$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f72fdafa-a375-3d40-b633-1fd95e583e75.roa File: f72fdafa-a375-3d40-b633-1fd95e583e75.roa (raw, json) Hash identifier: 85qQdfASfWaGyI3709IebGImUvFoFYGtjAd0ZgXhBac= Subject key identifier: F2:D5:5E:D6:A4:F8:13:9E:AE:20:AC:B0:6A:99:B9:78:F3:F6:F3:C3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75F93DD598A44B8D563000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f72fdafa-a375-3d40-b633-1fd95e583e75.roa Signing time: Thu 19 Jun 2025 14:38:35 +0000 ROA not before: Thu 19 Jun 2025 14:38:35 +0000 ROA not after: Wed 17 Sep 2025 14:38:35 +0000 asID: 22773 IP address blocks: 72.206.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:f9:3d:d5:98:a4:4b:8d:56:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:35 2025 GMT Not After : Sep 17 14:38:35 2025 GMT Subject: CN=e46c3e58-6307-4c66-b838-2b0b0525d12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:f0:05:00:68:27:eb:5e:92:f1:c6:ee:1b: 5c:a1:b8:ce:4d:9d:52:c4:c2:ac:f4:20:d5:97:45: 68:ae:08:81:50:06:61:51:16:fd:c3:23:b1:2e:2a: 51:60:78:5d:1e:7c:ac:42:c5:4e:ef:d3:7e:06:a8: c8:72:4d:13:03:40:a3:74:a9:ed:81:78:7f:45:d8: 3c:20:35:5c:3e:ad:c0:b0:76:1e:37:ae:6b:2a:c6: 6e:73:21:93:d2:d4:c7:35:ac:2a:d7:41:b6:51:6d: 3e:3e:d2:ca:1b:f5:8c:e1:60:c0:c4:2e:c0:03:92: da:2f:88:7b:de:f7:48:c4:a2:e4:0d:fb:fd:95:c1: c3:c5:8a:c1:bc:90:8e:af:b4:39:b6:df:56:a3:c1: a7:e0:59:4b:91:1c:e2:a3:d0:ac:8a:fb:d8:14:b7: 5b:91:85:a2:e7:2d:6a:f8:37:e3:0c:73:99:20:61: b7:01:a1:76:ff:b0:5f:de:90:d3:43:f2:27:ea:ad: 3e:ef:bf:65:a8:45:0d:04:2e:d7:16:bd:e6:ea:a4: ef:56:fc:d3:70:c6:a3:9b:56:04:eb:52:e3:a0:a2: 28:f0:95:f0:b4:72:77:c5:c5:b2:4d:92:85:b9:fb: be:b8:a4:a4:41:e1:43:eb:3e:ec:c5:89:ef:99:6e: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D5:5E:D6:A4:F8:13:9E:AE:20:AC:B0:6A:99:B9:78:F3:F6:F3:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f72fdafa-a375-3d40-b633-1fd95e583e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:16:52:95:3f:25:d0:a4:8d:80:2a:e1:84:b5:be:54:ae:7e: bd:39:f4:d9:51:1c:53:7c:3a:b6:18:b3:89:34:0e:a2:fe:98: 78:90:79:9f:3b:bb:51:b8:8c:bd:82:20:86:0b:05:fa:e7:2e: 46:1d:b6:cb:46:fb:e9:7f:22:50:62:a2:c2:25:f6:66:6b:5f: 2d:87:10:f5:b8:64:cb:13:66:4a:ff:43:76:3b:b0:21:ee:b1: 9b:e1:cf:da:59:01:7d:23:9e:11:e3:40:d6:61:96:79:8e:1d: 96:f9:6f:29:f6:42:7a:43:46:58:66:3b:1c:d6:3f:ef:69:e8: 67:e4:5d:6a:c6:0a:eb:b5:b4:14:bc:7f:13:9d:e0:c3:6b:7d: 5a:7d:93:47:12:a7:f8:07:d6:44:37:13:91:4c:80:ac:98:b7: 2e:ca:82:c2:63:51:6a:a6:dc:bf:c2:29:4c:d9:b2:f0:6f:79: 30:8c:52:1f:ab:7f:61:b1:2d:09:79:b0:71:9b:dd:7c:3d:c0: dc:9e:65:a0:e9:20:ac:77:29:c4:97:30:6a:f4:1e:ab:bf:3a: b7:96:aa:83:0e:99:14:76:dc:83:43:e8:8f:c1:74:c1:da:9e: 02:31:55:c8:23:2d:ca:c2:98:7f:67:7a:ee:9b:54:84:b4:91: 84:85:e9:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dfk91ZikS41WMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgzNVoXDTI1MDkxNzE0MzgzNVowLzEtMCsGA1UEAxMk ZTQ2YzNlNTgtNjMwNy00YzY2LWI4MzgtMmIwYjA1MjVkMTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGXwBQBoJ+tekvHG7htcobjOTZ1SxMKs9CDV l0VorgiBUAZhURb9wyOxLipRYHhdHnysQsVO79N+BqjIck0TA0CjdKntgXh/Rdg8 IDVcPq3AsHYeN65rKsZucyGT0tTHNawq10G2UW0+PtLKG/WM4WDAxC7AA5LaL4h7 3vdIxKLkDfv9lcHDxYrBvJCOr7Q5tt9Wo8Gn4FlLkRzio9CsivvYFLdbkYWi5y1q +DfjDHOZIGG3AaF2/7Bf3pDTQ/In6q0+779lqEUNBC7XFr3m6qTvVvzTcMajm1YE 61LjoKIo8JXwtHJ3xcWyTZKFufu+uKSkQeFD6z7sxYnvmW4mrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLVXtak+BOeriCssGqZuXjz9vPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjcyZmRhZmEtYTM3NS0z ZDQwLWI2MzMtMWZkOTVlNTgzZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsWUpU/JdCkjYAq4YS1vlSufr059NlRHFN8OrYYs4k0DqL+mHiQeZ87 u1G4jL2CIIYLBfrnLkYdtstG++l/IlBiosIl9mZrXy2HEPW4ZMsTZkr/Q3Y7sCHu sZvhz9pZAX0jnhHjQNZhlnmOHZb5byn2QnpDRlhmOxzWP+9p6GfkXWrGCuu1tBS8 fxOd4MNrfVp9k0cSp/gH1kQ3E5FMgKyYty7KgsJjUWqm3L/CKUzZsvBveTCMUh+r f2GxLQl5sHGb3Xw9wNyeZaDpIKx3KcSXMGr0Hqu/OreWqoMOmRR23IND6I/BdMHa ngIxVcgjLcrCmH9neu6bVIS0kYSF6as= -----END CERTIFICATE-----Generated at Tue Jul 1 15:24:15 2025 by rpki-client