$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff01ba2-cbc6-371a-8154-43483be5b012.roa File: aff01ba2-cbc6-371a-8154-43483be5b012.roa (raw, json) Hash identifier: Hr/hn0OqjSls/6mCVRI4JY1SfuNie0GyII0lyWP8Png= Subject key identifier: CC:E1:69:17:07:5B:EA:25:E5:98:3A:A1:71:A7:8C:68:55:0C:A1:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76146F7DCD1BAC78C7FDC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff01ba2-cbc6-371a-8154-43483be5b012.roa Signing time: Thu 19 Jun 2025 14:38:48 +0000 ROA not before: Thu 19 Jun 2025 14:38:48 +0000 ROA not after: Wed 17 Sep 2025 14:38:48 +0000 asID: 22773 IP address blocks: 72.206.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:14:6f:7d:cd:1b:ac:78:c7:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:48 2025 GMT Not After : Sep 17 14:38:48 2025 GMT Subject: CN=8a7c3196-cfeb-40b0-ae52-217696ec8d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:5b:75:8a:09:2f:2c:84:d4:19:58:b9:54: 49:0e:64:65:2f:22:a2:42:32:fa:60:1e:60:1f:5b: 2a:74:49:e8:c0:ba:f2:00:b8:ba:96:f2:e3:5a:3a: c4:c1:fb:65:d1:8e:0e:cb:5b:7e:21:50:8f:09:f5: 8d:d7:fb:b7:88:e5:17:53:5a:52:6e:df:9d:1a:e4: af:36:ef:49:71:7e:c1:35:9f:08:34:01:81:70:6f: 47:71:f1:36:68:24:99:d6:d8:49:7d:8c:70:2d:93: 07:97:54:25:05:7a:d1:08:b8:cf:a3:62:aa:9c:6a: b2:4f:5b:e3:a7:ee:24:e2:a4:9d:79:f1:a4:87:61: 1b:9b:ae:a6:72:8f:18:0a:c2:a3:83:d1:06:23:98: 26:02:b8:3f:9d:ba:3b:7e:d5:fe:76:2c:d1:59:e7: 08:57:50:8f:ec:31:60:ac:40:01:c8:19:c3:df:47: 09:02:4f:da:1c:d1:1d:9b:f2:04:e3:44:fe:49:87: 9a:72:8b:88:fd:12:10:99:2c:d7:cf:d1:b7:a1:4c: 41:4a:08:72:aa:60:05:30:ea:c3:ad:54:6a:dd:50: 4f:ec:da:af:da:d8:24:a6:4d:c0:29:bb:13:de:19: ac:2d:e3:03:49:2e:80:22:2b:b9:4e:a2:ae:bb:33: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E1:69:17:07:5B:EA:25:E5:98:3A:A1:71:A7:8C:68:55:0C:A1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff01ba2-cbc6-371a-8154-43483be5b012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:3e:54:15:fd:e0:d7:9c:46:22:0b:31:bb:dc:e5:c0:b9:a1: 65:e1:d1:b6:a9:5c:ec:30:1d:bd:fb:3c:60:1b:e9:ed:32:62: 10:a5:d9:c1:5c:88:a1:12:04:01:c2:6f:aa:9a:00:82:87:c3: 6d:4c:e8:9d:b2:2c:95:79:71:c6:b8:e7:ff:8b:6d:8b:9a:09: 11:e2:bc:23:df:64:4e:8c:11:20:aa:5c:24:fc:d0:f0:77:9d: 80:d3:12:2e:39:a2:f6:93:7b:ad:9c:35:25:58:08:3e:a2:7c: 32:93:8b:bb:39:bc:b3:31:26:79:2d:e8:0c:72:c3:ef:23:d3: 43:46:52:44:f8:47:6a:00:dd:03:e9:b5:2a:d0:53:46:66:59: e8:50:20:e8:04:e9:30:ea:bf:12:85:89:77:fc:07:e4:11:fa: 2e:43:70:e5:ab:66:67:32:d7:66:ab:7b:22:00:a6:90:d1:cc: e2:80:e5:a6:11:64:cc:27:7b:fd:61:4a:8a:5c:3c:3d:1c:a2: a5:d1:40:00:d7:98:59:4a:ff:f9:f4:1a:97:f9:32:60:2e:f3: 5d:fd:2a:4e:48:d2:00:d4:f4:ec:c7:6e:af:4d:ac:88:0c:60: 41:4a:97:ee:20:fe:ce:70:d1:71:70:d6:7b:e2:23:33:16:dc: d0:38:5c:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dhRvfc0brHjH/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzg0OFoXDTI1MDkxNzE0Mzg0OFowLzEtMCsGA1UEAxMk OGE3YzMxOTYtY2ZlYi00MGIwLWFlNTItMjE3Njk2ZWM4ZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHpbdYoJLyyE1BlYuVRJDmRlLyKiQjL6YB5g H1sqdEnowLryALi6lvLjWjrEwftl0Y4Oy1t+IVCPCfWN1/u3iOUXU1pSbt+dGuSv Nu9JcX7BNZ8INAGBcG9HcfE2aCSZ1thJfYxwLZMHl1QlBXrRCLjPo2KqnGqyT1vj p+4k4qSdefGkh2Ebm66mco8YCsKjg9EGI5gmArg/nbo7ftX+dizRWecIV1CP7DFg rEAByBnD30cJAk/aHNEdm/IE40T+SYeacouI/RIQmSzXz9G3oUxBSghyqmAFMOrD rVRq3VBP7Nqv2tgkpk3AKbsT3hmsLeMDSS6AIiu5TqKuuzNaVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzhaRcHW+ol5Zg6oXGnjGhVDKHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWZmMDFiYTItY2JjNi0z NzFhLTgxNTQtNDM0ODNiZTViMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM7JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8+VBX94NecRiILMbvc5cC5oWXh0bapXOwwHb37PGAb6e0yYhCl2cFc iKESBAHCb6qaAIKHw21M6J2yLJV5cca45/+LbYuaCRHivCPfZE6MESCqXCT80PB3 nYDTEi45ovaTe62cNSVYCD6ifDKTi7s5vLMxJnkt6Axyw+8j00NGUkT4R2oA3QPp tSrQU0ZmWehQIOgE6TDqvxKFiXf8B+QR+i5DcOWrZmcy12areyIAppDRzOKA5aYR ZMwne/1hSopcPD0coqXRQADXmFlK//n0Gpf5MmAu8139Kk5I0gDU9OzHbq9NrIgM YEFKl+4g/s5w0XFw1nviIzMW3NA4XKM= -----END CERTIFICATE-----Generated at Wed Jul 2 15:09:01 2025 by rpki-client