$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24047a3a-08b2-3223-a813-965298f8f240.roa File: 24047a3a-08b2-3223-a813-965298f8f240.roa (raw, json) Hash identifier: kwdSazBrvBAMPl29Y0H8YTPFYNwbFAk6TWMCZX3mnCM= Subject key identifier: 1D:37:ED:47:3E:DE:97:3A:F0:7E:72:1C:E1:2A:E1:2C:02:99:87:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77095BF4DBD0665AB5C991 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24047a3a-08b2-3223-a813-965298f8f240.roa Signing time: Thu 19 Jun 2025 14:40:43 +0000 ROA not before: Thu 19 Jun 2025 14:40:43 +0000 ROA not after: Wed 17 Sep 2025 14:40:43 +0000 asID: 22773 IP address blocks: 72.216.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:09:5b:f4:db:d0:66:5a:b5:c9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:43 2025 GMT Not After : Sep 17 14:40:43 2025 GMT Subject: CN=bac16a02-bec9-4da6-a485-e82fb043a475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:14:a8:84:c5:a9:2f:13:36:9e:26:da:46:26: 9d:85:7f:1a:a5:74:ba:9c:a7:00:23:65:9e:0e:14: ac:06:b0:e3:a2:12:fc:ac:0d:1d:6c:5f:3c:ed:6d: 9f:31:1a:bf:cc:2c:86:f7:3c:a7:5d:3c:95:3c:a0: 04:0a:ee:22:5c:8b:46:1e:9f:3f:23:6b:15:32:ae: 2e:84:f1:6f:90:ac:cc:03:aa:88:da:38:63:b1:24: a8:a5:54:d3:93:d4:97:84:55:12:b4:c5:1b:2b:fd: 1a:36:d1:3b:39:ec:b0:95:23:c0:fb:1d:6a:f1:29: 3a:57:55:e5:6e:9c:b8:05:2f:fc:72:06:e4:9e:c8: cc:38:e2:40:9c:05:28:27:1c:ce:e6:4e:37:1c:f7: f8:1d:57:24:f9:f7:c1:1b:6d:42:94:10:14:65:4c: 02:38:28:04:e9:aa:7c:ae:ca:f4:be:f9:53:46:03: 88:e1:a2:b0:31:f9:0d:ee:f2:5e:fc:c5:09:f7:4f: 1d:c4:65:af:9d:ba:19:94:06:24:8c:1e:f4:89:13: d3:46:8a:e6:b8:db:86:ce:86:c6:b2:31:9b:2d:af: 2f:b2:cb:a3:a8:6f:10:60:33:0b:e5:1d:9b:59:91: 91:78:c1:52:ab:43:0a:28:73:9b:af:26:80:7b:89: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:37:ED:47:3E:DE:97:3A:F0:7E:72:1C:E1:2A:E1:2C:02:99:87:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24047a3a-08b2-3223-a813-965298f8f240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d1:5f:47:2f:55:4c:8c:11:2d:cb:10:a3:7e:a8:07:75:0d: 0a:ad:a9:a5:25:27:d7:08:0f:08:45:63:07:4d:82:09:d3:65: a3:ab:47:5a:01:74:5d:d6:63:fd:36:8e:56:b3:7a:a6:9d:54: 46:7f:48:c4:b8:e7:d8:56:30:8b:33:5f:eb:b1:f1:36:15:03: 9e:f1:56:97:51:c6:79:21:1e:8a:fc:9b:80:4b:c6:1d:32:f7: 4b:92:8e:50:3c:d2:25:cd:ad:92:61:37:22:ce:00:9e:72:96: 8e:1d:dc:3d:76:09:c2:26:00:35:90:ba:27:e0:89:e3:67:50: 69:32:9e:73:5c:f5:fd:7f:55:77:23:c2:2d:a2:5e:1b:24:e9: 13:71:fe:15:15:9e:aa:37:28:0e:fb:a4:59:df:6b:3c:64:1d: e8:84:27:54:5a:c5:da:27:cf:88:48:19:68:8a:84:5d:4f:e5: 48:d2:e3:bb:68:39:e7:87:d8:87:d9:cf:90:b5:bc:22:d9:45: 2a:dd:54:6a:a2:31:93:ca:72:f5:67:82:e6:67:c2:34:05:53: 8b:fc:64:f4:ad:a4:1b:dc:3f:da:54:67:74:9c:c5:48:a7:ec: 08:14:7f:3c:a1:67:2c:0f:cd:9e:d5:f0:94:67:dd:f4:36:ff: 9c:63:b8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dwlb9NvQZlq1yZEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDA0M1oXDTI1MDkxNzE0NDA0M1owLzEtMCsGA1UEAxMk YmFjMTZhMDItYmVjOS00ZGE2LWE0ODUtZTgyZmIwNDNhNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBSohMWpLxM2nibaRiadhX8apXS6nKcAI2We DhSsBrDjohL8rA0dbF887W2fMRq/zCyG9zynXTyVPKAECu4iXItGHp8/I2sVMq4u hPFvkKzMA6qI2jhjsSSopVTTk9SXhFUStMUbK/0aNtE7OeywlSPA+x1q8Sk6V1Xl bpy4BS/8cgbknsjMOOJAnAUoJxzO5k43HPf4HVck+ffBG21ClBAUZUwCOCgE6ap8 rsr0vvlTRgOI4aKwMfkN7vJe/MUJ908dxGWvnboZlAYkjB70iRPTRormuNuGzobG sjGbLa8vssujqG8QYDML5R2bWZGReMFSq0MKKHObryaAe4kb1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB037Uc+3pc68H5yHOEq4SwCmYfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQwNDdhM2EtMDhiMi0z MjIzLWE4MTMtOTY1Mjk4ZjhmMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7RX0cvVUyMES3LEKN+qAd1DQqtqaUlJ9cIDwhFYwdNggnTZaOrR1oB dF3WY/02jlazeqadVEZ/SMS459hWMIszX+ux8TYVA57xVpdRxnkhHor8m4BLxh0y 90uSjlA80iXNrZJhNyLOAJ5ylo4d3D12CcImADWQuifgieNnUGkynnNc9f1/VXcj wi2iXhsk6RNx/hUVnqo3KA77pFnfazxkHeiEJ1Raxdonz4hIGWiKhF1P5UjS47to OeeH2IfZz5C1vCLZRSrdVGqiMZPKcvVnguZnwjQFU4v8ZPStpBvcP9pUZ3ScxUin 7AgUfzyhZywPzZ7V8JRn3fQ2/5xjuIA= -----END CERTIFICATE-----Generated at Wed Jul 2 07:16:37 2025 by rpki-client