$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f17ccdb8-050d-3ec3-aaf0-a191347cb622.roa File: f17ccdb8-050d-3ec3-aaf0-a191347cb622.roa (raw, json) Hash identifier: ciajEEqfy12TqqqCtJEMfsXEGKLaV1U9VqL25S9WBy8= Subject key identifier: C2:3E:E7:DD:38:87:16:E9:D1:26:CD:B6:BA:19:58:06:01:9E:06:F5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A977BAC60C10C0698ABD2C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f17ccdb8-050d-3ec3-aaf0-a191347cb622.roa Signing time: Fri 20 Jun 2025 09:33:57 +0000 ROA not before: Fri 20 Jun 2025 09:33:57 +0000 ROA not after: Thu 18 Sep 2025 09:33:57 +0000 asID: 22773 IP address blocks: 72.193.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:77:ba:c6:0c:10:c0:69:8a:bd:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:57 2025 GMT Not After : Sep 18 09:33:57 2025 GMT Subject: CN=d7d09fa8-ebd6-4d87-ba7f-b032549478fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:22:47:9b:73:9c:3c:c8:40:5b:19:c8:ec: 15:30:78:a3:1e:65:17:cb:32:49:ea:aa:c1:9c:27: c5:99:ee:07:2b:ed:25:18:13:be:c7:15:9b:26:68: 01:46:63:98:2a:61:5a:62:9c:8f:a7:02:e9:f2:6a: 67:c3:8a:0e:d4:ee:c7:c9:2f:3a:9e:df:53:9a:6f: c0:29:e8:b1:fb:01:6a:9a:fd:99:5c:cc:5f:91:ac: 03:f6:d9:0f:c5:58:39:33:71:49:5d:7e:9b:0f:ed: bb:25:e8:68:ae:45:17:ac:0f:42:0b:5d:7d:d5:a2: 4a:91:9a:79:b2:ab:76:de:26:65:7f:b6:d8:50:87: 2b:bd:d4:99:76:01:dc:20:d0:5f:fa:2c:f8:0c:96: 0e:6e:73:2c:4b:25:40:7b:b8:8f:64:af:53:18:9d: 27:38:c8:91:f1:fd:f5:a4:be:fa:ca:96:9e:2b:be: 4c:21:49:ae:04:4b:e5:49:ca:33:12:33:d4:c1:66: 65:50:61:fc:bf:be:74:72:11:68:5a:1d:ed:23:4f: de:fe:a2:b3:f2:ff:e9:dd:b2:a6:98:26:98:35:2a: 5e:da:be:bc:df:f6:73:c2:33:4d:c4:ac:f8:69:67: 33:b6:ed:8a:b8:6a:78:a7:d8:6c:1b:b8:42:97:2f: 4b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3E:E7:DD:38:87:16:E9:D1:26:CD:B6:BA:19:58:06:01:9E:06:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f17ccdb8-050d-3ec3-aaf0-a191347cb622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:61:b8:bf:df:85:04:dd:2b:5b:ce:9b:54:ce:5f:50:99:48: 16:4a:c0:8b:64:a0:cb:79:26:98:4d:b2:7f:1d:76:13:97:fb: c9:c2:59:0e:20:57:d8:86:32:77:61:15:9f:a0:c4:70:4f:e0: c9:40:4a:66:a3:e2:be:d9:c8:ff:fe:15:49:bc:d1:87:92:2a: 1c:0e:97:9b:89:dd:98:4f:a9:d7:94:7a:c9:59:a3:2f:8a:0b: 22:f2:60:b5:61:9f:e1:73:4d:c9:47:0d:ac:48:1c:03:1c:ab: ee:97:56:ff:7c:1d:34:ea:99:39:3a:f2:19:f2:fe:44:33:de: 60:db:7e:66:35:a1:d9:ca:2d:bc:7c:28:75:6f:b8:ef:46:04: cc:ad:ae:22:81:a7:84:08:e9:79:c3:89:3b:f1:d5:7f:f0:fe: 29:d8:10:97:76:df:65:69:7f:92:ef:8d:f5:48:04:97:b9:70: 88:c0:46:f1:81:57:ba:64:c3:fc:09:92:5b:9e:57:cd:7c:8f: fd:d6:93:bf:2f:54:7b:ec:01:59:ae:28:0a:d4:f8:50:40:9d: 4b:36:c1:91:35:ab:3d:f1:ec:dd:83:ff:96:95:c6:42:25:cb: c6:3f:00:2b:fc:40:eb:58:b6:2b:dd:c7:21:84:b2:f9:33:d0: 34:57:42:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqXe6xgwQwGmKvSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzM1N1oXDTI1MDkxODA5MzM1N1owLzEtMCsGA1UEAxMk ZDdkMDlmYTgtZWJkNi00ZDg3LWJhN2YtYjAzMjU0OTQ3OGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoQiR5tznDzIQFsZyOwVMHijHmUXyzJJ6qrB nCfFme4HK+0lGBO+xxWbJmgBRmOYKmFaYpyPpwLp8mpnw4oO1O7HyS86nt9Tmm/A Keix+wFqmv2ZXMxfkawD9tkPxVg5M3FJXX6bD+27JehorkUXrA9CC1191aJKkZp5 sqt23iZlf7bYUIcrvdSZdgHcINBf+iz4DJYObnMsSyVAe7iPZK9TGJ0nOMiR8f31 pL76ypaeK75MIUmuBEvlScozEjPUwWZlUGH8v750chFoWh3tI0/e/qKz8v/p3bKm mCaYNSpe2r683/ZzwjNNxKz4aWcztu2KuGp4p9hsG7hCly9LwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI+5904hxbp0SbNtroZWAYBngb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjE3Y2NkYjgtMDUwZC0z ZWMzLWFhZjAtYTE5MTM0N2NiNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJhuL/fhQTdK1vOm1TOX1CZSBZKwItkoMt5JphNsn8ddhOX+8nCWQ4g V9iGMndhFZ+gxHBP4MlASmaj4r7ZyP/+FUm80YeSKhwOl5uJ3ZhPqdeUeslZoy+K CyLyYLVhn+FzTclHDaxIHAMcq+6XVv98HTTqmTk68hny/kQz3mDbfmY1odnKLbx8 KHVvuO9GBMytriKBp4QI6XnDiTvx1X/w/inYEJd232Vpf5LvjfVIBJe5cIjARvGB V7pkw/wJklueV818j/3Wk78vVHvsAVmuKArU+FBAnUs2wZE1qz3x7N2D/5aVxkIl y8Y/ACv8QOtYtivdxyGEsvkz0DRXQmQ= -----END CERTIFICATE-----Generated at Tue Jul 1 18:01:27 2025 by rpki-client