$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7964c5a7-efcd-3889-8c4b-7b589626ddbf.roa File: 7964c5a7-efcd-3889-8c4b-7b589626ddbf.roa (raw, json) Hash identifier: 0sBFTjMouDQdNYV0akaS9f96TIApebbvzwlMIy7ZvcA= Subject key identifier: 28:C1:76:FD:60:B5:E6:2E:14:EF:1B:58:50:50:61:3A:6A:02:95:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75823F03208F06B4C3F300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7964c5a7-efcd-3889-8c4b-7b589626ddbf.roa Signing time: Thu 19 Jun 2025 14:37:39 +0000 ROA not before: Thu 19 Jun 2025 14:37:39 +0000 ROA not after: Wed 17 Sep 2025 14:37:39 +0000 asID: 22773 IP address blocks: 72.201.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:82:3f:03:20:8f:06:b4:c3:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:39 2025 GMT Not After : Sep 17 14:37:39 2025 GMT Subject: CN=e4db75b7-f135-4769-869a-a3a86e898454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:3c:46:a9:3c:d1:12:a5:5e:e6:95:07:1b: b4:56:ee:fb:cc:a4:db:f4:7a:63:18:55:cb:1a:c7: 6f:ae:07:5b:b1:01:38:21:e2:d3:b5:a7:5c:26:0a: cf:07:68:4e:df:87:22:59:61:c2:37:b5:7a:7d:1b: b3:c7:75:80:0f:06:e4:72:17:e9:81:6f:97:df:13: 81:e9:88:ef:65:dc:19:0a:4c:ee:3b:ac:20:ea:6d: 02:2f:28:22:c1:98:cc:e0:db:1c:4f:46:4b:ca:8c: cd:26:8f:02:4e:28:76:eb:ac:28:b4:e5:a9:4f:67: 02:cf:cd:40:08:3c:26:49:6b:b1:31:aa:23:3c:f8: fc:c1:24:5b:14:84:92:41:35:d9:0c:6f:8b:5f:7e: 70:9e:a1:50:ac:2d:82:12:c3:f6:5a:fa:14:32:e4: fc:54:00:95:c7:ba:4e:03:dd:8a:42:9f:2a:8b:fa: 48:e7:ca:3f:e8:00:6c:df:c3:c6:94:e4:2c:45:0e: 8a:ca:85:ca:cc:12:5e:9d:dc:4e:06:4d:66:72:01: 79:03:21:81:31:09:1e:d9:51:92:49:e5:d2:1a:bb: 7c:76:c0:36:51:a6:87:38:48:c2:3c:2e:62:00:48: 0c:24:50:3b:04:84:42:d3:e6:23:f8:8c:54:a4:7f: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C1:76:FD:60:B5:E6:2E:14:EF:1B:58:50:50:61:3A:6A:02:95:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7964c5a7-efcd-3889-8c4b-7b589626ddbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:83:64:74:7f:ae:e1:af:7a:77:c7:94:b4:a1:c6:a6:16:8d: 89:19:70:1d:1f:3f:6b:6f:b4:1c:f9:ee:c0:9d:c2:ab:65:48: 2b:65:44:80:02:e7:1e:6f:69:c3:49:c8:f8:af:1f:a8:2c:8c: 2f:e4:34:18:cf:cd:43:fc:51:63:f2:da:cf:35:49:21:6c:20: 3f:8c:34:84:33:f4:61:53:6d:a0:c4:02:58:e4:6e:b7:32:5d: bf:4e:a1:7d:17:35:94:71:bb:51:34:ef:c2:53:fa:60:09:a4: 77:a0:ee:21:27:01:34:21:49:49:37:b6:da:f6:96:52:50:3f: 26:ba:5f:31:73:90:16:75:9e:d7:08:a6:16:6a:45:c2:6a:9f: 5a:74:93:5f:44:2f:74:b0:d1:62:93:a1:eb:41:fc:d3:12:35: a3:79:b9:ae:47:2f:6d:1b:4a:19:9e:72:1c:93:09:b0:0e:76: 21:3d:f5:cd:d7:06:e1:48:18:9d:f9:d9:5b:01:d7:ef:43:6b: c1:03:0a:25:19:91:2e:1d:80:88:1d:fc:d1:d8:42:e0:61:25: 0e:7e:37:96:bf:f4:b5:6e:de:c5:39:fb:2c:f8:64:1c:91:48: 16:35:3b:0e:b2:8d:6d:bf:c6:40:b5:61:72:1e:4a:a8:b1:d1: 99:94:c2:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dYI/AyCPBrTD8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzczOVoXDTI1MDkxNzE0MzczOVowLzEtMCsGA1UEAxMk ZTRkYjc1YjctZjEzNS00NzY5LTg2OWEtYTNhODZlODk4NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbU8Rqk80RKlXuaVBxu0Vu77zKTb9HpjGFXL GsdvrgdbsQE4IeLTtadcJgrPB2hO34ciWWHCN7V6fRuzx3WADwbkchfpgW+X3xOB 6YjvZdwZCkzuO6wg6m0CLygiwZjM4NscT0ZLyozNJo8CTih266wotOWpT2cCz81A CDwmSWuxMaojPPj8wSRbFISSQTXZDG+LX35wnqFQrC2CEsP2WvoUMuT8VACVx7pO A92KQp8qi/pI58o/6ABs38PGlOQsRQ6KyoXKzBJendxOBk1mcgF5AyGBMQke2VGS SeXSGrt8dsA2UaaHOEjCPC5iAEgMJFA7BIRC0+Yj+IxUpH/nPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjBdv1gteYuFO8bWFBQYTpqApU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzk2NGM1YTctZWZjZC0z ODg5LThjNGItN2I1ODk2MjZkZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqDZHR/ruGvenfHlLShxqYWjYkZcB0fP2tvtBz57sCdwqtlSCtlRIAC 5x5vacNJyPivH6gsjC/kNBjPzUP8UWPy2s81SSFsID+MNIQz9GFTbaDEAljkbrcy Xb9OoX0XNZRxu1E078JT+mAJpHeg7iEnATQhSUk3ttr2llJQPya6XzFzkBZ1ntcI phZqRcJqn1p0k19EL3Sw0WKToetB/NMSNaN5ua5HL20bShmechyTCbAOdiE99c3X BuFIGJ352VsB1+9Da8EDCiUZkS4dgIgd/NHYQuBhJQ5+N5a/9LVu3sU5+yz4ZByR SBY1Ow6yjW2/xkC1YXIeSqix0ZmUwiw= -----END CERTIFICATE-----Generated at Wed Jul 2 15:13:26 2025 by rpki-client