$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a7f0f0-d106-3098-8c24-c4107b0eadb6.roa File: 95a7f0f0-d106-3098-8c24-c4107b0eadb6.roa (raw, json) Hash identifier: /p+Yp7A0w9QFxMIwQL7MZ0zaP5lOT0np1JQ3eiYC95Y= Subject key identifier: FF:FE:22:10:AB:7F:58:5A:27:F6:D0:7E:34:17:B9:89:AE:93:40:0C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77A642F023C8E32684E130 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a7f0f0-d106-3098-8c24-c4107b0eadb6.roa Signing time: Thu 19 Jun 2025 14:41:58 +0000 ROA not before: Thu 19 Jun 2025 14:41:58 +0000 ROA not after: Wed 17 Sep 2025 14:41:58 +0000 asID: 22773 IP address blocks: 72.222.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:a6:42:f0:23:c8:e3:26:84:e1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:58 2025 GMT Not After : Sep 17 14:41:58 2025 GMT Subject: CN=798d9ddf-e8a4-4f72-adbd-24c1e73f72c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c4:40:25:b8:1b:1e:62:68:cc:06:52:fb:58: c6:7b:c3:c8:55:21:61:d8:35:56:f7:83:e8:37:eb: 12:87:dc:55:c7:73:e5:44:ae:a6:72:2a:4a:4f:ee: 8d:93:4e:15:34:f8:b1:78:60:68:cb:d5:77:93:24: f6:d7:36:dd:e5:d6:1c:cf:be:1a:17:42:a7:43:27: e1:63:74:af:db:9c:8a:15:15:3e:87:a6:1d:2c:96: d8:3e:9c:eb:2d:87:f9:1b:67:fe:46:5b:80:7a:02: bc:9b:1b:35:c1:e8:12:5d:f4:10:a0:24:ea:67:a7: fb:02:2b:1d:d6:ad:65:83:18:c5:d0:b2:c0:b9:b8: 03:5f:8d:78:e8:e4:bc:c0:b3:9e:13:7a:ea:77:5a: 0e:0e:a5:13:70:f5:46:bf:ff:63:cc:74:28:e2:e8: d5:d5:30:a8:18:89:3f:e7:ab:98:92:b3:17:4a:32: 75:b1:48:da:d0:16:26:71:2f:b4:dc:6d:5a:de:01: 64:f0:16:e5:82:51:71:31:58:c4:a8:cb:c6:6b:ac: 47:08:48:6d:d4:cb:83:d9:09:97:a7:f6:83:ad:16: 12:5e:af:93:fd:ca:2a:09:cb:3b:b5:4e:a7:4e:74: bb:03:e0:93:db:d3:b8:fe:8c:0b:ee:02:4d:ae:30: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FE:22:10:AB:7F:58:5A:27:F6:D0:7E:34:17:B9:89:AE:93:40:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a7f0f0-d106-3098-8c24-c4107b0eadb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:cd:79:f5:27:39:7d:fa:9e:52:3c:bf:a6:0a:1b:4f:17:a7: 1f:3b:50:64:94:c2:2d:b2:01:07:60:5a:50:76:86:db:bf:30: 1a:49:d0:97:65:25:8e:9d:85:70:95:eb:8c:2c:0c:15:57:e0: 50:f2:ee:58:bd:3c:26:f9:7c:20:5b:bd:41:5f:48:1a:39:4e: 67:67:59:6e:d3:c0:4b:15:6b:3b:8f:9e:cc:8e:ad:19:ee:18: 76:3d:3e:17:9e:e7:e3:7b:ab:d8:83:d4:99:a6:64:3d:53:bf: 25:7d:8e:ac:ec:2c:cb:4b:6e:52:a4:e7:20:e0:cd:c7:5e:03: e4:4f:67:3f:c9:45:40:9f:84:1b:f9:5e:0d:f8:c4:ca:25:07: fa:22:7b:ab:0a:1e:8c:59:bc:26:56:c2:46:6e:56:20:12:c7: e5:5f:74:66:13:7b:b0:12:91:03:d1:e6:54:73:4e:93:8e:ba: 71:5b:19:17:6c:17:da:c2:17:f6:4e:4c:e5:1f:3e:58:5e:7b: 7a:ab:bb:de:b5:13:e7:f6:36:54:54:a0:8c:9d:a9:06:6d:c3: df:37:e0:47:6f:ed:bf:2f:fe:a3:90:4a:bc:2c:ac:b9:4b:0a: 3a:5f:fe:ed:59:84:f0:59:7b:33:0e:4b:46:cc:6c:02:6d:40: 66:93:cf:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d6ZC8CPI4yaE4TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDE1OFoXDTI1MDkxNzE0NDE1OFowLzEtMCsGA1UEAxMk Nzk4ZDlkZGYtZThhNC00ZjcyLWFkYmQtMjRjMWU3M2Y3MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68RAJbgbHmJozAZS+1jGe8PIVSFh2DVW94Po N+sSh9xVx3PlRK6mcipKT+6Nk04VNPixeGBoy9V3kyT21zbd5dYcz74aF0KnQyfh Y3Sv25yKFRU+h6YdLJbYPpzrLYf5G2f+RluAegK8mxs1wegSXfQQoCTqZ6f7Aisd 1q1lgxjF0LLAubgDX4146OS8wLOeE3rqd1oODqUTcPVGv/9jzHQo4ujV1TCoGIk/ 56uYkrMXSjJ1sUja0BYmcS+03G1a3gFk8BblglFxMVjEqMvGa6xHCEht1MuD2QmX p/aDrRYSXq+T/coqCcs7tU6nTnS7A+CT29O4/owL7gJNrjBX8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/+IhCrf1haJ/bQfjQXuYmuk0AMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTVhN2YwZjAtZDEwNi0z MDk4LThjMjQtYzQxMDdiMGVhZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPNefUnOX36nlI8v6YKG08Xpx87UGSUwi2yAQdgWlB2htu/MBpJ0Jdl JY6dhXCV64wsDBVX4FDy7li9PCb5fCBbvUFfSBo5TmdnWW7TwEsVazuPnsyOrRnu GHY9Phee5+N7q9iD1JmmZD1TvyV9jqzsLMtLblKk5yDgzcdeA+RPZz/JRUCfhBv5 Xg34xMolB/oie6sKHoxZvCZWwkZuViASx+VfdGYTe7ASkQPR5lRzTpOOunFbGRds F9rCF/ZOTOUfPlhee3qru961E+f2NlRUoIydqQZtw9834Edv7b8v/qOQSrwsrLlL Cjpf/u1ZhPBZezMOS0bMbAJtQGaTz6w= -----END CERTIFICATE-----Generated at Wed Jul 2 07:29:49 2025 by rpki-client