$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad5af356-8b8a-3223-bab4-dc29522e2a09.roa File: ad5af356-8b8a-3223-bab4-dc29522e2a09.roa (raw, json) Hash identifier: FTMMNMIb6o81UTuQzal4HYR+tkY5IT/1KVQi5nlxVpk= Subject key identifier: 85:AD:FE:44:75:21:8E:52:E2:94:60:8E:56:D9:9D:AD:50:75:86:4F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A97B8EE712B8A52A6E8320 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad5af356-8b8a-3223-bab4-dc29522e2a09.roa Signing time: Fri 20 Jun 2025 09:33:59 +0000 ROA not before: Fri 20 Jun 2025 09:33:59 +0000 ROA not after: Thu 18 Sep 2025 09:33:59 +0000 asID: 22773 IP address blocks: 72.193.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:7b:8e:e7:12:b8:a5:2a:6e:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:59 2025 GMT Not After : Sep 18 09:33:59 2025 GMT Subject: CN=07216866-bc83-458c-975f-3fda7bbc7646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:47:24:8d:54:6c:ef:39:5d:4e:0d:50:85: 9c:58:3f:6a:31:f8:dd:63:81:48:cc:26:d2:95:2d: f3:d0:2f:77:5b:6f:96:73:f4:dd:13:01:0c:17:11: 00:bd:c1:bd:89:ab:58:ec:d7:04:44:d6:1c:bb:4d: 06:c2:fe:c2:94:ad:58:7c:69:ac:e3:35:be:29:35: ff:0d:e0:66:6f:69:42:a0:49:8a:3d:22:81:37:68: 86:97:b1:dd:1f:74:a5:f3:d4:28:f6:fc:7c:00:bf: 0a:a2:d1:98:8e:4b:e5:46:88:a3:95:ec:e8:47:61: 01:9f:34:d0:10:1f:29:b6:51:ee:6e:8a:6f:00:78: af:83:11:06:94:b2:29:62:f6:91:c1:37:12:cf:14: 48:45:72:23:d5:9e:09:4f:e8:c1:04:88:4f:88:40: f2:ea:d6:c0:d1:e9:83:b7:83:91:cb:d8:04:b4:c9: 5e:38:a2:96:a8:18:eb:59:50:64:97:a7:27:5e:42: 4b:69:83:04:4a:81:1a:58:e1:9b:c9:26:fa:4b:d2: a6:7d:e4:0a:85:bd:4b:b4:9b:62:f7:fe:0f:6f:78: a9:65:ca:33:f2:66:7f:72:4e:c5:bb:03:9a:93:8d: 9a:4a:fa:64:a0:c9:05:58:42:fe:60:3d:01:58:22: 7f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AD:FE:44:75:21:8E:52:E2:94:60:8E:56:D9:9D:AD:50:75:86:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad5af356-8b8a-3223-bab4-dc29522e2a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:12:47:bc:b0:19:a1:cd:9f:95:0c:bf:b2:91:72:f4:74:c3: d7:ab:86:a7:d4:44:aa:d9:80:28:82:88:aa:03:9d:c0:e3:de: ea:cf:62:7c:8e:87:77:47:8e:bb:84:11:48:e1:96:40:15:df: 24:81:84:bb:6c:5f:b0:7c:ba:f9:87:2a:a2:d5:92:6d:e9:fa: cf:1e:5e:26:6b:53:b9:f2:20:09:f4:58:f1:22:18:23:bd:87: 7d:08:5e:5a:38:c9:bb:60:72:1d:4a:fd:8a:1a:1d:7e:67:0d: 4c:fb:28:aa:d5:30:c4:f5:d7:51:90:b8:0f:67:f7:67:06:2c: ed:02:76:f1:2d:28:c7:c2:23:50:a4:12:e4:b1:9d:b4:e8:f5: 0d:e4:46:c9:53:35:dd:c1:35:4e:26:67:53:3c:f2:df:bf:d6: 84:39:4f:49:f5:e3:ee:bd:8c:1d:11:a2:27:ae:70:c5:b9:30: 57:86:10:4b:ee:bc:ef:b4:4b:c5:ec:3f:35:86:47:4b:9f:15: b9:5f:3a:3d:fd:76:b2:63:f6:e7:0a:e5:ab:c3:64:0d:99:b1: a8:f4:77:2e:cb:64:06:79:76:ee:34:74:6e:09:6a:8d:80:4d: f0:a5:ed:41:8b:94:2d:9a:63:a7:77:06:df:96:f4:4d:ba:de: e4:32:97:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqXuO5xK4pSpugyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzM1OVoXDTI1MDkxODA5MzM1OVowLzEtMCsGA1UEAxMk MDcyMTY4NjYtYmM4My00NThjLTk3NWYtM2ZkYTdiYmM3NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN5HJI1UbO85XU4NUIWcWD9qMfjdY4FIzCbS lS3z0C93W2+Wc/TdEwEMFxEAvcG9iatY7NcERNYcu00Gwv7ClK1YfGms4zW+KTX/ DeBmb2lCoEmKPSKBN2iGl7HdH3Sl89Qo9vx8AL8KotGYjkvlRoijlezoR2EBnzTQ EB8ptlHubopvAHivgxEGlLIpYvaRwTcSzxRIRXIj1Z4JT+jBBIhPiEDy6tbA0emD t4ORy9gEtMleOKKWqBjrWVBkl6cnXkJLaYMESoEaWOGbySb6S9KmfeQKhb1LtJti 9/4Pb3ipZcoz8mZ/ck7FuwOak42aSvpkoMkFWEL+YD0BWCJ/7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWt/kR1IY5S4pRgjlbZna1QdYZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWQ1YWYzNTYtOGI4YS0z MjIzLWJhYjQtZGMyOTUyMmUyYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8SR7ywGaHNn5UMv7KRcvR0w9erhqfURKrZgCiCiKoDncDj3urPYnyO h3dHjruEEUjhlkAV3ySBhLtsX7B8uvmHKqLVkm3p+s8eXiZrU7nyIAn0WPEiGCO9 h30IXlo4ybtgch1K/YoaHX5nDUz7KKrVMMT111GQuA9n92cGLO0CdvEtKMfCI1Ck EuSxnbTo9Q3kRslTNd3BNU4mZ1M88t+/1oQ5T0n14+69jB0RoieucMW5MFeGEEvu vO+0S8XsPzWGR0ufFblfOj39drJj9ucK5avDZA2Zsaj0dy7LZAZ5du40dG4Jao2A TfCl7UGLlC2aY6d3Bt+W9E263uQyl3Q= -----END CERTIFICATE-----Generated at Wed Jul 2 14:37:16 2025 by rpki-client