$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0d51132-7038-32aa-a915-4bae7f0d55fa.roa File: d0d51132-7038-32aa-a915-4bae7f0d55fa.roa (raw, json) Hash identifier: +eu9/kecNtH1ECqYFEailESETSF7q2P+IOMpcSyT8/I= Subject key identifier: 3E:1F:09:9A:C5:AB:5D:6A:0D:E9:47:53:D4:5D:97:BD:F8:08:4D:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E777A148FCEE37499F1AA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0d51132-7038-32aa-a915-4bae7f0d55fa.roa Signing time: Thu 19 Jun 2025 14:41:37 +0000 ROA not before: Thu 19 Jun 2025 14:41:37 +0000 ROA not after: Wed 17 Sep 2025 14:41:37 +0000 asID: 22773 IP address blocks: 72.217.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:7a:14:8f:ce:e3:74:99:f1:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:37 2025 GMT Not After : Sep 17 14:41:37 2025 GMT Subject: CN=3e5480d8-7242-4781-9221-d72a1b64948f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:43:75:ad:cb:d8:f8:10:03:9b:c4:7f:6d: a1:25:2d:b2:e0:29:67:9e:00:7b:45:e6:dc:c7:a1: dd:1b:2c:24:84:1c:17:9d:58:83:9b:92:42:ff:cb: af:7b:d1:c8:95:13:f7:30:7d:c2:be:91:06:8b:0f: 6f:04:99:df:9c:80:05:da:3a:3b:d2:18:91:03:2f: 01:1d:55:c2:6a:fe:dc:a4:e3:13:6f:4b:15:a0:66: 5e:67:28:d7:95:75:92:1f:78:1a:e9:e5:3c:c4:15: ad:f0:24:76:27:29:74:1f:f0:cc:e7:98:ed:59:2a: b1:4c:94:ee:e1:11:e9:88:56:c5:d3:23:90:13:0a: f8:43:7f:dd:09:a2:b7:26:be:fb:f0:84:aa:8a:77: 5e:34:c8:b7:c9:6e:4d:18:e8:5d:75:24:84:47:39: 6c:ed:ad:fe:40:16:df:91:e2:38:79:08:ed:e3:42: 11:7b:d2:a0:c0:46:27:b8:86:9d:25:c9:d8:71:7a: 14:0a:f5:f3:ea:e7:c7:79:fd:a1:00:38:11:3a:1c: 86:41:b9:e0:87:ad:82:fc:1a:cb:83:2f:7f:be:95: 60:88:e5:6d:82:57:5e:15:e4:ac:b3:ea:eb:bc:3e: e5:5f:76:c4:f9:80:be:1c:4a:d7:61:42:02:d7:3c: bd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1F:09:9A:C5:AB:5D:6A:0D:E9:47:53:D4:5D:97:BD:F8:08:4D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0d51132-7038-32aa-a915-4bae7f0d55fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:28:19:ca:97:28:fc:a1:54:e1:7b:2a:3c:57:7d:e1:e7:34: 18:9f:13:ba:59:db:a7:73:64:51:ba:32:4b:ea:20:65:e6:57: 5a:f6:dd:2f:df:45:60:6e:2e:05:2d:0d:6c:4d:cb:7c:40:30: 8e:3d:70:cd:82:e2:be:7f:30:6f:8b:db:e0:70:25:86:3d:17: c9:0a:3a:5c:66:d5:45:af:72:e0:49:8a:e0:0b:aa:09:da:70: a5:62:0e:89:ec:18:db:3e:fd:c9:90:ec:76:29:5d:9c:32:9f: 88:99:37:f1:c3:56:ab:ca:04:4d:3d:31:4a:c1:56:24:c9:04: c5:1d:34:cb:00:68:46:04:95:4f:de:6d:57:68:08:cd:32:46: 8c:89:36:4b:7b:ac:6f:41:89:b3:20:b9:8d:d6:cd:f9:a3:fd: ec:dd:67:93:a1:81:57:a0:8d:54:f6:10:d4:ac:1b:9d:74:f6: b6:56:22:fe:58:2d:20:be:df:b7:31:f5:87:ea:9b:a2:b2:22: 9e:8b:f7:ea:e7:8b:18:a5:a4:86:8a:1a:ab:d1:5b:ff:70:6b: d9:9c:13:9e:dd:47:f5:be:05:73:37:32:2e:50:ba:64:a9:93: 25:64:af:21:8d:7f:22:9c:fc:c9:f3:53:88:9a:88:dc:6d:99: 85:7b:b1:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d3oUj87jdJnxqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDEzN1oXDTI1MDkxNzE0NDEzN1owLzEtMCsGA1UEAxMk M2U1NDgwZDgtNzI0Mi00NzgxLTkyMjEtZDcyYTFiNjQ5NDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ytDda3L2PgQA5vEf22hJS2y4ClnngB7Rebc x6HdGywkhBwXnViDm5JC/8uve9HIlRP3MH3CvpEGiw9vBJnfnIAF2jo70hiRAy8B HVXCav7cpOMTb0sVoGZeZyjXlXWSH3ga6eU8xBWt8CR2Jyl0H/DM55jtWSqxTJTu 4RHpiFbF0yOQEwr4Q3/dCaK3Jr778ISqindeNMi3yW5NGOhddSSERzls7a3+QBbf keI4eQjt40IRe9KgwEYnuIadJcnYcXoUCvXz6ufHef2hADgROhyGQbngh62C/BrL gy9/vpVgiOVtgldeFeSss+rrvD7lX3bE+YC+HErXYUIC1zy95QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4fCZrFq11qDelHU9Rdl734CE1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDBkNTExMzItNzAzOC0z MmFhLWE5MTUtNGJhZTdmMGQ1NWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQoGcqXKPyhVOF7KjxXfeHnNBifE7pZ26dzZFG6MkvqIGXmV1r23S/f RWBuLgUtDWxNy3xAMI49cM2C4r5/MG+L2+BwJYY9F8kKOlxm1UWvcuBJiuALqgna cKViDonsGNs+/cmQ7HYpXZwyn4iZN/HDVqvKBE09MUrBViTJBMUdNMsAaEYElU/e bVdoCM0yRoyJNkt7rG9BibMguY3Wzfmj/ezdZ5OhgVegjVT2ENSsG5109rZWIv5Y LSC+37cx9Yfqm6KyIp6L9+rnixilpIaKGqvRW/9wa9mcE57dR/W+BXM3Mi5QumSp kyVkryGNfyKc/MnzU4iaiNxtmYV7sYQ= -----END CERTIFICATE-----Generated at Wed Jul 2 15:10:51 2025 by rpki-client