$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2539bd7-66ed-30a7-961e-1b1d0dfd44a3.roa File: b2539bd7-66ed-30a7-961e-1b1d0dfd44a3.roa (raw, json) Hash identifier: Tz5BY+hihc79ozBpmmUXJm9LZdj1fLWOkTrsmzcM0e8= Subject key identifier: 98:C5:92:B2:BE:3D:78:DC:2C:7C:77:7B:6D:A4:B6:D1:9B:EA:65:CD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77C0FD569D6FDA7B1DC850 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2539bd7-66ed-30a7-961e-1b1d0dfd44a3.roa Signing time: Thu 19 Jun 2025 14:42:10 +0000 ROA not before: Thu 19 Jun 2025 14:42:10 +0000 ROA not after: Wed 17 Sep 2025 14:42:10 +0000 asID: 22773 IP address blocks: 72.222.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:c0:fd:56:9d:6f:da:7b:1d:c8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:10 2025 GMT Not After : Sep 17 14:42:10 2025 GMT Subject: CN=51f924b2-3cce-43d6-a832-c0711027a316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:4b:9c:d3:3b:79:d3:3a:e6:a7:e6:92:3a: 56:5f:50:ac:f8:52:7e:c6:84:65:5e:94:e4:6e:5b: 45:74:32:74:d7:9c:98:0d:73:62:19:96:40:6d:d5: c9:c7:1d:d8:d5:31:61:c5:79:66:53:4c:08:a8:1f: 08:b1:7d:82:29:d6:67:e1:f9:6d:6a:73:bf:ae:b9: 18:ea:51:20:06:46:9a:80:d7:42:0e:03:c6:c9:7b: 50:93:f0:e4:56:48:e1:ae:21:6c:96:1a:32:70:19: fd:ef:5a:d3:3e:da:ef:58:77:6e:bd:2e:ed:da:26: 9f:24:35:a9:54:98:19:bc:2b:58:86:fd:2c:46:39: 20:ce:b1:a7:17:1a:92:03:2e:5e:90:87:34:e0:bf: 5f:14:52:41:81:c4:42:35:55:ab:56:72:e0:7f:0c: 7b:48:74:f1:c4:9f:2d:a6:07:5c:2e:f6:86:68:32: 2f:32:5c:dd:d4:3c:eb:c8:29:f1:da:fb:d8:ca:ca: 03:39:40:cd:bf:db:29:9a:ba:2a:37:6c:ba:fb:33: 8b:19:62:1a:f6:05:29:ea:d5:95:44:e9:f3:a2:ca: 85:dc:1e:16:0d:57:49:7c:7b:be:41:9e:53:5f:28: 42:27:cd:72:8a:37:2e:bc:c4:29:3b:d0:69:d4:ca: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C5:92:B2:BE:3D:78:DC:2C:7C:77:7B:6D:A4:B6:D1:9B:EA:65:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2539bd7-66ed-30a7-961e-1b1d0dfd44a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:52:f0:26:3e:ea:b0:22:e6:eb:db:5b:db:25:bd:2d:67:e5: 4d:0d:3f:c8:d1:bd:b5:29:70:94:e3:dc:2a:23:3c:53:f5:c7: 6d:80:93:bc:a1:8d:e0:9b:bc:72:a1:de:d0:16:2c:52:53:67: 13:c9:db:38:d0:7a:29:40:af:81:a2:eb:a5:0a:a2:68:fc:f1: 39:92:0c:42:39:3f:7c:03:6d:97:68:4f:8d:a8:94:7f:72:a0: 70:36:da:f9:1f:fe:21:4d:b0:50:3e:99:97:73:55:98:bd:e9: 05:5c:ae:71:bc:5f:2e:28:a4:0f:86:5f:10:8a:08:8c:b6:1a: 2b:4c:e3:70:42:d5:c4:41:b6:21:de:80:53:de:8e:50:aa:ca: 62:96:c5:e8:ab:94:71:52:60:6a:0b:80:fc:b4:49:16:4e:74: 4c:42:8a:43:f0:38:18:7f:7c:34:44:a1:34:a4:77:a3:6d:ab: f2:9e:d9:d5:f8:9f:da:e1:14:cf:8a:e3:5b:64:c9:f2:40:2d: 9e:2c:0f:b9:07:29:79:0e:05:ef:82:9b:c7:e0:22:20:a4:ca: dc:a6:18:f0:e9:61:28:a6:21:07:22:07:e9:a8:a7:23:43:6e: 6a:4f:08:c3:a6:c4:89:0f:56:33:ba:7b:ee:48:a7:05:f2:e2: 94:92:a0:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d8D9Vp1v2nsdyFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDIxMFoXDTI1MDkxNzE0NDIxMFowLzEtMCsGA1UEAxMk NTFmOTI0YjItM2NjZS00M2Q2LWE4MzItYzA3MTEwMjdhMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTpLnNM7edM65qfmkjpWX1Cs+FJ+xoRlXpTk bltFdDJ015yYDXNiGZZAbdXJxx3Y1TFhxXlmU0wIqB8IsX2CKdZn4fltanO/rrkY 6lEgBkaagNdCDgPGyXtQk/DkVkjhriFslhoycBn971rTPtrvWHduvS7t2iafJDWp VJgZvCtYhv0sRjkgzrGnFxqSAy5ekIc04L9fFFJBgcRCNVWrVnLgfwx7SHTxxJ8t pgdcLvaGaDIvMlzd1DzryCnx2vvYysoDOUDNv9spmroqN2y6+zOLGWIa9gUp6tWV ROnzosqF3B4WDVdJfHu+QZ5TXyhCJ81yijcuvMQpO9Bp1Mr95wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjFkrK+PXjcLHx3e22kttGb6mXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjI1MzliZDctNjZlZC0z MGE3LTk2MWUtMWIxZDBkZmQ0NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN7SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBS8CY+6rAi5uvbW9slvS1n5U0NP8jRvbUpcJTj3CojPFP1x22Ak7yh jeCbvHKh3tAWLFJTZxPJ2zjQeilAr4Gi66UKomj88TmSDEI5P3wDbZdoT42olH9y oHA22vkf/iFNsFA+mZdzVZi96QVcrnG8Xy4opA+GXxCKCIy2GitM43BC1cRBtiHe gFPejlCqymKWxeirlHFSYGoLgPy0SRZOdExCikPwOBh/fDREoTSkd6Ntq/Ke2dX4 n9rhFM+K41tkyfJALZ4sD7kHKXkOBe+Cm8fgIiCkytymGPDpYSimIQciB+mopyND bmpPCMOmxIkPVjO6e+5IpwXy4pSSoCA= -----END CERTIFICATE-----Generated at Wed Jul 2 06:07:05 2025 by rpki-client