$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d164255-aef8-3138-ba75-01068ebd184e.roa File: 3d164255-aef8-3138-ba75-01068ebd184e.roa (raw, json) Hash identifier: EA6Cv+g9omv14O9p05MsRDDLt22u6hOA6XhqkYw3fZc= Subject key identifier: E3:0F:D2:5E:89:51:F9:46:0E:09:0D:9D:84:86:B7:16:06:AB:96:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77941B875E29DE4961CE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d164255-aef8-3138-ba75-01068ebd184e.roa Signing time: Thu 19 Jun 2025 14:41:49 +0000 ROA not before: Thu 19 Jun 2025 14:41:49 +0000 ROA not after: Wed 17 Sep 2025 14:41:49 +0000 asID: 22773 IP address blocks: 72.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:94:1b:87:5e:29:de:49:61:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:49 2025 GMT Not After : Sep 17 14:41:49 2025 GMT Subject: CN=9db7d391-9419-4202-bd96-610ec2002955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:a9:54:ef:52:2c:c5:0a:cb:2b:29:14:c2: 79:f4:f0:98:29:b5:0f:c0:8e:e9:5c:0f:2b:c2:ce: f1:a7:be:3d:55:5f:48:7d:bf:62:62:7f:ad:5e:dc: c7:eb:bf:e0:0d:2d:0d:77:27:79:73:2c:54:ee:78: 42:0b:a1:a4:c0:e4:89:76:52:94:c0:c1:14:ed:08: 99:09:1b:41:94:34:87:1e:d5:e4:63:2d:5c:1d:6c: ba:85:28:9a:dd:12:a3:cc:1a:e5:6c:79:67:50:6f: b0:ac:35:bf:8c:1d:4a:21:95:2c:b5:57:f5:c2:33: f7:d1:8b:b6:94:ea:86:bb:26:1b:47:c6:b1:96:34: 93:32:2a:5b:39:3c:84:ff:c6:85:6a:50:7f:da:47: ef:13:80:7d:a3:4e:80:6c:24:38:8a:ae:77:b7:6c: 2e:7b:51:8c:73:18:33:41:9a:b4:b6:31:af:ad:5d: c0:cd:2c:63:3d:db:7a:e8:60:48:c8:0e:37:4a:33: 2e:53:ff:e4:84:f0:a5:c0:d8:10:70:fe:67:7e:7a: 6d:04:21:6f:41:34:0f:f2:98:2d:08:22:08:ce:fa: 43:c3:9c:5d:64:fc:6d:e7:20:a6:28:05:b4:94:2c: b5:1b:eb:d9:92:3f:bf:75:0e:6c:81:78:f1:9d:ef: 8c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0F:D2:5E:89:51:F9:46:0E:09:0D:9D:84:86:B7:16:06:AB:96:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d164255-aef8-3138-ba75-01068ebd184e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0d:f0:78:df:c2:75:be:1f:56:5a:a5:7b:6e:98:c8:6b:66: a0:aa:43:39:83:7b:a1:9a:a2:af:cf:4c:bb:6a:59:56:77:17: 13:4c:42:f7:25:e3:2c:41:89:a7:66:49:e4:29:1d:b5:c5:24: 23:79:c2:cb:cf:fc:76:15:be:8f:5e:fe:a3:37:40:93:fd:40: 6b:cb:17:f7:12:fb:3d:9f:9f:dd:07:5b:68:9b:40:14:d4:85: 6d:2f:5c:ea:e0:75:5f:85:a1:ea:c2:6c:53:6d:1a:d4:8f:99: 3b:05:e2:0e:15:e2:3e:dd:aa:01:40:99:35:59:4c:e6:c4:27: ba:87:e2:82:91:8e:90:56:18:7a:dd:db:17:ba:1a:a7:f9:b0: 5f:6d:3d:2e:73:4c:79:26:73:b1:86:98:94:d7:be:53:18:c5: 20:82:8d:27:ce:ac:b6:51:fd:8b:a5:b2:79:73:69:07:c4:39: a6:2e:2c:3c:e6:be:66:30:c7:d7:20:73:e7:1d:38:bb:db:77: 2a:75:06:b6:02:85:9d:ab:15:55:35:e2:e7:dc:4e:6c:c9:8a: de:f9:0b:64:49:16:1c:ed:07:46:e7:9f:e2:18:89:02:f2:7e: 78:3c:70:9a:37:77:1d:32:81:20:80:23:54:27:4b:47:e7:18: cc:06:c0:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d5Qbh14p3klhzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDE0OVoXDTI1MDkxNzE0NDE0OVowLzEtMCsGA1UEAxMk OWRiN2QzOTEtOTQxOS00MjAyLWJkOTYtNjEwZWMyMDAyOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/mpVO9SLMUKyyspFMJ59PCYKbUPwI7pXA8r ws7xp749VV9Ifb9iYn+tXtzH67/gDS0Ndyd5cyxU7nhCC6GkwOSJdlKUwMEU7QiZ CRtBlDSHHtXkYy1cHWy6hSia3RKjzBrlbHlnUG+wrDW/jB1KIZUstVf1wjP30Yu2 lOqGuyYbR8axljSTMipbOTyE/8aFalB/2kfvE4B9o06AbCQ4iq53t2wue1GMcxgz QZq0tjGvrV3AzSxjPdt66GBIyA43SjMuU//khPClwNgQcP5nfnptBCFvQTQP8pgt CCIIzvpDw5xdZPxt5yCmKAW0lCy1G+vZkj+/dQ5sgXjxne+MnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMP0l6JUflGDgkNnYSGtxYGq5aNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2QxNjQyNTUtYWVmOC0z MTM4LWJhNzUtMDEwNjhlYmQxODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkN8HjfwnW+H1ZapXtumMhrZqCqQzmDe6Gaoq/PTLtqWVZ3FxNMQvcl 4yxBiadmSeQpHbXFJCN5wsvP/HYVvo9e/qM3QJP9QGvLF/cS+z2fn90HW2ibQBTU hW0vXOrgdV+FoerCbFNtGtSPmTsF4g4V4j7dqgFAmTVZTObEJ7qH4oKRjpBWGHrd 2xe6Gqf5sF9tPS5zTHkmc7GGmJTXvlMYxSCCjSfOrLZR/YulsnlzaQfEOaYuLDzm vmYwx9cgc+cdOLvbdyp1BrYChZ2rFVU14ufcTmzJit75C2RJFhztB0bnn+IYiQLy fng8cJo3dx0ygSCAI1QnS0fnGMwGwHI= -----END CERTIFICATE-----Generated at Wed Jul 2 07:28:55 2025 by rpki-client