$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd7d9a52-8017-3e22-b9bb-7e4c97a41591.roa File: dd7d9a52-8017-3e22-b9bb-7e4c97a41591.roa (raw, json) Hash identifier: bDlOT5Ujo8fDKNG5Hqwvk6sAbqjLQKIhObestwm5EPo= Subject key identifier: CE:E7:81:89:80:41:7B:EB:C9:0D:4E:5D:77:CB:FE:E2:4E:C5:52:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A99A1AB5738A1A88A8C3C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd7d9a52-8017-3e22-b9bb-7e4c97a41591.roa Signing time: Fri 20 Jun 2025 09:34:13 +0000 ROA not before: Fri 20 Jun 2025 09:34:13 +0000 ROA not after: Thu 18 Sep 2025 09:34:13 +0000 asID: 22773 IP address blocks: 72.207.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:9a:1a:b5:73:8a:1a:88:a8:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:13 2025 GMT Not After : Sep 18 09:34:13 2025 GMT Subject: CN=bf2b0e0a-44aa-4c60-b406-372b5497a651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:75:45:f3:86:17:fd:fc:1b:55:a7:df:8c: f9:66:09:4b:51:4d:92:ae:6c:9d:3a:29:43:78:e9: 50:1c:ff:89:94:fe:45:e8:36:9b:8b:6d:ad:b9:1e: 9e:74:b9:69:15:50:ea:59:56:a2:dc:e8:9d:0d:f2: e0:83:ca:58:88:7e:bf:e0:8d:1a:b9:32:4c:5e:35: f1:b3:bd:4d:cc:18:13:74:ae:1a:cd:fa:16:52:21: 2f:9f:bb:e3:23:31:ac:66:3d:d2:22:c5:f0:d4:9f: d6:2c:89:94:af:56:32:0f:09:ae:1a:08:ff:a0:df: 2a:c8:5e:cd:b6:4a:1e:f0:40:a2:99:c7:41:37:66: 3b:f8:13:7d:73:8b:72:e0:28:29:c9:4f:ac:d9:da: 36:5f:af:b8:85:9f:8e:03:70:c2:64:0f:1c:bc:c5: be:93:08:d2:ad:eb:fb:40:58:02:7d:7b:07:16:ab: 22:cc:59:b5:dc:0a:80:9f:21:37:65:9b:eb:f5:2d: c1:7a:b1:e3:a5:d4:f0:ce:74:a8:ca:1d:39:86:01: 04:35:e4:0d:c1:02:77:ec:bf:20:02:80:80:a5:98: 25:e7:2a:ba:c7:ff:cc:11:41:3d:62:39:5d:42:84: 06:6c:5d:9a:e0:79:94:5f:33:d7:71:8b:5d:bb:a0: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E7:81:89:80:41:7B:EB:C9:0D:4E:5D:77:CB:FE:E2:4E:C5:52:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd7d9a52-8017-3e22-b9bb-7e4c97a41591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.207.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:51:53:d1:cd:c7:69:a7:1d:40:f6:59:c3:82:19:fc:41:50: 6b:64:66:80:5d:32:2b:93:48:65:31:0a:ff:25:73:aa:eb:86: 0c:d0:f4:a7:8b:60:b1:07:12:8a:ee:e8:d0:dd:fd:c8:01:99: 1d:ea:7c:d8:8b:55:3a:86:73:ee:ff:fa:98:58:0c:ca:6d:f5: 56:c1:3a:eb:65:e1:67:74:f3:58:aa:50:4e:ac:ce:34:17:ba: 72:5f:18:a4:df:cf:25:30:f2:be:e3:6e:7f:7a:7b:16:39:1c: 0c:d7:c8:a8:eb:42:d1:17:22:05:92:8b:90:ba:74:cc:24:16: 33:0e:8f:20:33:ad:e4:bb:8d:20:27:72:64:00:98:cc:02:23: b5:8b:c9:1c:cd:80:d0:bd:48:61:7d:e2:62:da:1c:b3:5b:94: 2e:20:e2:96:5d:ce:4b:b0:3a:3b:94:84:9c:fb:60:a6:c7:3e: 84:ec:f2:8c:93:aa:d6:6d:37:ff:d8:db:9a:e3:a6:c5:67:6c: bf:9a:1b:9c:21:9f:1c:ab:f7:c2:58:b6:03:32:99:50:6d:9c: 79:a0:5a:50:ca:25:d0:b2:e0:ea:99:9a:d8:27:e0:50:ad:9b: 87:a4:9a:d6:b7:1c:51:3c:24:3d:79:42:eb:2c:09:f7:26:03: 9f:6c:af:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqZoatXOKGoiow8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQxM1oXDTI1MDkxODA5MzQxM1owLzEtMCsGA1UEAxMk YmYyYjBlMGEtNDRhYS00YzYwLWI0MDYtMzcyYjU0OTdhNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyux1RfOGF/38G1Wn34z5ZglLUU2SrmydOilD eOlQHP+JlP5F6Dabi22tuR6edLlpFVDqWVai3OidDfLgg8pYiH6/4I0auTJMXjXx s71NzBgTdK4azfoWUiEvn7vjIzGsZj3SIsXw1J/WLImUr1YyDwmuGgj/oN8qyF7N tkoe8ECimcdBN2Y7+BN9c4ty4CgpyU+s2do2X6+4hZ+OA3DCZA8cvMW+kwjSrev7 QFgCfXsHFqsizFm13AqAnyE3ZZvr9S3BerHjpdTwznSoyh05hgEENeQNwQJ37L8g AoCApZgl5yq6x//MEUE9YjldQoQGbF2a4HmUXzPXcYtdu6DOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7ngYmAQXvryQ1OXXfL/uJOxVJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGQ3ZDlhNTItODAxNy0z ZTIyLWI5YmItN2U0Yzk3YTQxNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSM+kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1RU9HNx2mnHUD2WcOCGfxBUGtkZoBdMiuTSGUxCv8lc6rrhgzQ9KeL YLEHEoru6NDd/cgBmR3qfNiLVTqGc+7/+phYDMpt9VbBOutl4Wd081iqUE6szjQX unJfGKTfzyUw8r7jbn96exY5HAzXyKjrQtEXIgWSi5C6dMwkFjMOjyAzreS7jSAn cmQAmMwCI7WLyRzNgNC9SGF94mLaHLNblC4g4pZdzkuwOjuUhJz7YKbHPoTs8oyT qtZtN//Y25rjpsVnbL+aG5whnxyr98JYtgMymVBtnHmgWlDKJdCy4OqZmtgn4FCt m4ekmta3HFE8JD15QussCfcmA59sr30= -----END CERTIFICATE-----Generated at Wed Jul 2 07:36:59 2025 by rpki-client