$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a4ded71-9c34-3aa0-97f2-5e8b67efa395.roa File: 7a4ded71-9c34-3aa0-97f2-5e8b67efa395.roa (raw, json) Hash identifier: NhbuOA6ZDn3OZUq9zIrPwlGJXA/cAecQsy4iPP3Mmf0= Subject key identifier: 20:C8:4C:24:E6:66:84:2B:2C:C1:21:6C:A5:C1:8B:D1:C8:80:6D:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75EF248A662AC717F51280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a4ded71-9c34-3aa0-97f2-5e8b67efa395.roa Signing time: Thu 19 Jun 2025 14:38:30 +0000 ROA not before: Thu 19 Jun 2025 14:38:30 +0000 ROA not after: Wed 17 Sep 2025 14:38:30 +0000 asID: 22773 IP address blocks: 72.206.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:ef:24:8a:66:2a:c7:17:f5:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:30 2025 GMT Not After : Sep 17 14:38:30 2025 GMT Subject: CN=81796af7-5492-41ba-bee4-a43da23fb407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:6c:7e:25:25:7e:2a:39:21:cb:35:db:03: 1e:cb:7b:0f:67:40:81:07:5a:54:16:31:73:a4:07: af:4b:d0:c4:69:2d:99:c4:d6:3f:6e:e7:82:f8:47: b9:34:3c:4c:46:81:bf:f9:e4:8c:20:f7:2a:f1:c5: ad:6f:fd:1e:94:c0:81:0e:d0:45:eb:1e:b8:25:e6: 0c:8d:e2:2c:0e:6b:37:01:12:f5:78:af:d8:58:46: 4b:dc:fc:a8:fb:76:fc:d4:f3:06:41:cd:85:be:1e: 6b:47:be:41:96:77:5b:2a:1a:a0:ed:4b:13:3a:01: 84:70:71:9a:94:52:2b:d6:c2:e1:a1:44:8a:63:6c: 41:26:6c:aa:89:64:fb:79:9c:57:a8:83:16:6b:4b: 0c:ba:a4:1d:4c:0c:c3:4d:a6:55:c6:c9:7e:b9:75: b7:e3:b1:33:6f:1c:89:16:6d:aa:2d:63:71:62:e5: b4:22:7d:38:e7:af:4e:47:07:81:35:e1:04:21:9b: 2c:28:52:d7:ca:3e:35:36:24:21:84:fc:d5:34:c1: 71:ab:72:b1:c5:a4:dc:94:0a:2c:55:cd:ca:da:40: e2:f6:22:a0:d6:34:3d:71:88:a6:82:9a:00:23:69: 99:2b:0b:4d:9d:7b:24:e8:bd:e2:84:bc:3a:3e:8f: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C8:4C:24:E6:66:84:2B:2C:C1:21:6C:A5:C1:8B:D1:C8:80:6D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a4ded71-9c34-3aa0-97f2-5e8b67efa395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d6:89:6d:92:af:52:a0:ce:26:ad:d4:94:c1:36:71:ae:45: 4e:eb:71:a5:01:b7:26:2c:c0:81:ba:c5:d7:b5:1a:f6:db:ec: a1:a3:eb:86:02:77:f6:77:3f:47:86:8c:0a:ce:aa:6c:64:6c: 6d:0d:4b:b2:be:23:bc:04:a9:23:08:3d:a1:e3:ae:2c:f4:04: 41:79:e9:a9:06:44:c5:8f:94:fb:67:fc:c7:9e:87:0e:67:fa: 54:60:8d:1f:d6:61:c4:d0:1d:f6:82:4d:9e:bd:7e:48:eb:e3: 1a:3e:b8:29:99:00:8d:14:a8:40:1b:69:57:cd:92:7c:33:29: 86:b7:6f:c9:06:f8:15:05:d5:fc:10:62:f5:b5:ba:f5:a1:e9: ed:b9:dd:0b:2a:db:d9:67:29:8d:f2:24:bf:ac:11:9d:16:0a: 07:49:c2:8f:9b:7a:ad:0c:32:35:50:a3:78:84:bb:3c:39:cd: f5:84:f0:6a:78:b2:f3:3e:98:48:31:24:5b:7f:8c:f2:07:17: eb:12:f9:b6:da:23:c2:53:8f:bb:54:73:48:b1:99:61:29:d2: 00:0f:c8:3d:1a:29:2e:86:bb:af:ed:1b:b3:a7:dd:13:24:c6: 8d:42:f8:b6:a3:f3:0a:02:e6:13:74:9c:0a:30:a6:25:7c:0a: 38:47:46:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+de8kimYqxxf1EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgzMFoXDTI1MDkxNzE0MzgzMFowLzEtMCsGA1UEAxMk ODE3OTZhZjctNTQ5Mi00MWJhLWJlZTQtYTQzZGEyM2ZiNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvflsfiUlfio5Ics12wMey3sPZ0CBB1pUFjFz pAevS9DEaS2ZxNY/bueC+Ee5NDxMRoG/+eSMIPcq8cWtb/0elMCBDtBF6x64JeYM jeIsDms3ARL1eK/YWEZL3Pyo+3b81PMGQc2Fvh5rR75BlndbKhqg7UsTOgGEcHGa lFIr1sLhoUSKY2xBJmyqiWT7eZxXqIMWa0sMuqQdTAzDTaZVxsl+uXW347EzbxyJ Fm2qLWNxYuW0In04569ORweBNeEEIZssKFLXyj41NiQhhPzVNMFxq3KxxaTclAos Vc3K2kDi9iKg1jQ9cYimgpoAI2mZKwtNnXsk6L3ihLw6Po8ClQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDITCTmZoQrLMEhbKXBi9HIgG1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2E0ZGVkNzEtOWMzNC0z YWEwLTk3ZjItNWU4YjY3ZWZhMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvWiW2Sr1Kgziat1JTBNnGuRU7rcaUBtyYswIG6xde1Gvbb7KGj64YC d/Z3P0eGjArOqmxkbG0NS7K+I7wEqSMIPaHjriz0BEF56akGRMWPlPtn/Meehw5n +lRgjR/WYcTQHfaCTZ69fkjr4xo+uCmZAI0UqEAbaVfNknwzKYa3b8kG+BUF1fwQ YvW1uvWh6e253Qsq29lnKY3yJL+sEZ0WCgdJwo+beq0MMjVQo3iEuzw5zfWE8Gp4 svM+mEgxJFt/jPIHF+sS+bbaI8JTj7tUc0ixmWEp0gAPyD0aKS6Gu6/tG7On3RMk xo1C+Laj8woC5hN0nAowpiV8CjhHRuI= -----END CERTIFICATE-----Generated at Wed Jul 2 14:22:17 2025 by rpki-client