$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e34d019c-cdd8-3aa4-9e4f-5d5b269c6eb2.roa File: e34d019c-cdd8-3aa4-9e4f-5d5b269c6eb2.roa (raw, json) Hash identifier: 233YsOrmrxzkbEfoXC7ZDx/MchxS9lbxz6Yq9ipZ2hY= Subject key identifier: 1F:AE:CF:E1:81:D9:DC:B7:A5:51:43:3A:45:62:82:F8:60:8A:FD:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77DD19C68A4585D705C700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e34d019c-cdd8-3aa4-9e4f-5d5b269c6eb2.roa Signing time: Thu 19 Jun 2025 14:42:23 +0000 ROA not before: Thu 19 Jun 2025 14:42:23 +0000 ROA not after: Wed 17 Sep 2025 14:42:23 +0000 asID: 22773 IP address blocks: 72.223.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:dd:19:c6:8a:45:85:d7:05:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:23 2025 GMT Not After : Sep 17 14:42:23 2025 GMT Subject: CN=53416b1c-99b0-4d27-923c-f82cbd91fa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:88:c2:6b:c1:0f:47:b0:03:21:08:49:97: 2d:72:28:5c:1a:b6:b9:4d:28:c5:78:86:db:2d:66: 57:d3:c7:8b:1e:e5:7e:ee:6f:59:2a:fd:01:a1:20: f8:4a:e4:80:eb:7a:30:1a:23:0d:1f:10:de:d1:7b: c9:74:f4:ac:39:1e:1a:2a:92:aa:19:1f:cc:6a:dc: 77:db:dc:6d:2e:d9:94:dd:5a:20:ee:5c:5a:c7:1e: 56:42:00:fd:43:1e:3a:e6:d4:b5:e3:46:0e:da:05: ab:63:95:70:0b:da:29:25:d1:ca:4d:fc:d8:a9:40: d3:7d:83:28:7e:08:6b:01:49:ff:1c:0f:95:f4:84: 2d:e2:aa:1d:d0:30:f2:e0:3a:f3:05:fe:04:8a:2b: 67:67:4a:62:90:e3:3d:64:b4:72:84:15:7b:81:97: b4:85:07:a6:e9:36:d9:56:ca:a6:bf:36:28:16:27: 72:fe:ab:60:8a:b3:01:bf:a6:24:1b:04:dc:1f:50: 2c:6c:11:e4:be:00:4a:b9:b0:b5:1f:b7:85:d6:6e: a0:b3:d2:bd:8a:1c:be:9a:d5:a1:92:8f:e9:56:99: 5b:99:13:ef:83:48:3f:c6:cb:f7:8b:1b:eb:3e:7c: 3c:63:07:5e:fc:6f:9a:59:15:04:81:37:8a:1f:6a: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AE:CF:E1:81:D9:DC:B7:A5:51:43:3A:45:62:82:F8:60:8A:FD:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e34d019c-cdd8-3aa4-9e4f-5d5b269c6eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:6e:04:6d:15:17:69:fe:fc:b5:92:dd:ae:2e:c5:9e:30:ae: 71:99:a6:28:58:89:eb:e6:30:72:1d:9a:70:2a:af:29:24:ec: 62:80:13:f9:e2:3e:98:de:a8:2c:11:d1:74:14:88:6c:e0:cc: f0:8d:6e:69:15:d4:8d:26:ba:82:27:61:b1:8b:c5:96:da:fd: d9:58:e9:f5:58:98:2d:91:bc:99:37:f0:84:bd:4a:fe:e2:69: 25:51:5c:d0:42:7d:56:7c:42:5b:d2:0f:97:ab:23:df:3f:37: 24:58:cd:b3:63:63:76:90:8b:a4:73:77:7f:b8:f3:31:37:01: ac:70:58:3c:12:04:42:27:e6:7f:f5:67:ab:99:18:65:b0:61: 57:39:aa:c1:e6:a6:c0:8b:7d:a5:13:f5:8f:3b:16:c1:cc:8c: 29:11:ea:22:13:6f:d2:e5:e1:0c:90:28:ff:c8:8b:73:02:e8: 59:ee:f0:1e:36:b0:b6:da:f6:32:e5:be:8c:72:a9:74:4a:88: 1b:e8:01:a9:01:95:ab:1b:cb:d7:9e:c3:9c:3c:c7:b5:cc:28: 80:bc:91:c2:bf:ad:7b:28:0b:a6:7e:b7:ca:37:e6:7a:59:99: 37:86:bb:ed:b2:bd:93:36:50:01:8a:de:8a:f1:9d:83:28:75: b2:c3:f9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d90ZxopFhdcFxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIyM1oXDTI1MDkxNzE0NDIyM1owLzEtMCsGA1UEAxMk NTM0MTZiMWMtOTliMC00ZDI3LTkyM2MtZjgyY2JkOTFmYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVmIwmvBD0ewAyEISZctcihcGra5TSjFeIbb LWZX08eLHuV+7m9ZKv0BoSD4SuSA63owGiMNHxDe0XvJdPSsOR4aKpKqGR/Matx3 29xtLtmU3Vog7lxaxx5WQgD9Qx465tS140YO2gWrY5VwC9opJdHKTfzYqUDTfYMo fghrAUn/HA+V9IQt4qod0DDy4DrzBf4EiitnZ0pikOM9ZLRyhBV7gZe0hQem6TbZ VsqmvzYoFidy/qtgirMBv6YkGwTcH1AsbBHkvgBKubC1H7eF1m6gs9K9ihy+mtWh ko/pVplbmRPvg0g/xsv3ixvrPnw8Ywde/G+aWRUEgTeKH2oKVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+uz+GB2dy3pVFDOkVigvhgiv1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTM0ZDAxOWMtY2RkOC0z YWE0LTllNGYtNWQ1YjI2OWM2ZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZuBG0VF2n+/LWS3a4uxZ4wrnGZpihYievmMHIdmnAqrykk7GKAE/ni PpjeqCwR0XQUiGzgzPCNbmkV1I0muoInYbGLxZba/dlY6fVYmC2RvJk38IS9Sv7i aSVRXNBCfVZ8QlvSD5erI98/NyRYzbNjY3aQi6Rzd3+48zE3AaxwWDwSBEIn5n/1 Z6uZGGWwYVc5qsHmpsCLfaUT9Y87FsHMjCkR6iITb9Ll4QyQKP/Ii3MC6Fnu8B42 sLba9jLlvoxyqXRKiBvoAakBlasby9eew5w8x7XMKIC8kcK/rXsoC6Z+t8o35npZ mTeGu+2yvZM2UAGK3orxnYModbLD+fI= -----END CERTIFICATE-----Generated at Mon Jun 30 09:23:49 2025 by rpki-client