$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd6900d0-9bbe-3c30-8714-457bd93c9994.roa File: dd6900d0-9bbe-3c30-8714-457bd93c9994.roa (raw, json) Hash identifier: 9JwJp0rvCvO/Pcg13lK377lXhbejtwmbJb+9WQtJk2Y= Subject key identifier: B0:A1:90:84:16:B9:0F:87:DD:E5:CF:0C:C5:CF:33:EC:F9:F2:8C:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77E5EEE06810A216533E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd6900d0-9bbe-3c30-8714-457bd93c9994.roa Signing time: Thu 19 Jun 2025 14:42:28 +0000 ROA not before: Thu 19 Jun 2025 14:42:28 +0000 ROA not after: Wed 17 Sep 2025 14:42:28 +0000 asID: 22773 IP address blocks: 72.223.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:e5:ee:e0:68:10:a2:16:53:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:28 2025 GMT Not After : Sep 17 14:42:28 2025 GMT Subject: CN=62d8fc5b-4571-4a90-a7be-c103d71f5a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:6a:aa:f4:b2:cb:52:47:00:9b:cd:f3:2f: ba:5a:82:67:7e:22:40:aa:11:03:87:6b:f1:7c:b5: 1e:92:72:e3:50:26:4e:b8:e6:9d:ae:e9:5f:f0:aa: 00:c9:21:c5:e6:0b:3b:6a:c3:57:a3:89:3e:9b:56: db:a4:33:e2:90:48:df:bf:d0:8a:e6:91:bf:8e:2b: da:44:a1:05:ff:a3:80:00:ab:60:b5:bf:3f:71:0e: 86:2e:ea:de:ff:73:e1:02:ad:08:bc:e5:5a:b9:e0: 4e:ca:63:e2:1f:8a:c2:ab:17:03:ef:2a:17:d1:15: ef:6f:43:d6:6c:ab:6a:21:88:bf:23:38:9c:54:6b: 0e:c1:03:9b:1c:2a:e3:0f:e3:9b:99:e5:e3:94:1c: 8c:df:2c:77:b7:c4:c6:d6:dc:7d:02:c2:8d:ce:eb: 9f:5e:e8:ad:28:18:ee:45:bc:5a:f0:d7:08:ad:04: d7:6d:6b:77:f3:d5:03:34:46:c0:37:94:fd:c3:09: 34:67:64:bc:99:38:be:18:d9:c6:01:05:56:6d:55: 57:7c:04:59:f9:f9:07:f7:32:72:6d:0d:9a:bb:5c: 77:3f:9e:00:89:7b:e4:9d:f7:25:d7:10:4f:14:b3: 7d:50:9f:15:d1:10:87:8b:f4:38:20:d0:d5:a2:41: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A1:90:84:16:B9:0F:87:DD:E5:CF:0C:C5:CF:33:EC:F9:F2:8C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd6900d0-9bbe-3c30-8714-457bd93c9994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d4:c5:06:2f:2e:9e:c2:1e:da:c1:a1:dc:79:a7:a9:11:41: 2b:d9:5e:cc:bc:57:91:b9:a9:3d:a5:4c:51:67:38:cd:23:60: 66:b5:13:69:2e:9c:56:af:39:0f:de:17:46:b5:cf:c3:13:a3: 6a:fb:bf:97:ba:3a:dd:22:8a:c7:bb:02:fa:ed:9b:16:1d:39: 86:c7:4c:13:0c:f0:40:ce:dc:d7:cf:7e:21:b0:81:74:da:29: 30:f5:a1:c2:bc:da:94:f7:d3:0f:f9:90:8a:31:fa:59:e6:eb: c8:86:ef:7f:f3:73:fb:13:9e:6b:84:50:9a:15:16:dd:52:34: 63:8f:64:66:46:6c:09:9a:d0:c6:99:48:a2:a3:0c:0a:c3:86: cd:a1:79:88:e5:58:a4:37:99:b6:a1:dd:9a:be:d8:4c:31:4b: 12:a8:3b:61:30:4f:05:60:ad:10:16:14:e6:1f:5a:3b:6f:3c: b8:4f:cf:b6:7e:24:a4:79:5e:bc:b4:39:1e:3f:7c:f9:67:8b: ad:35:3a:a3:2b:63:26:c7:9f:63:0e:e2:1a:f0:83:50:86:27: 17:58:3f:f6:d9:1c:12:40:6a:81:f4:79:c9:2a:40:f5:18:84: ff:29:d1:94:cc:44:e8:07:6a:d5:f7:4e:21:74:5d:ac:7c:f8: cb:24:cb:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d+Xu4GgQohZTPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIyOFoXDTI1MDkxNzE0NDIyOFowLzEtMCsGA1UEAxMk NjJkOGZjNWItNDU3MS00YTkwLWE3YmUtYzEwM2Q3MWY1YTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfVqqvSyy1JHAJvN8y+6WoJnfiJAqhEDh2vx fLUeknLjUCZOuOadrulf8KoAySHF5gs7asNXo4k+m1bbpDPikEjfv9CK5pG/jiva RKEF/6OAAKtgtb8/cQ6GLure/3PhAq0IvOVaueBOymPiH4rCqxcD7yoX0RXvb0PW bKtqIYi/IzicVGsOwQObHCrjD+ObmeXjlByM3yx3t8TG1tx9AsKNzuufXuitKBju Rbxa8NcIrQTXbWt389UDNEbAN5T9wwk0Z2S8mTi+GNnGAQVWbVVXfARZ+fkH9zJy bQ2au1x3P54AiXvknfcl1xBPFLN9UJ8V0RCHi/Q4INDVokFoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLChkIQWuQ+H3eXPDMXPM+z58ozPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGQ2OTAwZDAtOWJiZS0z YzMwLTg3MTQtNDU3YmQ5M2M5OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN8aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADUxQYvLp7CHtrBodx5p6kRQSvZXsy8V5G5qT2lTFFnOM0jYGa1E2ku nFavOQ/eF0a1z8MTo2r7v5e6Ot0iise7AvrtmxYdOYbHTBMM8EDO3NfPfiGwgXTa KTD1ocK82pT30w/5kIox+lnm68iG73/zc/sTnmuEUJoVFt1SNGOPZGZGbAma0MaZ SKKjDArDhs2heYjlWKQ3mbah3Zq+2EwxSxKoO2EwTwVgrRAWFOYfWjtvPLhPz7Z+ JKR5Xry0OR4/fPlni601OqMrYybHn2MO4hrwg1CGJxdYP/bZHBJAaoH0eckqQPUY hP8p0ZTMROgHatX3TiF0Xax8+Msky2Q= -----END CERTIFICATE-----Generated at Tue Jul 1 21:57:16 2025 by rpki-client