$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc775b5e-e716-32ba-8505-08637096b140.roa File: dc775b5e-e716-32ba-8505-08637096b140.roa (raw, json) Hash identifier: LbKJW60xBXUh7ADpFL/1nOVPTUNsjwhj9tGOQ6d7GAI= Subject key identifier: CF:41:33:FB:C6:89:79:27:8B:65:89:65:15:88:F6:B4:12:0C:8E:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A97D164C85C58B5944B180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc775b5e-e716-32ba-8505-08637096b140.roa Signing time: Fri 20 Jun 2025 09:34:00 +0000 ROA not before: Fri 20 Jun 2025 09:34:00 +0000 ROA not after: Thu 18 Sep 2025 09:34:00 +0000 asID: 22773 IP address blocks: 72.193.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:7d:16:4c:85:c5:8b:59:44:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:00 2025 GMT Not After : Sep 18 09:34:00 2025 GMT Subject: CN=04ff66c7-ba91-4f0b-88af-f9b3e1b57114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:30:03:4c:04:b2:c7:1a:53:82:31:cf:e7:cf: 4c:72:5f:9e:57:47:4f:b0:b7:a9:a0:13:4d:18:e4: 0c:d5:63:b3:6b:be:61:82:3a:93:ab:2e:2a:01:02: 03:ac:78:52:bf:4b:39:8f:39:00:16:42:23:06:a2: 84:a2:67:20:8c:af:18:3d:ba:6f:35:fd:2c:c8:37: 0c:07:83:77:eb:45:2e:ca:17:3e:8d:5d:4a:46:a5: 72:08:83:ea:fa:cc:72:96:3d:8a:b3:9c:a5:26:39: 15:8e:04:77:9b:12:82:50:71:f2:5f:2c:39:a0:ca: 57:99:58:64:44:73:f4:14:78:32:47:91:28:8e:8b: 8a:58:94:1c:c2:e2:6c:9c:4c:d8:4c:34:1d:9e:62: 90:94:0a:1a:e2:81:c3:e8:bc:34:39:91:08:fc:72: 12:4c:1f:27:7e:b3:26:c5:80:58:04:bb:0c:f6:8e: 01:66:9f:a1:a1:a0:aa:9e:e3:4e:4d:07:e2:97:90: 29:82:f6:0b:12:91:40:9c:b6:94:5e:72:b9:3a:29: c6:7d:26:0b:5f:f8:4d:85:82:fc:16:8e:67:e3:93: aa:04:61:3d:8c:b7:c3:00:1e:77:48:b3:f1:2e:21: 14:35:61:61:0c:ce:de:6f:ed:e0:fd:ef:e2:83:55: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:41:33:FB:C6:89:79:27:8B:65:89:65:15:88:F6:B4:12:0C:8E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc775b5e-e716-32ba-8505-08637096b140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:1b:7c:94:6b:42:94:b4:cf:d5:fd:c2:5c:0a:cd:d3:16:bd: 43:ac:45:d0:87:07:f3:33:fb:e4:5d:9a:aa:9a:bd:75:41:4a: 1b:49:34:f1:e5:35:a5:58:a0:31:6c:1d:b7:5e:ef:e9:dd:de: 05:9e:3d:ad:0b:51:c0:94:b6:aa:39:81:14:25:c8:09:58:5e: 62:aa:c6:23:56:3c:c4:62:34:37:f0:58:88:0f:16:5e:00:e1: 28:2a:4c:1a:f3:34:89:4a:37:01:e6:8a:0a:82:77:c0:23:e7: c6:93:71:0c:f3:e3:d2:06:05:55:1c:e9:72:35:9a:8f:36:bb: bf:d8:0b:a2:e7:3c:7f:c9:2d:df:ca:11:28:6f:72:6e:39:bb: 4b:0b:2f:fc:08:dc:21:c2:69:f4:2d:d9:74:b3:43:a5:0f:b4: f4:e7:d5:00:c4:48:d6:b8:69:d3:e0:6d:55:41:d6:34:26:2b: 4e:64:23:44:15:87:33:e1:fa:c7:a2:cf:f3:f7:f5:33:e4:b3: 6e:59:8b:b6:6c:0f:58:bb:78:d8:92:6c:59:09:74:bf:a2:2d: 24:69:d7:e5:61:74:8e:35:77:19:ef:8e:f0:e8:87:c8:26:b1: a5:59:b8:49:93:73:c8:59:44:b9:8f:1a:82:c5:83:2e:07:b8: bb:b1:ee:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqX0WTIXFi1lEsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQwMFoXDTI1MDkxODA5MzQwMFowLzEtMCsGA1UEAxMk MDRmZjY2YzctYmE5MS00ZjBiLTg4YWYtZjliM2UxYjU3MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zADTASyxxpTgjHP589Mcl+eV0dPsLepoBNN GOQM1WOza75hgjqTqy4qAQIDrHhSv0s5jzkAFkIjBqKEomcgjK8YPbpvNf0syDcM B4N360Uuyhc+jV1KRqVyCIPq+sxylj2Ks5ylJjkVjgR3mxKCUHHyXyw5oMpXmVhk RHP0FHgyR5EojouKWJQcwuJsnEzYTDQdnmKQlAoa4oHD6Lw0OZEI/HISTB8nfrMm xYBYBLsM9o4BZp+hoaCqnuNOTQfil5ApgvYLEpFAnLaUXnK5OinGfSYLX/hNhYL8 Fo5n45OqBGE9jLfDAB53SLPxLiEUNWFhDM7eb+3g/e/ig1XV2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9BM/vGiXkni2WJZRWI9rQSDI5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGM3NzViNWUtZTcxNi0z MmJhLTg1MDUtMDg2MzcwOTZiMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8bfJRrQpS0z9X9wlwKzdMWvUOsRdCHB/Mz++RdmqqavXVBShtJNPHl NaVYoDFsHbde7+nd3gWePa0LUcCUtqo5gRQlyAlYXmKqxiNWPMRiNDfwWIgPFl4A 4SgqTBrzNIlKNwHmigqCd8Aj58aTcQzz49IGBVUc6XI1mo82u7/YC6LnPH/JLd/K EShvcm45u0sLL/wI3CHCafQt2XSzQ6UPtPTn1QDESNa4adPgbVVB1jQmK05kI0QV hzPh+seiz/P39TPks25Zi7ZsD1i7eNiSbFkJdL+iLSRp1+VhdI41dxnvjvDoh8gm saVZuEmTc8hZRLmPGoLFgy4HuLux7l8= -----END CERTIFICATE-----Generated at Wed Jul 2 15:10:04 2025 by rpki-client