$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a411ed9c-bb3d-339f-af62-21d409943344.roa File: a411ed9c-bb3d-339f-af62-21d409943344.roa (raw, json) Hash identifier: MGgcIB+SRcWDq8ky4hAWNdrM7j4pr9cDraytXh+dZR8= Subject key identifier: 16:BE:91:A3:08:43:37:DE:71:7F:0A:52:61:D3:01:18:13:13:78:AA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77E52D596D7E68A7D75300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a411ed9c-bb3d-339f-af62-21d409943344.roa Signing time: Thu 19 Jun 2025 14:42:27 +0000 ROA not before: Thu 19 Jun 2025 14:42:27 +0000 ROA not after: Wed 17 Sep 2025 14:42:27 +0000 asID: 22773 IP address blocks: 72.223.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:e5:2d:59:6d:7e:68:a7:d7:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:27 2025 GMT Not After : Sep 17 14:42:27 2025 GMT Subject: CN=a1cef164-5e1b-47d0-adc9-c0ec2bbfdf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:1c:0b:d4:82:96:ed:c4:73:f7:de:4f:7c: a4:3a:58:04:0b:d4:4e:05:8a:27:58:25:7e:ed:a7: d9:99:98:90:4a:26:41:00:59:0d:b9:2f:b3:bf:65: 41:72:da:96:92:0c:22:10:aa:57:6d:ae:7a:4d:f0: 07:51:1d:db:74:27:79:0d:e5:eb:18:c5:38:1b:9f: 9a:3d:24:f7:1d:4f:f8:1e:8a:d9:79:69:9f:41:8b: cf:8c:2f:f3:58:7b:9e:0c:09:c9:c7:bf:25:e5:89: 4e:ef:dc:ce:ea:fc:8a:8e:6a:1c:4b:79:4a:0c:b6: 4c:97:c1:31:ac:3b:f8:89:ee:a7:40:2c:de:50:e7: d6:82:6b:6a:72:2d:df:27:d3:98:8c:f9:68:85:be: 4d:17:22:0a:f3:85:92:e9:32:1a:a1:18:5c:c4:d2: 41:b4:46:01:ac:3d:58:56:c5:71:ec:ea:a5:fe:d6: 25:79:8e:ec:7a:a7:61:f7:b1:6e:d6:92:c8:1e:4a: 8d:65:13:b9:25:e0:d8:c2:62:d6:00:89:98:45:5b: 0f:53:d9:0c:6c:5c:dc:87:af:6a:bb:c5:aa:fa:b5: 19:21:72:11:ee:92:72:5d:ac:11:2c:bd:1f:a5:50: d9:49:2b:e9:12:0a:79:71:b9:af:75:02:b8:8e:f3: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BE:91:A3:08:43:37:DE:71:7F:0A:52:61:D3:01:18:13:13:78:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a411ed9c-bb3d-339f-af62-21d409943344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c0:92:47:fd:35:7e:e3:76:81:f8:b6:ac:d9:d9:23:70:df: 33:3a:ba:f3:79:a9:44:c5:44:b2:5f:94:df:e8:99:ef:72:44: e8:45:8a:20:70:5f:d5:cc:cc:66:7f:c7:52:65:1b:f8:55:d8: 41:0b:2c:31:a6:7e:2e:4a:6c:01:55:93:a4:f4:4e:58:01:b3: 51:60:4e:50:b3:74:e2:4f:74:c7:7b:d8:89:96:38:db:16:ed: 16:ac:ab:57:66:0f:d5:d4:8d:2e:8c:63:03:55:0d:89:32:a6: 29:b2:82:ef:28:b8:0e:1d:8b:c2:a9:00:f6:fb:20:43:d4:28: 13:35:47:cc:8d:24:2d:d7:49:93:dc:d1:0d:25:6d:3a:64:80: 82:c4:19:67:ac:1a:28:db:54:dd:eb:43:fc:d5:76:24:f4:96: 8f:a2:cc:ba:0b:24:56:49:e0:d8:4a:ca:4c:2f:08:67:06:00: fd:59:e1:99:ff:f7:a0:86:7e:ec:ca:23:5d:eb:b7:93:03:b4: c6:c8:65:cb:28:4a:c0:fd:04:90:f5:72:f8:3a:9b:52:35:49: f3:60:20:41:59:0a:bf:a1:7d:f4:3e:24:e6:43:72:0c:55:99: 51:79:c4:f7:f2:d3:01:00:81:bb:54:0b:c8:fa:8d:82:00:88: b5:21:e5:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d+UtWW1+aKfXUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIyN1oXDTI1MDkxNzE0NDIyN1owLzEtMCsGA1UEAxMk YTFjZWYxNjQtNWUxYi00N2QwLWFkYzktYzBlYzJiYmZkZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRAcC9SClu3Ec/feT3ykOlgEC9ROBYonWCV+ 7afZmZiQSiZBAFkNuS+zv2VBctqWkgwiEKpXba56TfAHUR3bdCd5DeXrGMU4G5+a PST3HU/4HorZeWmfQYvPjC/zWHueDAnJx78l5YlO79zO6vyKjmocS3lKDLZMl8Ex rDv4ie6nQCzeUOfWgmtqci3fJ9OYjPlohb5NFyIK84WS6TIaoRhcxNJBtEYBrD1Y VsVx7Oql/tYleY7seqdh97Fu1pLIHkqNZRO5JeDYwmLWAImYRVsPU9kMbFzch69q u8Wq+rUZIXIR7pJyXawRLL0fpVDZSSvpEgp5cbmvdQK4jvPUXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa+kaMIQzfecX8KUmHTARgTE3iqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTQxMWVkOWMtYmIzZC0z MzlmLWFmNjItMjFkNDA5OTQzMzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN8XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTAkkf9NX7jdoH4tqzZ2SNw3zM6uvN5qUTFRLJflN/ome9yROhFiiBw X9XMzGZ/x1JlG/hV2EELLDGmfi5KbAFVk6T0TlgBs1FgTlCzdOJPdMd72ImWONsW 7Rasq1dmD9XUjS6MYwNVDYkypimygu8ouA4di8KpAPb7IEPUKBM1R8yNJC3XSZPc 0Q0lbTpkgILEGWesGijbVN3rQ/zVdiT0lo+izLoLJFZJ4NhKykwvCGcGAP1Z4Zn/ 96CGfuzKI13rt5MDtMbIZcsoSsD9BJD1cvg6m1I1SfNgIEFZCr+hffQ+JOZDcgxV mVF5xPfy0wEAgbtUC8j6jYIAiLUh5bg= -----END CERTIFICATE-----Generated at Wed Jul 2 14:49:28 2025 by rpki-client