$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2e23462-a120-3527-9c5a-fa22db4572a3.roa File: f2e23462-a120-3527-9c5a-fa22db4572a3.roa (raw, json) Hash identifier: THDLDi7katypLM7eg/65atk7gnYhG85/vRNWkA0++l8= Subject key identifier: 16:42:4A:C1:8C:E5:EC:49:81:7B:D4:E3:99:5E:60:8A:7D:EB:A3:51 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77A0CF9991395768EE2000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2e23462-a120-3527-9c5a-fa22db4572a3.roa Signing time: Thu 19 Jun 2025 14:41:55 +0000 ROA not before: Thu 19 Jun 2025 14:41:55 +0000 ROA not after: Wed 17 Sep 2025 14:41:55 +0000 asID: 22773 IP address blocks: 72.222.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:a0:cf:99:91:39:57:68:ee:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:55 2025 GMT Not After : Sep 17 14:41:55 2025 GMT Subject: CN=54452f71-24b8-480b-848f-eaffa6ba8517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:50:79:57:be:7c:a8:9f:b4:c0:46:bc:18: 04:e6:a7:92:36:dd:fe:15:f9:21:d4:a8:0c:99:14: 4e:21:ca:d4:59:dd:c4:9e:ae:93:56:f3:80:95:8e: 00:3f:c3:d7:6a:40:b3:d8:9f:c3:88:5e:7a:d9:f6: 91:ee:ba:1a:6e:26:95:29:cb:40:09:15:07:04:c4: e7:d2:65:dd:d2:17:ef:95:bc:47:df:43:f0:cc:05: 94:2b:67:ce:e8:68:dc:89:b5:3a:c8:1c:db:e4:c8: e3:8c:2d:b3:54:95:80:4b:e5:6e:3a:fa:80:9a:58: 81:4b:e6:a8:37:37:01:40:a7:32:35:01:67:55:6f: 21:9c:b2:16:52:4e:02:2e:96:67:c0:9b:b3:f7:03: 4b:65:ae:ae:52:f0:ac:e3:d6:f9:50:ca:d8:e6:29: 18:9d:2a:bc:a8:76:fd:10:82:a7:4f:dc:95:66:c4: fa:7a:ad:dd:53:bc:70:8f:1a:4b:36:e9:37:49:fa: f2:9f:23:c6:24:57:5c:65:0f:d2:05:c2:24:ad:e8: c8:e9:3a:5b:74:a9:13:ff:70:2c:90:33:84:6f:b8: 70:f2:c2:0c:8d:a0:ee:d4:55:31:fe:f5:82:be:1d: 0a:a2:f8:f0:d6:6c:c7:9b:01:c6:aa:9e:58:8c:65: 9f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:42:4A:C1:8C:E5:EC:49:81:7B:D4:E3:99:5E:60:8A:7D:EB:A3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2e23462-a120-3527-9c5a-fa22db4572a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:97:2a:cc:50:dd:e1:ec:85:ad:95:32:19:ce:6c:98:b3:ae: 86:0c:ee:6e:72:58:8c:ad:0e:a5:2d:29:f4:a2:03:bb:0d:67: b3:af:55:fd:55:b9:ce:ab:2d:53:85:1e:de:a4:d0:17:65:3c: db:14:8d:be:fe:e9:b8:74:22:5f:a1:1f:dc:ae:c4:d5:70:7a: 89:05:2c:0e:4f:23:e3:cb:10:1d:4d:64:2a:5e:e1:f6:94:e5: 49:43:3a:35:17:f2:16:26:7e:5b:55:15:4c:59:e9:fc:17:c8: 48:16:df:88:c4:86:ce:e7:1a:a8:86:70:47:2d:18:14:ec:14: 84:d5:47:03:98:3c:c7:c6:44:a6:5c:e9:38:98:1d:ad:eb:c5: a8:85:15:e4:63:bf:eb:8c:85:e7:e6:d7:0e:1e:a9:4e:56:9c: 16:4c:fa:3e:0f:23:1b:36:2a:cf:67:84:7e:14:90:a3:ad:c2: 54:db:8c:41:a1:b1:b6:3b:0b:f7:e4:6f:ae:46:67:4e:65:e1: 38:92:4d:36:5b:48:f9:f5:a6:14:b5:50:64:17:64:8e:93:51: a8:d7:a0:5c:50:02:cc:2d:8a:2d:ef:71:95:9a:b8:b3:9b:bf: c9:c5:38:be:04:61:56:40:0b:75:fa:dc:92:c6:ad:5c:93:45: e9:05:e7:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d6DPmZE5V2juIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDE1NVoXDTI1MDkxNzE0NDE1NVowLzEtMCsGA1UEAxMk NTQ0NTJmNzEtMjRiOC00ODBiLTg0OGYtZWFmZmE2YmE4NTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoxQeVe+fKiftMBGvBgE5qeSNt3+Ffkh1KgM mRROIcrUWd3Enq6TVvOAlY4AP8PXakCz2J/DiF562faR7roabiaVKctACRUHBMTn 0mXd0hfvlbxH30PwzAWUK2fO6GjcibU6yBzb5MjjjC2zVJWAS+VuOvqAmliBS+ao NzcBQKcyNQFnVW8hnLIWUk4CLpZnwJuz9wNLZa6uUvCs49b5UMrY5ikYnSq8qHb9 EIKnT9yVZsT6eq3dU7xwjxpLNuk3SfrynyPGJFdcZQ/SBcIkrejI6TpbdKkT/3As kDOEb7hw8sIMjaDu1FUx/vWCvh0Kovjw1mzHmwHGqp5YjGWfgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZCSsGM5exJgXvU45leYIp966NRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjJlMjM0NjItYTEyMC0z NTI3LTljNWEtZmEyMmRiNDU3MmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWXKsxQ3eHsha2VMhnObJizroYM7m5yWIytDqUtKfSiA7sNZ7OvVf1V uc6rLVOFHt6k0BdlPNsUjb7+6bh0Il+hH9yuxNVweokFLA5PI+PLEB1NZCpe4faU 5UlDOjUX8hYmfltVFUxZ6fwXyEgW34jEhs7nGqiGcEctGBTsFITVRwOYPMfGRKZc 6TiYHa3rxaiFFeRjv+uMhefm1w4eqU5WnBZM+j4PIxs2Ks9nhH4UkKOtwlTbjEGh sbY7C/fkb65GZ05l4TiSTTZbSPn1phS1UGQXZI6TUajXoFxQAswtii3vcZWauLOb v8nFOL4EYVZAC3X63JLGrVyTRekF564= -----END CERTIFICATE-----Generated at Tue Jul 1 18:17:59 2025 by rpki-client