04:7d: aa:ba:3c:48:0d:96:c1:ce:1c:1b:fe:54:c9:5e:96: cc:d5:ab:13:5a:0c:99:05:18:87:43:d7:5c:0b:50: 3d:b9:ae:21:62:12:f0:c6:38:82:f0:7a:42:f9:9d: 46:89:86:7d:66:6a:15:c3:e1:46:1c:1e:95:3e:09: 27:a1:23:69:b2:c7:69:c2:0f:af:37:84:86:60:28: 46:6b:a8:62:f7:0f:c0:1b:e2:bb:71:14:13:81:8d: c3:c2:a4:68:d0:08:66:eb:5a:c4:5d:2c:df:41:8f: 3e:69:0c:9a:b8:99:03:40:d6:2d:f4:1a:34:9d:39: 11:d4:99:21:5d:0b:8d:3e:de:58:2d:1a:b8:00:c7: d6:5e:8b:a5:08:55:b6:ca:ce:33:10:76:c6:67:fd: dd:cd:cc:52:5e:a8:07:db:52:31:16:f7:32:bc:14: 09:89:86:77:93:7e:9e:df:29:84:8b:13:48:e2:1b: c9:f9:7a:67:cf:f2:64:4f:e8:74:48:e3:be:05:f4: 2e:e9:32:0b:43:fd:14:e7:d0:d0:ee:cd:78:cf:ea: e5:81:a0:54:0a:a2:39:94:da:07:84:95:31:ff:33: f2:0d:75:f4:3e:76:f5:f1:e2:02:b0:39:7d:c2:88: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1A:8B:E2:6F:2E:54:F4:D7:53:CB:DC:D2:BA:99:60:E7:02:D5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5d7e7d1-6825-328b-8c98-79b1eb2e7f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:99:ef:af:bf:de:47:83:6d:c9:93:88:f0:9c:d2:7a:0c:1f: 3d:66:d4:55:52:33:94:5b:81:08:d6:83:f6:a6:a3:b3:1f:8e: 7d:24:f2:85:5e:e6:6a:e0:5e:08:54:e8:cb:53:db:df:7a:d9: 16:e7:09:dd:7b:10:1f:3d:57:15:60:ec:60:4e:8d:1e:63:e2: 65:85:67:96:0c:07:25:37:c3:90:4a:0c:1c:df:d2:ee:3b:ca: e1:91:5e:cd:d2:0e:45:09:33:18:c4:fa:64:c2:59:cd:39:45: 66:87:0a:98:e1:e0:cf:1c:1f:7a:d9:37:97:d7:2e:2a:da:a5: 4d:80:c2:d5:b3:00:59:54:e6:7b:3d:95:59:13:ae:73:1d:b1: 89:6a:3c:a2:12:0e:ed:d2:9a:05:4a:8f:7e:31:64:64:ff:23: ca:67:9c:9b:7f:91:3a:6c:48:fd:ba:c8:af:21:6d:36:79:7e: 39:3d:3e:a9:ea:26:f6:bb:80:28:4e:a1:6b:ab:c3:47:92:37: d2:b2:e2:08:af:7f:d3:f7:cc:f8:44:2f:57:5b:bc:f8:8a:a6: 51:89:24:6a:45:01:1b:7d:72:68:31:cb:41:9a:d8:4b:54:ea: 66:33:95:b3:ec:f5:85:a0:b3:b7:2a:8e:d5:8c:62:77:d4:b7: 3a:4e:0f:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dn3XpS1DOR+xDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkzOFoXDTI1MDkxNzE0MzkzOFowLzEtMCsGA1UEAxMk ZGI3YWVhYzktNzEwNy00Y2JiLWI4MTMtN2JjMTZlOTNlY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQx6fnUK4vB8RrdaBH2qujxIDZbBzhwb/lTJ XpbM1asTWgyZBRiHQ9dcC1A9ua4hYhLwxjiC8HpC+Z1GiYZ9ZmoVw+FGHB6VPgkn oSNpssdpwg+vN4SGYChGa6hi9w/AG+K7cRQTgY3DwqRo0Ahm61rEXSzfQY8+aQya uJkDQNYt9Bo0nTkR1JkhXQuNPt5YLRq4AMfWXoulCFW2ys4zEHbGZ/3dzcxSXqgH 21IxFvcyvBQJiYZ3k36e3ymEixNI4hvJ+Xpnz/JkT+h0SOO+BfQu6TILQ/0U59DQ 7s14z+rlgaBUCqI5lNoHhJUx/zPyDXX0Pnb18eICsDl9woh0wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgai+JvLlT011PL3NK6mWDnAtUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDVkN2U3ZDEtNjgyNS0z MjhiLThjOTgtNzliMWViMmU3ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuZ76+/3keDbcmTiPCc0noMHz1m1FVSM5RbgQjWg/amo7Mfjn0k8oVe 5mrgXghU6MtT29962RbnCd17EB89VxVg7GBOjR5j4mWFZ5YMByU3w5BKDBzf0u47 yuGRXs3SDkUJMxjE+mTCWc05RWaHCpjh4M8cH3rZN5fXLirapU2AwtWzAFlU5ns9 lVkTrnMdsYlqPKISDu3SmgVKj34xZGT/I8pnnJt/kTpsSP26yK8hbTZ5fjk9Pqnq Jva7gChOoWurw0eSN9Ky4givf9P3zPhEL1dbvPiKplGJJGpFARt9cmgxy0Ga2EtU 6mYzlbPs9YWgs7cqjtWMYnfUtzpODxw= -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:12 2025 by rpki-client