$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c27f816-356d-38ee-95ba-260189cca4cb.roa File: 5c27f816-356d-38ee-95ba-260189cca4cb.roa (raw, json) Hash identifier: PzSDiQcOxOEKi2I1fagfDmKJ9aalCG4Y+7LoFkPSEgA= Subject key identifier: 41:7A:1A:9D:8B:94:E7:0B:40:19:B4:B0:E4:37:E9:49:63:03:0E:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75CBB84D788E6E0CD03680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c27f816-356d-38ee-95ba-260189cca4cb.roa Signing time: Thu 19 Jun 2025 14:38:13 +0000 ROA not before: Thu 19 Jun 2025 14:38:13 +0000 ROA not after: Wed 17 Sep 2025 14:38:13 +0000 asID: 22773 IP address blocks: 72.201.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:cb:b8:4d:78:8e:6e:0c:d0:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:13 2025 GMT Not After : Sep 17 14:38:13 2025 GMT Subject: CN=04741c14-d143-48e1-9a84-948d97dc908b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:b9:dc:69:56:0f:6a:23:58:2b:a9:42:3a: cc:b3:e1:56:55:fd:dd:d1:5a:54:b2:c4:b5:21:ed: 2d:08:f8:bb:f8:9d:88:2e:f9:80:f2:30:ea:ce:cc: e0:aa:42:5e:8b:d8:e7:7a:d2:f7:78:17:7c:fa:17: 29:35:d1:1b:7c:af:1e:16:98:cf:a6:1b:13:1f:fe: 87:23:30:7f:f1:81:d3:e3:8f:d3:58:7a:54:55:f9: 6d:c2:5f:0f:3e:16:dd:3b:93:78:57:50:d2:78:f0: d3:5d:65:21:d7:55:92:98:c3:43:c7:16:09:84:84: 7e:20:a8:97:53:74:d2:19:6a:d6:56:51:6b:8c:45: 3f:e2:dd:82:90:fb:77:1a:58:63:dc:46:45:83:e0: 2d:4d:cb:6b:cd:31:61:26:37:a9:b9:d0:cd:8f:6b: cb:f7:91:bb:56:8b:f1:7b:2e:fc:2f:63:f7:f5:11: d9:c8:4c:fb:16:f0:83:bc:46:ce:58:b9:c0:61:e0: 40:ce:17:92:99:ae:d1:05:43:2a:82:21:5d:e0:82: a3:7a:e2:c7:85:df:31:93:37:37:ae:c8:29:5c:2d: 92:c5:de:f2:a2:e0:ed:e2:20:7d:ed:bc:5c:dd:92: 89:54:cd:8d:e7:a4:c0:ac:ba:00:62:1a:b6:85:22: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7A:1A:9D:8B:94:E7:0B:40:19:B4:B0:E4:37:E9:49:63:03:0E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c27f816-356d-38ee-95ba-260189cca4cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a9:d4:cf:73:63:e0:78:03:10:c3:40:b8:6e:45:7e:5f:99: 35:a4:65:c1:a7:1e:17:1f:2d:69:4a:ce:93:59:a1:b0:5a:f8: 8f:e4:71:a4:b1:f5:d6:c0:d0:0e:94:38:eb:28:65:11:c4:3b: e0:79:ac:60:e0:9b:2b:79:50:f1:f9:fd:a7:65:73:f4:fc:de: cd:28:47:9d:8d:c9:28:53:72:2b:99:df:a9:df:42:b3:48:48: 19:6d:80:d6:b5:3a:9b:22:13:58:a9:e8:f7:97:2c:d8:c3:4e: dd:6a:f2:85:49:b9:85:03:16:d1:af:14:8b:82:a8:dd:67:86: 1c:09:3d:61:fb:1d:5c:00:3b:09:a9:5a:29:2f:c7:01:6c:47: f7:62:8e:4d:c5:ea:d1:ba:b2:5c:68:93:64:20:55:7d:44:28: e7:e5:a2:3b:82:f6:b1:46:22:14:75:c7:49:06:21:8e:ff:29: c0:69:2b:48:21:1b:2a:d1:de:4b:e8:97:ca:2a:8f:1c:c4:f3: 5e:87:5c:19:eb:37:9c:1d:c0:6b:3a:d4:3d:e8:af:14:4b:2b: c7:a8:1e:a5:a8:20:f0:d1:c3:09:59:a1:18:1d:cf:39:84:cf: b9:8d:87:57:73:3b:ef:a9:1a:c8:4b:db:52:00:28:41:cc:5b: 48:4a:38:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dcu4TXiObgzQNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgxM1oXDTI1MDkxNzE0MzgxM1owLzEtMCsGA1UEAxMk MDQ3NDFjMTQtZDE0My00OGUxLTlhODQtOTQ4ZDk3ZGM5MDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaa53GlWD2ojWCupQjrMs+FWVf3d0VpUssS1 Ie0tCPi7+J2ILvmA8jDqzszgqkJei9jnetL3eBd8+hcpNdEbfK8eFpjPphsTH/6H IzB/8YHT44/TWHpUVfltwl8PPhbdO5N4V1DSePDTXWUh11WSmMNDxxYJhIR+IKiX U3TSGWrWVlFrjEU/4t2CkPt3Glhj3EZFg+AtTctrzTFhJjepudDNj2vL95G7Vovx ey78L2P39RHZyEz7FvCDvEbOWLnAYeBAzheSma7RBUMqgiFd4IKjeuLHhd8xkzc3 rsgpXC2Sxd7youDt4iB97bxc3ZKJVM2N56TArLoAYhq2hSJCjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF6Gp2LlOcLQBm0sOQ36UljAw50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWMyN2Y4MTYtMzU2ZC0z OGVlLTk1YmEtMjYwMTg5Y2NhNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMnTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKip1M9zY+B4AxDDQLhuRX5fmTWkZcGnHhcfLWlKzpNZobBa+I/kcaSx 9dbA0A6UOOsoZRHEO+B5rGDgmyt5UPH5/adlc/T83s0oR52NyShTciuZ36nfQrNI SBltgNa1OpsiE1ip6PeXLNjDTt1q8oVJuYUDFtGvFIuCqN1nhhwJPWH7HVwAOwmp WikvxwFsR/dijk3F6tG6slxok2QgVX1EKOflojuC9rFGIhR1x0kGIY7/KcBpK0gh GyrR3kvol8oqjxzE816HXBnrN5wdwGs61D3orxRLK8eoHqWoIPDRwwlZoRgdzzmE z7mNh1dzO++pGshL21IAKEHMW0hKOFg= -----END CERTIFICATE-----Generated at Wed Jul 2 10:17:15 2025 by rpki-client