$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a677ff22-719c-3629-8153-2e5b89ec05fa.roa File: a677ff22-719c-3629-8153-2e5b89ec05fa.roa (raw, json) Hash identifier: nbGkEfV9Xu16X7ewFRLCDsmr0a2ZXGbGNVGNrFw58sg= Subject key identifier: 5E:62:CF:1E:5F:C3:DB:78:F0:90:01:BD:D3:F8:43:6B:31:39:C1:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA594C8233EB9A674F9F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a677ff22-719c-3629-8153-2e5b89ec05fa.roa Signing time: Fri 20 Jun 2025 09:35:44 +0000 ROA not before: Fri 20 Jun 2025 09:35:44 +0000 ROA not after: Thu 18 Sep 2025 09:35:44 +0000 asID: 22773 IP address blocks: 174.72.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:59:4c:82:33:eb:9a:67:4f:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:44 2025 GMT Not After : Sep 18 09:35:44 2025 GMT Subject: CN=e9976547-abea-4ff9-8c0f-beb0c40cd270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:91:45:6d:4f:f2:0c:f7:54:4c:33:ad:02: 78:12:7b:55:0b:48:20:ac:c7:0c:19:0d:8a:0a:01: 63:ba:60:ac:73:6f:7a:03:be:85:4d:33:29:0d:db: e0:da:41:fc:73:16:ca:9a:e4:6d:d7:06:b0:23:6f: 59:73:e7:ab:c8:3a:5f:2c:9e:8f:70:4c:62:d5:ac: fb:83:69:42:94:5e:99:69:41:8a:22:3e:d9:2e:7e: be:4c:15:66:08:ca:be:57:80:43:2f:3d:a0:27:91: d1:7b:13:79:35:93:16:53:47:c9:75:a9:40:5a:e0: 00:a7:8f:45:24:2e:92:d2:fd:5f:cd:07:e5:0b:26: 54:1d:34:6b:15:a7:94:4c:90:60:c3:54:2f:b9:74: 30:3d:05:19:20:e8:21:5e:13:b1:84:6a:2d:e7:3b: 97:18:d5:7a:b6:9d:70:9a:f2:ca:72:e3:7b:a6:02: 6a:5d:ed:0a:59:f9:32:45:d5:a2:fd:fd:23:a6:fe: c1:83:ae:0d:83:26:a8:be:a0:4e:0b:62:c5:07:27: 55:b4:c8:d5:40:91:e5:a6:2d:1f:b0:7a:a0:0b:13: cf:0f:93:5b:27:a2:b6:76:f2:6b:97:3f:22:3d:40: 44:5a:56:52:53:f2:1d:c0:fe:14:6c:36:c2:34:78: 93:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:62:CF:1E:5F:C3:DB:78:F0:90:01:BD:D3:F8:43:6B:31:39:C1:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a677ff22-719c-3629-8153-2e5b89ec05fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a8:53:9a:99:aa:78:1e:2c:80:d6:0c:79:f8:53:b1:6b:af: 05:60:d4:15:ff:53:6d:87:f6:c9:f3:ed:f5:6e:ea:80:e1:ac: a7:a7:ef:32:33:d9:bb:14:71:cd:79:b8:c1:60:ba:47:d4:9d: a8:e1:0e:f7:84:ac:aa:3d:36:95:32:5a:96:24:d3:8f:54:8e: 5c:a0:89:21:5f:fc:b4:95:06:0c:00:29:ee:67:7c:2e:f0:b2: d7:f6:66:7f:47:25:04:26:12:50:e1:2c:10:49:a8:7b:d9:87: 16:3e:6d:8d:cb:3f:72:ee:ee:5f:c2:aa:de:2d:cc:bb:d5:a9: ab:74:9b:fb:48:5a:3e:6d:02:38:24:23:45:62:b0:bc:bb:f4: ca:9d:66:2f:3c:b6:2d:48:32:0e:bd:56:ae:9f:04:bd:54:00: 28:12:db:91:3f:e4:a5:a9:a5:7f:44:fa:f6:29:4f:af:b8:d0: e6:30:4f:be:fe:01:6c:6d:be:9f:73:2e:49:a7:4f:59:1e:fe: 8a:fd:14:43:1a:ac:76:9d:fd:23:33:ae:6c:98:c9:c8:0c:f6: 1e:4f:de:c5:9f:79:27:d0:64:1e:55:61:ed:8f:f5:3e:22:ee: 1b:4c:98:95:b0:65:6c:33:42:d5:a5:40:76:56:28:ed:10:7e: 98:7f:2a:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqllMgjPrmmdPnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzU0NFoXDTI1MDkxODA5MzU0NFowLzEtMCsGA1UEAxMk ZTk5NzY1NDctYWJlYS00ZmY5LThjMGYtYmViMGM0MGNkMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAGRRW1P8gz3VEwzrQJ4EntVC0ggrMcMGQ2K CgFjumCsc296A76FTTMpDdvg2kH8cxbKmuRt1wawI29Zc+eryDpfLJ6PcExi1az7 g2lClF6ZaUGKIj7ZLn6+TBVmCMq+V4BDLz2gJ5HRexN5NZMWU0fJdalAWuAAp49F JC6S0v1fzQflCyZUHTRrFaeUTJBgw1QvuXQwPQUZIOghXhOxhGot5zuXGNV6tp1w mvLKcuN7pgJqXe0KWfkyRdWi/f0jpv7Bg64NgyaovqBOC2LFBydVtMjVQJHlpi0f sHqgCxPPD5NbJ6K2dvJrlz8iPUBEWlZSU/IdwP4UbDbCNHiTwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5izx5fw9t48JABvdP4Q2sxOcEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY3N2ZmMjItNzE5Yy0z NjI5LTgxNTMtMmU1Yjg5ZWMwNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaoU5qZqngeLIDWDHn4U7FrrwVg1BX/U22H9snz7fVu6oDhrKen7zIz 2bsUcc15uMFgukfUnajhDveErKo9NpUyWpYk049UjlygiSFf/LSVBgwAKe5nfC7w stf2Zn9HJQQmElDhLBBJqHvZhxY+bY3LP3Lu7l/Cqt4tzLvVqat0m/tIWj5tAjgk I0VisLy79MqdZi88ti1IMg69Vq6fBL1UACgS25E/5KWppX9E+vYpT6+40OYwT77+ AWxtvp9zLkmnT1ke/or9FEMarHad/SMzrmyYycgM9h5P3sWfeSfQZB5VYe2P9T4i 7htMmJWwZWwzQtWlQHZWKO0Qfph/Km0= -----END CERTIFICATE-----Generated at Wed Jul 2 10:15:53 2025 by rpki-client