$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbd0d37a-9b8e-31cf-a8dd-b523bfbf7166.roa File: fbd0d37a-9b8e-31cf-a8dd-b523bfbf7166.roa (raw, json) Hash identifier: lkUeTyUkNKXo7fAhubwp32ls/mTQf7X7RslcEWiA/v8= Subject key identifier: 29:98:00:B3:73:5E:00:54:4D:90:3D:2F:0F:C8:9B:64:25:92:30:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7646431FFDBBD8D4BE4700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbd0d37a-9b8e-31cf-a8dd-b523bfbf7166.roa Signing time: Thu 19 Jun 2025 14:39:11 +0000 ROA not before: Thu 19 Jun 2025 14:39:11 +0000 ROA not after: Wed 17 Sep 2025 14:39:11 +0000 asID: 22773 IP address blocks: 72.208.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:46:43:1f:fd:bb:d8:d4:be:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:11 2025 GMT Not After : Sep 17 14:39:11 2025 GMT Subject: CN=05d2a35d-b58b-4c1c-8303-41ac10c9699c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ab:59:1d:5c:95:44:0e:89:86:ce:8f:7a:15: 25:cd:a6:ee:9b:31:79:d3:fc:ec:d3:6e:76:7a:e9: 65:11:86:61:08:d9:f4:f1:12:23:74:ce:59:11:f5: 8a:88:10:02:03:3f:93:41:90:14:9a:13:d7:75:46: b2:a6:16:3d:f2:2f:02:0c:bc:53:d0:e7:c7:9c:ab: 68:ff:f5:ce:4e:f5:c5:4d:e7:09:8b:5e:7f:51:15: bd:43:7e:52:41:71:eb:46:d9:46:82:d5:d0:6c:ef: d3:24:6b:51:6f:f3:d7:1a:33:e2:1a:c2:43:26:96: bd:89:2d:c0:62:d5:21:d5:2e:c3:03:9b:3d:59:c5: d1:0f:93:fb:de:35:e4:01:30:d0:bc:4d:4d:a7:46: a4:dc:7c:4a:ec:19:87:1e:f6:3c:a6:6e:f1:da:e3: b3:77:7c:95:fb:a9:82:ee:ff:fa:11:b8:b0:a5:28: a4:6d:4c:53:31:33:66:06:0e:be:82:53:e6:d1:b0: 10:e6:2f:e9:f5:14:8d:c0:02:7f:da:2e:af:9c:a5: e4:1e:17:f0:c4:70:94:6a:75:39:d1:ee:86:ac:4d: 60:68:ef:4a:bf:eb:b6:e4:d8:49:cb:71:58:07:85: a6:b0:90:61:ee:2f:31:e6:32:6c:9b:90:e1:87:a0: 5a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:98:00:B3:73:5E:00:54:4D:90:3D:2F:0F:C8:9B:64:25:92:30:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbd0d37a-9b8e-31cf-a8dd-b523bfbf7166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d0:e8:50:e6:8e:1b:91:86:6d:35:12:54:32:c8:7b:04:d0: 3c:32:06:3a:a2:cd:8a:38:7a:4a:1b:5b:43:69:58:b7:67:b5: b6:61:73:1c:37:18:bf:c0:13:1b:8b:38:ef:11:a6:56:13:bc: 0b:07:5a:8a:d8:92:5a:6d:22:3f:1c:a1:c7:73:02:de:9d:b1: 52:cf:bf:e9:83:00:6e:ea:8e:08:70:5d:96:62:b2:52:51:21: f8:e7:90:ec:93:67:26:7d:26:f1:af:c2:eb:8a:36:80:4c:67: 2d:3a:4a:7a:fc:2a:13:c0:4b:7b:3c:da:1c:24:18:4d:a2:07: 29:fb:f3:14:eb:04:74:1a:c2:f2:cb:99:72:5e:73:eb:da:e1: d4:29:8d:e9:8a:0b:9f:30:72:c7:3a:bf:fa:68:0e:02:88:b7: 44:d8:60:74:4f:a5:f7:48:1d:47:ab:15:fb:bf:5b:d9:ea:bf: 20:7d:f2:16:a8:48:d6:d9:bb:d8:8b:50:ab:af:7f:82:21:da: e7:67:89:10:dd:89:90:b9:7f:6d:62:67:92:2c:98:c0:5e:1a: cc:ff:f1:b8:c8:e3:63:9d:fb:ec:1d:bf:f0:24:24:df:dc:17: 95:11:a7:22:3f:1a:75:49:ac:90:33:b4:72:a0:47:44:7c:88: 2d:63:b6:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dkZDH/272NS+RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkxMVoXDTI1MDkxNzE0MzkxMVowLzEtMCsGA1UEAxMk MDVkMmEzNWQtYjU4Yi00YzFjLTgzMDMtNDFhYzEwYzk2OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6tZHVyVRA6Jhs6PehUlzabumzF50/zs0252 eullEYZhCNn08RIjdM5ZEfWKiBACAz+TQZAUmhPXdUayphY98i8CDLxT0OfHnKto //XOTvXFTecJi15/URW9Q35SQXHrRtlGgtXQbO/TJGtRb/PXGjPiGsJDJpa9iS3A YtUh1S7DA5s9WcXRD5P73jXkATDQvE1Np0ak3HxK7BmHHvY8pm7x2uOzd3yV+6mC 7v/6EbiwpSikbUxTMTNmBg6+glPm0bAQ5i/p9RSNwAJ/2i6vnKXkHhfwxHCUanU5 0e6GrE1gaO9Kv+u25NhJy3FYB4WmsJBh7i8x5jJsm5Dhh6BarwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmYALNzXgBUTZA9Lw/Im2QlkjDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmJkMGQzN2EtOWI4ZS0z MWNmLWE4ZGQtYjUyM2JmYmY3MTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNBjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPQ6FDmjhuRhm01ElQyyHsE0DwyBjqizYo4ekobW0NpWLdntbZhcxw3 GL/AExuLOO8RplYTvAsHWorYklptIj8cocdzAt6dsVLPv+mDAG7qjghwXZZislJR IfjnkOyTZyZ9JvGvwuuKNoBMZy06Snr8KhPAS3s82hwkGE2iByn78xTrBHQawvLL mXJec+va4dQpjemKC58wcsc6v/poDgKIt0TYYHRPpfdIHUerFfu/W9nqvyB98hao SNbZu9iLUKuvf4Ih2udniRDdiZC5f21iZ5IsmMBeGsz/8bjI42Od++wdv/AkJN/c F5URpyI/GnVJrJAztHKgR0R8iC1jtkE= -----END CERTIFICATE-----Generated at Mon Jun 30 15:34:32 2025 by rpki-client