$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea2fa8c4-2da9-3110-ac68-0e7d3445da7b.roa File: ea2fa8c4-2da9-3110-ac68-0e7d3445da7b.roa (raw, json) Hash identifier: IbnQjVPXnr1Gp1GUA2fPJW23Bri7SJmo77vcRlVqjOg= Subject key identifier: CF:74:55:F4:4E:CB:2E:91:5B:00:61:48:08:D9:36:EB:EE:A3:4C:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E779C092C4F6656842C9880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea2fa8c4-2da9-3110-ac68-0e7d3445da7b.roa Signing time: Thu 19 Jun 2025 14:41:53 +0000 ROA not before: Thu 19 Jun 2025 14:41:53 +0000 ROA not after: Wed 17 Sep 2025 14:41:53 +0000 asID: 22773 IP address blocks: 72.222.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:9c:09:2c:4f:66:56:84:2c:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:53 2025 GMT Not After : Sep 17 14:41:53 2025 GMT Subject: CN=7bc592ef-27e6-427f-a1ef-cc91171be397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:10:56:7e:2c:ed:03:83:9f:73:e8:4a:3a: 35:c0:8a:1c:3f:f9:0c:21:88:37:3a:99:c6:b1:f6: bf:cd:27:e1:0b:6e:e2:81:52:f2:67:5f:d2:a4:25: 5b:b3:f2:84:fb:49:7c:62:5c:9e:27:04:b4:8c:be: a6:87:0f:0e:2f:8b:72:3e:2e:74:03:dd:7b:d9:07: 74:7d:93:16:ed:e0:56:7a:0f:c5:f9:d3:ef:58:b0: 82:cb:46:34:d6:4c:f3:93:40:b9:67:37:44:3c:9e: 22:a9:68:df:04:4a:f2:41:19:af:dc:5e:2a:0e:66: bb:03:69:45:bc:bc:bb:35:88:ae:46:19:eb:9e:d3: a9:b9:24:92:21:b3:3a:39:93:18:0f:d5:8d:16:8a: ef:c3:b5:8c:f6:43:7a:2b:6b:20:ed:a7:72:e6:87: f3:d8:57:9f:74:d8:fa:24:c7:c7:eb:ec:c3:3c:d8: 3f:0c:5b:07:3e:47:90:83:36:3f:45:15:30:e0:ba: cb:f8:bb:fe:83:17:24:60:b9:06:fa:44:a4:78:ef: 18:cc:7c:c8:1b:51:83:19:a6:ae:0d:ac:4a:bf:1b: dc:c9:06:58:93:01:7b:8e:63:65:d9:c0:b6:bd:d8: 51:2c:d4:b6:80:41:2e:94:81:ba:5e:3f:cc:94:c8: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:74:55:F4:4E:CB:2E:91:5B:00:61:48:08:D9:36:EB:EE:A3:4C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea2fa8c4-2da9-3110-ac68-0e7d3445da7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:db:f6:f0:20:a1:a8:d8:57:05:58:6b:3e:65:1f:25:41:2a: d1:76:74:01:04:eb:0d:ca:a4:a1:37:db:d3:36:b1:73:12:5f: 54:eb:c0:b5:6d:70:57:ad:1b:31:d4:cf:a6:86:5c:07:47:60: 14:ca:94:4b:df:b9:fd:44:38:e0:a9:8a:28:98:ee:c5:80:30: 6d:58:eb:ef:4f:30:a0:dd:e1:2b:98:22:6c:28:65:39:c8:ac: c3:89:ca:ea:d2:24:f5:fe:01:df:c6:65:b8:25:32:34:9e:03: b2:9d:7f:32:ed:13:ea:06:5d:8c:2d:f2:9f:1c:26:0a:6d:10: 72:4b:c5:bc:8e:e0:fc:72:cd:60:a7:d0:88:d9:79:89:c3:63: 8c:c3:39:91:0e:68:e4:dd:de:18:6b:3f:5e:1c:a2:1e:b8:3f: 28:62:fd:57:ec:19:e2:00:f2:b4:13:7f:cd:d6:62:2e:89:04: ab:6b:84:0d:9a:f0:9b:1d:9a:f9:fb:6a:70:fc:0c:77:48:fc: 16:67:b1:d7:7b:78:02:10:ef:28:57:28:15:0f:0d:a3:6b:42: 70:fe:1a:50:b4:4a:09:f7:0a:d1:fd:9e:2f:ee:da:e4:70:70: 18:58:7e:04:88:96:4d:58:73:06:45:32:80:bd:31:8e:57:99: 8c:dc:6f:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d5wJLE9mVoQsmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDE1M1oXDTI1MDkxNzE0NDE1M1owLzEtMCsGA1UEAxMk N2JjNTkyZWYtMjdlNi00MjdmLWExZWYtY2M5MTE3MWJlMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQMQVn4s7QODn3PoSjo1wIocP/kMIYg3OpnG sfa/zSfhC27igVLyZ1/SpCVbs/KE+0l8YlyeJwS0jL6mhw8OL4tyPi50A9172Qd0 fZMW7eBWeg/F+dPvWLCCy0Y01kzzk0C5ZzdEPJ4iqWjfBEryQRmv3F4qDma7A2lF vLy7NYiuRhnrntOpuSSSIbM6OZMYD9WNForvw7WM9kN6K2sg7ady5ofz2FefdNj6 JMfH6+zDPNg/DFsHPkeQgzY/RRUw4LrL+Lv+gxckYLkG+kSkeO8YzHzIG1GDGaau DaxKvxvcyQZYkwF7jmNl2cC2vdhRLNS2gEEulIG6Xj/MlMhvOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM90VfROyy6RWwBhSAjZNuvuo0yaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWEyZmE4YzQtMmRhOS0z MTEwLWFjNjgtMGU3ZDM0NDVkYTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN6GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfb9vAgoajYVwVYaz5lHyVBKtF2dAEE6w3KpKE329M2sXMSX1TrwLVt cFetGzHUz6aGXAdHYBTKlEvfuf1EOOCpiiiY7sWAMG1Y6+9PMKDd4SuYImwoZTnI rMOJyurSJPX+Ad/GZbglMjSeA7KdfzLtE+oGXYwt8p8cJgptEHJLxbyO4PxyzWCn 0IjZeYnDY4zDOZEOaOTd3hhrP14coh64Pyhi/VfsGeIA8rQTf83WYi6JBKtrhA2a 8Jsdmvn7anD8DHdI/BZnsdd7eAIQ7yhXKBUPDaNrQnD+GlC0Sgn3CtH9ni/u2uRw cBhYfgSIlk1YcwZFMoC9MY5XmYzcb4U= -----END CERTIFICATE-----Generated at Mon Jun 30 21:41:00 2025 by rpki-client