$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d521ea23-5bc5-3666-be9a-4384500e3328.roa File: d521ea23-5bc5-3666-be9a-4384500e3328.roa (raw, json) Hash identifier: ZDHVLRhXGinRxT1l7Vr9ZQuABFaT+jMW6oGd6Gc2rtc= Subject key identifier: CB:AE:9F:02:3D:FE:31:29:0E:38:B7:C9:99:C9:7F:80:54:00:BC:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E761DF88B65A91F527A4AF8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d521ea23-5bc5-3666-be9a-4384500e3328.roa Signing time: Thu 19 Jun 2025 14:38:52 +0000 ROA not before: Thu 19 Jun 2025 14:38:52 +0000 ROA not after: Wed 17 Sep 2025 14:38:52 +0000 asID: 22773 IP address blocks: 72.208.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:1d:f8:8b:65:a9:1f:52:7a:4a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:52 2025 GMT Not After : Sep 17 14:38:52 2025 GMT Subject: CN=e1e6085e-bb77-4e8d-8fe1-a791a801ff64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:99:35:0a:51:bf:b5:60:14:77:fe:16:5a: df:9c:31:ce:e1:f3:f3:95:d7:07:cd:00:69:91:81: 84:d4:bd:fd:c4:67:68:ff:68:82:0d:f4:e8:56:24: d8:ff:c7:84:f5:8b:e7:a3:37:c6:ca:2e:62:66:ea: 20:92:cf:f8:ef:e5:49:7b:70:81:44:16:58:d0:32: 99:ce:36:62:48:23:9c:d1:aa:da:a5:19:b1:a5:de: ef:56:63:f8:93:c4:35:74:da:56:10:c6:42:aa:e3: 79:af:0f:77:52:3c:1b:a3:81:a7:fa:60:8e:aa:76: ec:7e:d8:30:a4:c8:8e:e1:40:b9:35:08:d6:98:cc: e0:d1:b1:b3:da:7d:18:49:26:b3:56:5c:d0:ed:f0: af:e0:c3:d9:bf:55:94:e6:b1:33:24:56:e8:a7:88: 50:60:d1:67:44:b9:fd:21:5b:af:ad:a3:e8:dd:d1: 2f:77:40:13:df:9d:bf:72:f3:0d:60:eb:1c:76:1e: 83:fd:f2:3a:c4:86:2c:cd:a2:d1:66:46:9d:6e:b2: 4d:44:56:dc:06:ce:de:e7:82:47:bb:42:d2:d1:c3: 2c:12:a8:0e:13:00:4b:f4:ae:a6:ae:6c:59:26:93: db:b7:ad:b2:d2:1f:9c:e0:ef:39:94:95:43:c6:5b: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AE:9F:02:3D:FE:31:29:0E:38:B7:C9:99:C9:7F:80:54:00:BC:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d521ea23-5bc5-3666-be9a-4384500e3328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:09:a5:52:ef:ef:58:0d:a8:df:84:ab:9e:ef:bb:5b:83:31: 6f:12:f8:30:9f:23:bc:07:2c:4b:b7:e9:53:93:48:b6:42:d6: 45:f4:85:04:15:c2:01:0d:d7:42:b5:48:a8:37:6d:8a:ab:b2: 3e:6f:6d:21:26:7e:38:d4:7e:f7:05:95:1f:c0:47:4e:c3:d5: 59:b8:49:56:70:f8:84:b3:2e:45:d3:bc:83:a1:ca:30:ff:8b: b1:4d:70:bf:3e:83:e3:19:08:9b:1d:71:93:cf:8b:08:19:bf: cb:53:f2:fd:e8:95:01:2d:cc:bd:d9:a2:2d:04:bc:16:4f:e2: fa:e8:2e:7f:ba:de:00:7f:aa:d0:1d:2e:5a:c9:18:38:52:5b: d4:e2:39:64:82:6a:a0:cb:88:2a:46:92:3e:b3:bd:59:83:3a: 29:b8:96:17:67:ab:78:ea:ca:13:4a:94:31:ed:db:22:fc:ad: 51:72:27:37:9f:e3:4d:5b:01:69:56:74:12:d4:0c:7d:d7:dd: fb:b1:88:ef:ef:22:30:8b:5f:d8:57:f0:a3:62:06:31:f7:b4: f4:27:ab:66:a3:ad:35:12:01:e0:ee:57:72:a5:5a:01:5d:c3: dd:d9:7f:a1:1e:66:e7:11:5d:d9:7d:09:c0:47:bf:d1:38:1b: 7e:e8:b5:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dh34i2WpH1J6SvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzg1MloXDTI1MDkxNzE0Mzg1MlowLzEtMCsGA1UEAxMk ZTFlNjA4NWUtYmI3Ny00ZThkLThmZTEtYTc5MWE4MDFmZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsuZNQpRv7VgFHf+FlrfnDHO4fPzldcHzQBp kYGE1L39xGdo/2iCDfToViTY/8eE9YvnozfGyi5iZuogks/47+VJe3CBRBZY0DKZ zjZiSCOc0arapRmxpd7vVmP4k8Q1dNpWEMZCquN5rw93Ujwbo4Gn+mCOqnbsftgw pMiO4UC5NQjWmMzg0bGz2n0YSSazVlzQ7fCv4MPZv1WU5rEzJFbop4hQYNFnRLn9 IVuvraPo3dEvd0AT352/cvMNYOscdh6D/fI6xIYszaLRZkadbrJNRFbcBs7e54JH u0LS0cMsEqgOEwBL9K6mrmxZJpPbt62y0h+c4O85lJVDxltaiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuunwI9/jEpDji3yZnJf4BUALxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDUyMWVhMjMtNWJjNS0z NjY2LWJlOWEtNDM4NDUwMGUzMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcJpVLv71gNqN+Eq57vu1uDMW8S+DCfI7wHLEu36VOTSLZC1kX0hQQV wgEN10K1SKg3bYqrsj5vbSEmfjjUfvcFlR/AR07D1Vm4SVZw+ISzLkXTvIOhyjD/ i7FNcL8+g+MZCJsdcZPPiwgZv8tT8v3olQEtzL3Zoi0EvBZP4vroLn+63gB/qtAd LlrJGDhSW9TiOWSCaqDLiCpGkj6zvVmDOim4lhdnq3jqyhNKlDHt2yL8rVFyJzef 401bAWlWdBLUDH3X3fuxiO/vIjCLX9hX8KNiBjH3tPQnq2ajrTUSAeDuV3KlWgFd w93Zf6EeZucRXdl9CcBHv9E4G37otUs= -----END CERTIFICATE-----Generated at Wed Jul 2 07:22:34 2025 by rpki-client