$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4384a40a-c21d-3393-b819-4412659940e1.roa File: 4384a40a-c21d-3393-b819-4412659940e1.roa (raw, json) Hash identifier: AuI+AweXZyOYnsDLnUHJy4m5x1BtlWEv5dGV4FOqDo4= Subject key identifier: 6A:E7:E9:42:9E:BF:B7:FD:8A:EF:7A:D2:BF:C2:0B:38:7C:4B:0D:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFE2F000E3B3975F36AD580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4384a40a-c21d-3393-b819-4412659940e1.roa Signing time: Thu 19 Jun 2025 10:37:13 +0000 ROA not before: Thu 19 Jun 2025 10:37:13 +0000 ROA not after: Wed 17 Sep 2025 10:37:13 +0000 asID: 22773 IP address blocks: 174.72.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fe:2f:00:0e:3b:39:75:f3:6a:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:37:13 2025 GMT Not After : Sep 17 10:37:13 2025 GMT Subject: CN=003dc960-a15a-4eed-94f7-9dcc39e27210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:82:c5:b2:e8:11:b3:7e:14:76:c4:ab:f6: 84:d8:99:cd:7d:83:84:5d:71:42:10:c5:7c:ae:83: f1:b8:c5:bd:65:5a:96:93:b3:73:0d:07:71:af:c3: 0e:07:16:1e:f6:63:d0:8f:36:1a:0f:bd:e0:db:50: a6:0c:b5:d7:5e:d2:55:3d:73:53:f9:a0:1c:7e:81: c8:8e:81:b8:77:0d:b2:ff:63:d4:8f:c0:cf:46:09: 6a:09:27:18:6a:19:d5:75:d9:8a:d7:34:dc:30:29: ef:db:41:09:49:ae:fb:98:dc:13:c7:3e:62:95:af: 0e:d9:b8:4c:b9:30:8b:46:e9:72:f2:af:d3:1a:a8: 1f:24:6f:89:84:2f:11:1c:df:c8:4e:44:c6:3e:8e: d1:cf:06:f0:17:6e:23:3c:f6:ce:d0:2b:5e:80:a5: 7d:95:81:f7:22:92:19:00:3e:7b:f7:7c:e4:3b:79: dd:16:b6:4d:e5:4b:71:e4:8f:d6:60:3b:0c:40:d5: cf:18:0f:d3:62:db:22:d1:60:27:24:b6:2a:c9:91: 42:17:30:4d:cb:c2:23:9e:ab:84:55:c8:9f:32:67: 7f:38:05:fe:a1:4c:b7:80:b9:b2:ce:b8:fd:36:46: e9:43:31:8a:24:03:9d:93:ba:b8:92:f2:15:00:5d: d3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E7:E9:42:9E:BF:B7:FD:8A:EF:7A:D2:BF:C2:0B:38:7C:4B:0D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4384a40a-c21d-3393-b819-4412659940e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:93:8e:41:40:b3:28:c8:da:cc:88:35:b6:39:0f:65:99:1b: 6b:4a:4f:3e:43:cf:7a:95:33:b1:70:0f:0c:ae:64:88:29:32: d0:7f:0f:0f:2e:b7:d7:b0:f5:35:de:ae:68:24:9a:ed:19:19: 30:73:7d:06:b5:13:f4:79:73:77:65:4a:cf:14:43:c9:16:b5: 3b:98:02:b0:f6:69:05:71:71:49:ad:2c:98:ac:5b:1c:7b:94: ed:ce:60:86:55:65:12:98:71:0d:78:49:ca:5e:27:2f:11:4f: 26:67:4c:56:7f:d6:da:1a:48:37:77:de:27:bb:35:6b:5e:12: fb:29:18:cd:da:af:d7:99:d8:62:b6:c3:1f:be:d7:52:7e:2a: b8:6f:54:dd:fd:41:21:06:4e:a5:3f:f7:8a:95:10:f3:a4:4f: f0:26:f1:c8:d5:34:b1:70:ef:f1:30:f6:06:43:07:af:91:b0: a6:4b:d3:b1:93:f1:ab:19:1d:1d:de:6d:90:8b:17:7a:5d:7b: 7f:e3:fb:f6:bd:26:ac:2e:b5:bc:43:2a:87:85:46:4e:44:40: bd:78:20:fa:40:df:49:38:6a:67:c1:69:15:e3:4c:9f:00:33: 87:66:a6:34:dc:f5:f6:c6:a3:78:4e:1f:92:6a:4e:4a:3d:9b: 0e:50:fe:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/i8ADjs5dfNq1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzcxM1oXDTI1MDkxNzEwMzcxM1owLzEtMCsGA1UEAxMk MDAzZGM5NjAtYTE1YS00ZWVkLTk0ZjctOWRjYzM5ZTI3MjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5aCxbLoEbN+FHbEq/aE2JnNfYOEXXFCEMV8 roPxuMW9ZVqWk7NzDQdxr8MOBxYe9mPQjzYaD73g21CmDLXXXtJVPXNT+aAcfoHI joG4dw2y/2PUj8DPRglqCScYahnVddmK1zTcMCnv20EJSa77mNwTxz5ila8O2bhM uTCLRuly8q/TGqgfJG+JhC8RHN/ITkTGPo7RzwbwF24jPPbO0CtegKV9lYH3IpIZ AD5793zkO3ndFrZN5Utx5I/WYDsMQNXPGA/TYtsi0WAnJLYqyZFCFzBNy8IjnquE VcifMmd/OAX+oUy3gLmyzrj9NkbpQzGKJAOdk7q4kvIVAF3TmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrn6UKev7f9iu960r/CCzh8Sw3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM4NGE0MGEtYzIxZC0z MzkzLWI4MTktNDQxMjY1OTk0MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkhmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOTjkFAsyjI2syINbY5D2WZG2tKTz5Dz3qVM7FwDwyuZIgpMtB/Dw8u t9ew9TXermgkmu0ZGTBzfQa1E/R5c3dlSs8UQ8kWtTuYArD2aQVxcUmtLJisWxx7 lO3OYIZVZRKYcQ14ScpeJy8RTyZnTFZ/1toaSDd33ie7NWteEvspGM3ar9eZ2GK2 wx++11J+KrhvVN39QSEGTqU/94qVEPOkT/Am8cjVNLFw7/Ew9gZDB6+RsKZL07GT 8asZHR3ebZCLF3pde3/j+/a9JqwutbxDKoeFRk5EQL14IPpA30k4amfBaRXjTJ8A M4dmpjTc9fbGo3hOH5JqTko9mw5Q/jw= -----END CERTIFICATE-----Generated at Wed Jul 2 07:22:36 2025 by rpki-client