$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b23b97f5-61e0-31fb-bbe5-712f4f580d70.roa File: b23b97f5-61e0-31fb-bbe5-712f4f580d70.roa (raw, json) Hash identifier: 7uNsu2h9TWkY6PY9QpRjf0iDhOQaXhAHbyAFyJrgIvo= Subject key identifier: 44:FB:1C:A6:6F:9F:B3:27:E2:C0:3E:CC:73:63:21:E5:61:02:BB:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77D834643B576941E4B158 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b23b97f5-61e0-31fb-bbe5-712f4f580d70.roa Signing time: Thu 19 Jun 2025 14:42:21 +0000 ROA not before: Thu 19 Jun 2025 14:42:21 +0000 ROA not after: Wed 17 Sep 2025 14:42:21 +0000 asID: 22773 IP address blocks: 72.222.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:d8:34:64:3b:57:69:41:e4:b1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:21 2025 GMT Not After : Sep 17 14:42:21 2025 GMT Subject: CN=08c6141a-4552-4cdb-8871-d8b0114c3d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:68:96:1f:0c:9a:e5:15:d4:63:f9:57:61: 4b:53:74:0e:e5:d1:47:8e:86:b2:86:fb:c4:24:f9: 30:f7:1d:79:d4:6e:9c:c4:8f:35:78:18:e0:0c:96: 6c:e7:1d:7b:4d:36:39:3c:9f:55:12:60:4f:29:b1: 27:62:76:7e:95:ac:eb:6e:ba:32:e7:b0:79:80:86: 38:54:00:ac:eb:0c:d3:64:c4:de:af:d2:0d:d1:79: 6c:f2:44:a4:0d:26:e5:d4:35:aa:e0:7b:02:76:76: a8:c8:cb:19:7c:a0:07:0b:e5:03:90:16:1a:cf:90: a2:fe:de:19:5c:da:ff:8f:38:1f:1e:0d:2d:88:5d: a8:24:84:e6:b6:7b:27:ac:f9:36:1c:db:1b:c8:87: ee:2a:be:a8:ea:68:66:80:ba:4c:9e:83:47:8b:9d: 44:ea:35:a3:6b:6e:60:00:b0:f2:b7:d2:93:61:d6: d3:2d:e2:ff:ed:a2:0f:e8:71:db:3a:9d:42:b9:08: 38:9e:bd:19:d5:83:b3:e4:f6:4c:5c:46:30:fc:cf: e1:0f:8f:2c:2c:48:df:4b:f5:9a:b0:f3:dd:2f:aa: 6e:59:50:de:40:1a:7f:fe:76:06:b5:0a:25:00:eb: 26:c1:7c:22:e1:3f:47:1f:51:1a:97:44:91:4c:65: ac:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FB:1C:A6:6F:9F:B3:27:E2:C0:3E:CC:73:63:21:E5:61:02:BB:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b23b97f5-61e0-31fb-bbe5-712f4f580d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:92:4b:96:0d:8e:39:8b:54:9b:e9:b7:ca:a3:4c:72:7a:e6: 50:90:fb:5a:9c:a2:6d:c0:d7:4e:d5:02:f3:af:0e:5f:19:95: 32:c8:87:ff:41:a2:5e:92:45:14:27:93:92:e5:d3:69:21:0b: 22:4a:92:70:fc:2d:8b:36:83:b4:f4:60:4a:20:a7:0e:27:bb: 38:7f:26:07:45:a0:50:c4:8c:47:f5:74:84:19:c7:de:fa:d8: c9:ca:ec:50:e1:09:6d:e8:68:83:2d:81:fc:b8:84:c6:6a:81: f8:1a:07:a8:54:82:99:a6:c5:ea:02:67:99:80:77:6c:f3:48: 3c:69:32:d7:b2:f8:32:2e:38:0e:1f:6c:3b:5f:8f:7e:83:26: d8:89:c5:db:43:a9:0e:7e:dd:49:be:c7:50:6f:b6:ab:ae:21: 57:10:66:b2:18:30:c9:3a:3f:67:27:18:b4:77:61:84:f1:26: 12:8f:c9:92:7b:4c:c0:ba:ee:70:76:9f:e2:ae:dc:6b:c4:39: 59:27:2b:bc:1c:2a:9c:b4:25:da:83:14:ba:f4:d5:92:d1:5c: 0d:2c:79:99:8e:eb:61:ee:a8:47:8a:2d:87:d5:ff:14:33:d9: 5a:61:5f:90:e5:de:e2:0e:23:3d:5d:aa:8e:60:d4:9a:dd:1c: 42:28:3f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d9g0ZDtXaUHksVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIyMVoXDTI1MDkxNzE0NDIyMVowLzEtMCsGA1UEAxMk MDhjNjE0MWEtNDU1Mi00Y2RiLTg4NzEtZDhiMDExNGMzZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYholh8MmuUV1GP5V2FLU3QO5dFHjoayhvvE JPkw9x151G6cxI81eBjgDJZs5x17TTY5PJ9VEmBPKbEnYnZ+lazrbroy57B5gIY4 VACs6wzTZMTer9IN0Xls8kSkDSbl1DWq4HsCdnaoyMsZfKAHC+UDkBYaz5Ci/t4Z XNr/jzgfHg0tiF2oJITmtnsnrPk2HNsbyIfuKr6o6mhmgLpMnoNHi51E6jWja25g ALDyt9KTYdbTLeL/7aIP6HHbOp1CuQg4nr0Z1YOz5PZMXEYw/M/hD48sLEjfS/Wa sPPdL6puWVDeQBp//nYGtQolAOsmwXwi4T9HH1Eal0SRTGWs5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET7HKZvn7Mn4sA+zHNjIeVhArugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjIzYjk3ZjUtNjFlMC0z MWZiLWJiZTUtNzEyZjRmNTgwZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuSS5YNjjmLVJvpt8qjTHJ65lCQ+1qcom3A107VAvOvDl8ZlTLIh/9B ol6SRRQnk5Ll02khCyJKknD8LYs2g7T0YEogpw4nuzh/JgdFoFDEjEf1dIQZx976 2MnK7FDhCW3oaIMtgfy4hMZqgfgaB6hUgpmmxeoCZ5mAd2zzSDxpMtey+DIuOA4f bDtfj36DJtiJxdtDqQ5+3Um+x1BvtquuIVcQZrIYMMk6P2cnGLR3YYTxJhKPyZJ7 TMC67nB2n+Ku3GvEOVknK7wcKpy0JdqDFLr01ZLRXA0seZmO62HuqEeKLYfV/xQz 2VphX5Dl3uIOIz1dqo5g1JrdHEIoP5w= -----END CERTIFICATE-----Generated at Wed Jul 2 06:05:27 2025 by rpki-client