$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/edcdad58-06af-3d83-888c-f4f44a15772d.roa File: edcdad58-06af-3d83-888c-f4f44a15772d.roa (raw, json) Hash identifier: fRouCDQHWpJ0GFNTkWyuJhQqEPEKmjUTTFVus33f6mY= Subject key identifier: C1:62:12:6D:68:4B:91:1F:E2:65:37:02:14:EA:2B:F0:AF:23:BF:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E776E805AD61539B4C23A40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/edcdad58-06af-3d83-888c-f4f44a15772d.roa Signing time: Thu 19 Jun 2025 14:41:31 +0000 ROA not before: Thu 19 Jun 2025 14:41:31 +0000 ROA not after: Wed 17 Sep 2025 14:41:31 +0000 asID: 22773 IP address blocks: 72.217.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:6e:80:5a:d6:15:39:b4:c2:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:31 2025 GMT Not After : Sep 17 14:41:31 2025 GMT Subject: CN=554a1131-4ee4-485e-a006-49ac8c1eabe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:be:8c:e6:37:e5:e6:70:65:1e:ff:7a:97: 52:0a:4c:d6:7f:42:77:c8:1d:d7:a6:a0:8b:61:6f: af:66:68:82:d9:fd:bb:08:7b:ad:14:53:6d:ff:87: 1a:3d:13:67:d8:0d:57:f7:0b:e9:b1:44:51:de:ad: 13:b9:e6:5d:bb:d1:f2:9c:6a:36:d6:ed:88:93:32: 10:82:59:57:a4:3c:3f:3b:29:38:d3:69:9f:d2:82: 5b:e9:cb:bf:26:af:b0:cd:93:77:65:e5:73:73:e7: 86:92:d8:c8:02:5d:d7:03:c9:3b:57:00:40:f8:f0: b7:42:9a:8b:be:eb:fb:25:0c:5f:b1:4c:c4:e8:6a: 7f:03:b5:db:95:8e:80:04:42:96:f1:8e:c7:f1:23: 83:67:c6:38:da:38:08:f2:6e:98:8c:ee:10:c1:69: 70:ce:6c:07:7d:e5:e9:5f:38:42:a0:3a:61:de:4b: e4:db:cf:35:14:8e:9b:f6:21:1f:f3:a9:70:38:34: b2:bc:34:f2:9d:e8:a0:00:7e:fc:b7:d8:f2:f6:92: da:f4:97:02:b9:1e:22:33:1e:36:7f:7c:f1:6e:ba: 1d:6b:6a:4e:fb:eb:e0:14:36:65:bd:a0:98:eb:17: bc:74:28:e5:f0:bc:07:f9:7f:d7:21:e8:da:02:3a: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:62:12:6D:68:4B:91:1F:E2:65:37:02:14:EA:2B:F0:AF:23:BF:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/edcdad58-06af-3d83-888c-f4f44a15772d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:24:b9:f3:06:b5:70:a8:18:c1:fa:68:11:e5:c6:cb:89:4b: 02:6f:ea:f7:f5:05:77:06:51:90:af:67:3e:b5:e2:82:73:78: fc:5b:1f:c5:73:bc:b6:bc:30:55:55:f8:22:b8:62:8a:8b:0e: b8:df:03:84:2b:e8:a0:3f:a1:e4:01:7f:ea:6c:8b:bc:89:4a: 40:06:9b:0d:00:05:a5:78:e1:45:18:ff:c7:a4:b8:1f:da:75: 80:0f:7b:bf:2f:87:e1:24:c8:76:90:19:34:d6:ef:50:77:d2: 77:2d:bc:c0:8c:76:e2:e0:6d:78:87:a1:62:2d:e7:e1:d4:c6: a2:f1:31:38:05:1b:39:fa:c9:d4:4f:2f:a8:ad:2f:d4:79:82: 81:0b:15:ae:cc:a1:bf:06:1e:d4:9b:9b:31:72:80:fb:a6:94: 09:e3:0c:5d:b1:24:0f:81:2b:60:a7:15:fb:6b:f3:b9:12:a5: de:0d:c6:b5:e8:1f:c0:ed:2c:b4:fa:7c:32:b2:f2:3e:95:d7: c3:95:b8:32:07:bd:25:3f:ab:96:4f:4a:91:7d:8b:a5:f2:ec: 7f:a6:d8:34:04:a8:e8:be:5b:76:42:82:f5:39:92:d1:0b:29: b0:b3:59:24:cc:26:29:aa:a5:15:f4:c9:d5:ec:3e:05:55:74: 6b:0a:be:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d26AWtYVObTCOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDEzMVoXDTI1MDkxNzE0NDEzMVowLzEtMCsGA1UEAxMk NTU0YTExMzEtNGVlNC00ODVlLWEwMDYtNDlhYzhjMWVhYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c6+jOY35eZwZR7/epdSCkzWf0J3yB3XpqCL YW+vZmiC2f27CHutFFNt/4caPRNn2A1X9wvpsURR3q0TueZdu9HynGo21u2IkzIQ gllXpDw/Oyk402mf0oJb6cu/Jq+wzZN3ZeVzc+eGktjIAl3XA8k7VwBA+PC3QpqL vuv7JQxfsUzE6Gp/A7XblY6ABEKW8Y7H8SODZ8Y42jgI8m6YjO4QwWlwzmwHfeXp XzhCoDph3kvk2881FI6b9iEf86lwODSyvDTyneigAH78t9jy9pLa9JcCuR4iMx42 f3zxbroda2pO++vgFDZlvaCY6xe8dCjl8LwH+X/XIejaAjpWawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFiEm1oS5Ef4mU3AhTqK/CvI78DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWRjZGFkNTgtMDZhZi0z ZDgzLTg4OGMtZjRmNDRhMTU3NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNl9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFskufMGtXCoGMH6aBHlxsuJSwJv6vf1BXcGUZCvZz614oJzePxbH8Vz vLa8MFVV+CK4YoqLDrjfA4Qr6KA/oeQBf+psi7yJSkAGmw0ABaV44UUY/8ekuB/a dYAPe78vh+EkyHaQGTTW71B30nctvMCMduLgbXiHoWIt5+HUxqLxMTgFGzn6ydRP L6itL9R5goELFa7Mob8GHtSbmzFygPumlAnjDF2xJA+BK2CnFftr87kSpd4NxrXo H8DtLLT6fDKy8j6V18OVuDIHvSU/q5ZPSpF9i6Xy7H+m2DQEqOi+W3ZCgvU5ktEL KbCzWSTMJimqpRX0ydXsPgVVdGsKvmA= -----END CERTIFICATE-----Generated at Tue Jul 1 07:32:25 2025 by rpki-client