$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11d97ade-671e-3750-b166-d56f58407b6a.roa File: 11d97ade-671e-3750-b166-d56f58407b6a.roa (raw, json) Hash identifier: psdsubkHdHru6GP2jr6/klEagqp0sG9/k1Fs6g5soT4= Subject key identifier: 12:07:91:39:64:DF:70:09:47:AF:2B:D2:35:73:91:0C:DC:CB:AD:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7740CFF66BC18F9314F160 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11d97ade-671e-3750-b166-d56f58407b6a.roa Signing time: Thu 19 Jun 2025 14:41:10 +0000 ROA not before: Thu 19 Jun 2025 14:41:10 +0000 ROA not after: Wed 17 Sep 2025 14:41:10 +0000 asID: 22773 IP address blocks: 72.217.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:40:cf:f6:6b:c1:8f:93:14:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:10 2025 GMT Not After : Sep 17 14:41:10 2025 GMT Subject: CN=2cc593d2-99ba-4758-898f-510ee5fd33c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:28:4a:c7:56:f8:4a:97:24:9e:ac:89:fa: ed:96:cf:a7:2b:e9:98:33:10:bd:94:d4:98:f4:26: c7:1a:da:1a:c0:e9:96:93:59:65:14:90:94:4d:57: 50:76:dc:73:74:0d:41:b0:a7:b9:83:ee:69:6e:c8: df:45:92:0d:64:3d:1d:c6:62:5e:d7:38:5d:4e:38: 7e:ee:1e:73:c7:6a:95:74:e2:49:96:22:64:ac:a6: 8a:81:98:d3:68:7a:3b:ad:a5:71:fd:ae:2a:60:da: 83:7a:8d:a0:54:24:46:3f:67:02:d0:73:70:06:04: db:3a:9b:8d:7f:32:38:d5:25:e3:11:df:c5:f2:cd: 57:84:80:37:b1:91:bc:d6:d2:33:23:d0:5f:a7:bd: 17:ed:28:b8:f2:35:92:de:93:8f:5e:20:a6:10:5b: 70:b6:a9:eb:ee:95:1a:31:c6:c9:88:a9:ca:d2:f5: b2:0a:24:01:3d:e8:42:5b:c1:d9:62:01:a1:bd:34: d7:b4:92:66:00:db:c4:e2:9e:0f:01:ed:58:ce:e8: ea:7b:26:6a:87:95:79:f5:c8:6f:e3:18:e4:52:e9: d5:da:bd:ca:b6:c7:41:4f:ee:a1:e9:4c:2f:d8:3a: db:a0:85:14:64:23:8c:e4:5c:e0:d2:9e:29:c6:f6: fb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:07:91:39:64:DF:70:09:47:AF:2B:D2:35:73:91:0C:DC:CB:AD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11d97ade-671e-3750-b166-d56f58407b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:95:ed:19:6a:b6:45:78:4a:31:9e:95:97:28:9b:73:45:69: 13:7e:bc:6f:05:19:7e:4a:a4:cd:35:ce:fa:05:61:c4:f3:14: b8:3a:5d:89:2b:b9:63:25:0c:c5:57:7d:4c:28:3e:2e:9b:1d: f5:74:d2:4f:b1:51:8e:25:6f:26:68:58:13:14:ca:74:1b:4f: 9b:ba:78:cc:19:2d:55:d0:ee:85:c0:00:a9:25:eb:61:18:ff: 81:4d:2d:ed:46:26:25:e7:e5:b3:6d:48:e7:a1:e4:8d:7d:da: d7:9e:66:b1:d8:34:5c:e0:29:83:44:77:a9:00:e1:c8:e5:c0: 5e:74:44:1d:78:74:0e:af:2c:89:2b:b7:b5:12:b0:b4:f8:a2: c7:8d:fe:3e:c1:79:60:41:8b:98:92:09:79:66:3d:30:50:37: 55:11:48:b7:47:f5:9c:a6:de:46:1d:31:5a:7a:34:df:b0:f6: d6:d8:f5:43:f6:24:6e:5d:0c:81:ce:fc:be:a5:84:54:3d:b4: 79:9f:f1:3f:60:76:40:56:fd:f8:48:9d:49:0e:67:33:61:7e: 64:bc:56:bd:42:de:b7:9e:9a:12:64:68:81:d6:c4:03:46:ac: c2:05:90:42:f5:65:e5:2b:41:e4:03:33:00:46:75:5c:34:fa: cc:8e:20:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d0DP9mvBj5MU8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDExMFoXDTI1MDkxNzE0NDExMFowLzEtMCsGA1UEAxMk MmNjNTkzZDItOTliYS00NzU4LTg5OGYtNTEwZWU1ZmQzM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7MoSsdW+EqXJJ6sifrtls+nK+mYMxC9lNSY 9CbHGtoawOmWk1llFJCUTVdQdtxzdA1BsKe5g+5pbsjfRZINZD0dxmJe1zhdTjh+ 7h5zx2qVdOJJliJkrKaKgZjTaHo7raVx/a4qYNqDeo2gVCRGP2cC0HNwBgTbOpuN fzI41SXjEd/F8s1XhIA3sZG81tIzI9Bfp70X7Si48jWS3pOPXiCmEFtwtqnr7pUa McbJiKnK0vWyCiQBPehCW8HZYgGhvTTXtJJmANvE4p4PAe1YzujqeyZqh5V59chv 4xjkUunV2r3KtsdBT+6h6Uwv2DrboIUUZCOM5Fzg0p4pxvb7cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIHkTlk33AJR68r0jVzkQzcy60dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTFkOTdhZGUtNjcxZS0z NzUwLWIxNjYtZDU2ZjU4NDA3YjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOV7RlqtkV4SjGelZcom3NFaRN+vG8FGX5KpM01zvoFYcTzFLg6XYkr uWMlDMVXfUwoPi6bHfV00k+xUY4lbyZoWBMUynQbT5u6eMwZLVXQ7oXAAKkl62EY /4FNLe1GJiXn5bNtSOeh5I192teeZrHYNFzgKYNEd6kA4cjlwF50RB14dA6vLIkr t7USsLT4oseN/j7BeWBBi5iSCXlmPTBQN1URSLdH9Zym3kYdMVp6NN+w9tbY9UP2 JG5dDIHO/L6lhFQ9tHmf8T9gdkBW/fhInUkOZzNhfmS8Vr1C3reemhJkaIHWxANG rMIFkEL1ZeUrQeQDMwBGdVw0+syOIEc= -----END CERTIFICATE-----Generated at Wed Jul 2 07:15:14 2025 by rpki-client