$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a176573-e1de-34ee-bfc0-34d3269b9034.roa File: 3a176573-e1de-34ee-bfc0-34d3269b9034.roa (raw, json) Hash identifier: UTyXg6mqzHhtEVZOQUlzNp5pAuBk7lk1LrJNQqT8uGw= Subject key identifier: 9A:63:36:CA:07:A9:3B:72:8C:40:4B:D7:12:DB:B4:73:1F:9D:52:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76C65B5C41A3ECC213B280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a176573-e1de-34ee-bfc0-34d3269b9034.roa Signing time: Thu 19 Jun 2025 14:40:12 +0000 ROA not before: Thu 19 Jun 2025 14:40:12 +0000 ROA not after: Wed 17 Sep 2025 14:40:12 +0000 asID: 22773 IP address blocks: 72.211.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:c6:5b:5c:41:a3:ec:c2:13:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:12 2025 GMT Not After : Sep 17 14:40:12 2025 GMT Subject: CN=31088e77-04f7-4bbd-ab03-9e1715ea4224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:0e:54:de:ff:d1:db:ac:ff:1b:31:32:ef: 52:19:7d:4e:1e:39:71:81:ab:08:db:39:e7:63:83: 28:73:fa:12:f1:aa:30:02:f8:9e:1f:10:d3:56:4c: b7:61:e4:48:cb:ba:b1:e2:66:f3:05:aa:a5:47:9a: 99:4a:6a:73:1b:58:b4:03:a0:2b:bc:d5:87:59:26: a7:e2:38:81:f9:56:1f:77:d6:0f:96:c3:0b:14:13: cb:e8:31:db:3a:46:1a:29:f1:1a:3e:9a:10:96:63: fd:64:38:df:a8:59:7d:d0:84:14:be:26:5d:e2:a9: 0a:2f:ef:de:85:00:e6:10:cc:aa:1c:ef:5b:33:58: 42:72:2d:ed:bb:32:29:09:bf:83:6f:cf:20:d4:29: 8c:34:b3:06:c7:de:75:ac:a0:06:1f:21:bc:70:5a: 0f:ea:43:5d:7b:f2:e3:e2:f3:89:37:69:18:bd:b8: 1a:6b:68:5e:80:91:4d:b8:4d:5c:c9:e7:b2:b4:9b: 17:f7:2b:0c:3e:3b:1a:ae:26:65:4a:98:0c:dc:b1: 9d:04:7e:cf:8a:25:6d:2a:63:bd:d6:4e:67:24:71: b0:bb:b4:4c:e4:30:92:8b:13:39:2a:4a:ad:63:63: 77:7b:60:20:27:9c:18:83:71:be:25:3c:be:e6:fd: a7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:63:36:CA:07:A9:3B:72:8C:40:4B:D7:12:DB:B4:73:1F:9D:52:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a176573-e1de-34ee-bfc0-34d3269b9034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d2:03:9c:f0:ec:e6:bd:79:87:e9:cd:23:25:68:1e:32:fb: 75:36:88:3f:cd:0a:ae:53:2c:30:a6:0d:3e:22:00:e9:24:fc: a7:8f:72:a9:d6:35:5a:3a:86:6d:73:25:7b:c2:94:a6:5d:a1: e1:95:96:3b:ae:85:c6:a4:9a:d0:86:b7:4c:1b:db:d0:a2:10: 5c:67:4e:21:43:63:e6:c4:fc:1c:c7:33:1c:10:29:2d:37:76: eb:76:31:f8:4f:39:96:92:15:86:e6:26:b4:f6:f7:1b:bd:7f: eb:18:d0:54:ca:f7:f5:45:65:7a:5d:7d:de:8a:77:37:47:57: bb:f4:7d:12:3a:1f:30:6f:3d:fd:8f:bc:a1:b1:d5:ff:7e:83: b8:3e:4f:b5:67:81:96:1f:52:5c:68:5e:2f:79:7c:de:45:8a: bf:36:e3:01:46:28:b9:fd:5e:4f:c2:ab:8a:6e:ec:48:21:f9: 46:22:36:cf:99:2e:a4:87:c5:1a:c4:25:03:e2:d1:de:25:b7: 24:53:7b:42:ff:2c:38:f3:93:c9:cc:e9:a7:4e:87:80:e7:dd: 59:21:91:26:d7:f1:1d:b7:04:f7:d2:40:05:6d:49:e7:91:63: b5:09:53:4f:39:87:63:e6:08:a5:71:42:4d:db:c1:53:71:35: 41:80:43:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dsZbXEGj7MITsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAxMloXDTI1MDkxNzE0NDAxMlowLzEtMCsGA1UEAxMk MzEwODhlNzctMDRmNy00YmJkLWFiMDMtOWUxNzE1ZWE0MjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl4OVN7/0dus/xsxMu9SGX1OHjlxgasI2znn Y4Moc/oS8aowAvieHxDTVky3YeRIy7qx4mbzBaqlR5qZSmpzG1i0A6ArvNWHWSan 4jiB+VYfd9YPlsMLFBPL6DHbOkYaKfEaPpoQlmP9ZDjfqFl90IQUviZd4qkKL+/e hQDmEMyqHO9bM1hCci3tuzIpCb+Db88g1CmMNLMGx951rKAGHyG8cFoP6kNde/Lj 4vOJN2kYvbgaa2hegJFNuE1cyeeytJsX9ysMPjsariZlSpgM3LGdBH7PiiVtKmO9 1k5nJHGwu7RM5DCSixM5KkqtY2N3e2AgJ5wYg3G+JTy+5v2nGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpjNsoHqTtyjEBL1xLbtHMfnVLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ExNzY1NzMtZTFkZS0z NGVlLWJmYzAtMzRkMzI2OWI5MDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvSA5zw7Oa9eYfpzSMlaB4y+3U2iD/NCq5TLDCmDT4iAOkk/KePcqnW NVo6hm1zJXvClKZdoeGVljuuhcakmtCGt0wb29CiEFxnTiFDY+bE/BzHMxwQKS03 dut2MfhPOZaSFYbmJrT29xu9f+sY0FTK9/VFZXpdfd6KdzdHV7v0fRI6HzBvPf2P vKGx1f9+g7g+T7VngZYfUlxoXi95fN5Fir824wFGKLn9Xk/Cq4pu7Egh+UYiNs+Z LqSHxRrEJQPi0d4ltyRTe0L/LDjzk8nM6adOh4Dn3VkhkSbX8R23BPfSQAVtSeeR Y7UJU085h2PmCKVxQk3bwVNxNUGAQ/4= -----END CERTIFICATE-----Generated at Wed Jul 2 07:28:52 2025 by rpki-client