$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eaa7e4d5-0d6c-3fb5-8659-6a73509803e3.roa File: eaa7e4d5-0d6c-3fb5-8659-6a73509803e3.roa (raw, json) Hash identifier: rOhQUuoBM1XOWjGNzr4VHREuL0oGE0jj9Zj6JYcum9Y= Subject key identifier: C0:2D:8D:8E:33:34:57:4E:55:C1:7B:9D:37:CE:49:C3:A0:23:09:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7594A5D40E79D6752958C9 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eaa7e4d5-0d6c-3fb5-8659-6a73509803e3.roa Signing time: Thu 19 Jun 2025 14:37:47 +0000 ROA not before: Thu 19 Jun 2025 14:37:47 +0000 ROA not after: Wed 17 Sep 2025 14:37:47 +0000 asID: 22773 IP address blocks: 72.201.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:94:a5:d4:0e:79:d6:75:29:58:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:47 2025 GMT Not After : Sep 17 14:37:47 2025 GMT Subject: CN=68f9032b-3797-451d-9b61-f736d732281d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:5d:6b:fd:f1:27:26:f8:a1:bf:4c:f4:20: e4:99:0d:7a:14:de:79:e3:87:de:40:72:21:4c:86: 0c:0c:c4:dc:a7:b6:3d:12:07:79:2d:ca:6c:16:57: af:37:12:18:39:be:ed:bd:32:e7:c8:a5:62:09:8b: bf:aa:49:9d:0b:0d:99:17:25:5d:54:01:a4:16:8a: 3e:da:99:6b:2a:2e:c4:95:73:09:25:bc:25:8d:e2: 13:00:09:70:aa:62:c6:9a:8a:07:8e:ac:80:52:e8: fd:c4:c7:35:d1:89:97:75:09:5a:4e:f4:dd:5f:2a: 7c:2b:5b:08:53:68:7e:6c:a7:b0:46:d3:a1:1b:03: fb:26:ef:11:6c:65:8f:e3:db:18:4d:5c:51:c0:4d: 2a:3e:06:f0:37:1b:9b:a3:b4:0d:e8:2c:55:0d:c5: b9:22:03:05:dc:ae:15:86:8c:a4:48:6f:37:f8:01: ea:bf:9c:9c:77:20:01:5d:7d:2b:10:c3:be:9a:67: 2c:9a:f2:d6:bc:e9:ac:6c:11:20:97:68:95:08:fc: 8e:4d:08:e8:0b:c0:b3:f7:c2:19:3a:67:61:90:5e: ef:a2:53:61:89:26:7f:70:52:84:c1:fa:82:51:ed: ee:70:98:70:c7:be:91:cd:05:29:38:05:ea:17:b6: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2D:8D:8E:33:34:57:4E:55:C1:7B:9D:37:CE:49:C3:A0:23:09:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eaa7e4d5-0d6c-3fb5-8659-6a73509803e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:98:93:00:46:0d:75:62:3f:01:ab:76:27:18:24:99:01:b1: c8:ee:8b:ab:0a:fa:78:03:c9:ef:fa:12:7f:37:08:df:79:4e: 80:cf:e8:29:cd:a0:22:f7:43:07:b4:5a:20:c0:a2:b0:c8:01: f3:d7:1b:d0:eb:77:0a:85:67:9a:3d:c0:60:e8:5e:71:40:b2: ad:62:53:9b:14:19:3f:dc:d9:d6:4d:da:1d:bf:ae:65:87:1e: 07:ba:b7:60:04:6b:e2:f3:79:cd:2e:b8:37:f9:ad:7e:12:04: 28:9b:c5:f8:37:47:23:1a:3c:db:21:6e:01:b5:fc:d8:0d:79: 0b:1e:92:52:c9:55:be:05:e1:73:e5:b3:30:b3:29:08:6d:31: 53:31:ce:3a:65:3b:09:c7:92:7e:f2:43:8f:51:18:55:85:a5: f7:c7:a6:75:0a:1a:10:73:f8:b9:c5:8f:b8:9f:c6:a6:16:00: 24:9f:92:d2:d1:80:e2:5a:69:68:59:ed:12:98:f9:99:95:34: 2a:ba:75:9c:50:09:67:72:c6:f4:57:82:04:06:73:07:6e:42: 3e:90:b1:7e:12:4e:00:cf:ff:54:52:90:b9:47:72:73:47:c8: c5:1a:0a:e7:5a:f5:98:b9:1d:44:9a:50:46:10:2d:53:bc:94: c6:74:a6:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dZSl1A551nUpWMkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzc0N1oXDTI1MDkxNzE0Mzc0N1owLzEtMCsGA1UEAxMk NjhmOTAzMmItMzc5Ny00NTFkLTliNjEtZjczNmQ3MzIyODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraFda/3xJyb4ob9M9CDkmQ16FN5544feQHIh TIYMDMTcp7Y9Egd5LcpsFlevNxIYOb7tvTLnyKViCYu/qkmdCw2ZFyVdVAGkFoo+ 2plrKi7ElXMJJbwljeITAAlwqmLGmooHjqyAUuj9xMc10YmXdQlaTvTdXyp8K1sI U2h+bKewRtOhGwP7Ju8RbGWP49sYTVxRwE0qPgbwNxubo7QN6CxVDcW5IgMF3K4V hoykSG83+AHqv5ycdyABXX0rEMO+mmcsmvLWvOmsbBEgl2iVCPyOTQjoC8Cz98IZ OmdhkF7volNhiSZ/cFKEwfqCUe3ucJhwx76RzQUpOAXqF7aIkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAtjY4zNFdOVcF7nTfOScOgIwnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWFhN2U0ZDUtMGQ2Yy0z ZmI1LTg2NTktNmE3MzUwOTgwM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6YkwBGDXViPwGrdicYJJkBscjui6sK+ngDye/6En83CN95ToDP6CnN oCL3Qwe0WiDAorDIAfPXG9DrdwqFZ5o9wGDoXnFAsq1iU5sUGT/c2dZN2h2/rmWH Hge6t2AEa+Lzec0uuDf5rX4SBCibxfg3RyMaPNshbgG1/NgNeQseklLJVb4F4XPl szCzKQhtMVMxzjplOwnHkn7yQ49RGFWFpffHpnUKGhBz+LnFj7ifxqYWACSfktLR gOJaaWhZ7RKY+ZmVNCq6dZxQCWdyxvRXggQGcwduQj6QsX4STgDP/1RSkLlHcnNH yMUaCuda9Zi5HUSaUEYQLVO8lMZ0pg0= -----END CERTIFICATE-----Generated at Tue Jul 1 13:22:04 2025 by rpki-client