$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df96130a-2961-3138-962d-0311d6972968.roa File: df96130a-2961-3138-962d-0311d6972968.roa (raw, json) Hash identifier: AVTxGD2bxkM3gys+iQoCFvFFRsWNBfWyTUYfKzLoCsE= Subject key identifier: EF:E0:F8:F2:AB:57:2E:73:E1:AB:46:53:B7:D4:53:5D:A5:34:3E:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9449D01A21004DA9707C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df96130a-2961-3138-962d-0311d6972968.roa Signing time: Fri 20 Jun 2025 09:33:33 +0000 ROA not before: Fri 20 Jun 2025 09:33:33 +0000 ROA not after: Thu 18 Sep 2025 09:33:33 +0000 asID: 22773 IP address blocks: 72.193.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:44:9d:01:a2:10:04:da:97:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:33 2025 GMT Not After : Sep 18 09:33:33 2025 GMT Subject: CN=85b03645-f3b0-4fa6-9fdb-482536c109cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:83:7c:59:a6:40:f0:c7:1c:63:b6:76:d5: fd:14:21:92:65:07:41:6a:d4:81:c7:75:34:c3:fb: be:09:97:6e:3d:d3:40:09:bc:24:17:6a:0c:fd:aa: d2:40:72:f3:33:73:d7:14:36:25:01:b0:94:d7:62: e9:85:78:b3:1f:3b:c7:f1:a8:b7:57:fa:a2:bb:23: ab:f4:72:cb:e1:b1:39:70:bb:71:4c:c3:54:9b:5f: 31:ed:cc:c2:9b:19:a4:5b:1f:49:e1:15:c5:c3:90: 42:f5:ee:5e:c1:ee:1f:95:bb:48:f2:09:7c:94:60: 62:56:a2:ac:f0:ea:19:ac:85:90:78:6d:69:f2:38: 6e:4c:22:16:23:12:7c:cd:77:57:38:c2:66:b5:49: 15:f9:17:f5:58:9e:6e:81:d0:92:49:88:09:4b:b2: cb:d1:5c:65:c2:d1:bc:0a:39:82:24:3d:1a:7f:3a: c3:a4:f7:cb:72:35:2d:e5:11:6e:d8:8d:8e:19:3c: 18:e6:c4:45:3f:a9:66:f1:66:1f:dd:df:af:d5:6c: 20:17:18:95:8a:fd:54:85:ae:6e:85:a2:7c:61:10: cd:5b:ce:d7:5c:6b:91:68:14:fa:25:4e:36:7c:dc: d0:38:55:f5:29:8a:46:8d:52:5b:2a:b4:0b:73:24: ed:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E0:F8:F2:AB:57:2E:73:E1:AB:46:53:B7:D4:53:5D:A5:34:3E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df96130a-2961-3138-962d-0311d6972968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:58:8f:32:08:56:da:25:43:a8:8f:d7:aa:95:13:71:9d:d3: 12:60:85:ac:1b:a5:70:b8:dc:d4:4b:29:33:46:f3:72:ca:7d: 5d:ae:54:d2:47:e6:93:47:13:45:e3:cc:14:8b:19:ca:7f:94: c1:ad:1c:b0:97:59:f8:6b:f5:f9:46:4f:80:b6:db:08:47:ef: 4f:4b:67:10:c5:ec:64:eb:f7:a6:61:62:77:c4:ee:ab:b4:8a: 1d:fc:fc:d9:3c:0a:98:fe:cf:2a:dd:ad:1f:e2:4c:de:7f:44: ba:b5:94:35:b8:45:5c:5a:e1:38:c0:fe:a9:79:38:2f:4a:77: 9d:a8:63:a4:13:8f:20:59:4e:38:15:da:b7:b2:80:ca:92:3d: 45:85:8a:88:fa:ed:48:95:40:aa:50:06:0d:83:80:cb:5c:52: bf:96:5f:b4:97:6a:64:ab:8e:d7:5a:fe:4d:ad:49:ef:70:23: b4:1b:41:00:b8:4f:23:41:b5:e6:f4:b0:ae:aa:ff:44:ce:e9: 58:42:97:34:19:04:de:ce:4b:42:d5:39:02:4b:ea:06:e1:0a: 42:7a:70:a9:4d:fb:74:89:9a:62:c6:91:84:bf:63:76:b9:f1: 15:af:d8:49:a1:c0:f0:d6:d5:35:84:c3:99:56:92:c3:e7:f1: c1:77:69:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqUSdAaIQBNqXB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzMzM1oXDTI1MDkxODA5MzMzM1owLzEtMCsGA1UEAxMk ODViMDM2NDUtZjNiMC00ZmE2LTlmZGItNDgyNTM2YzEwOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1+DfFmmQPDHHGO2dtX9FCGSZQdBatSBx3U0 w/u+CZduPdNACbwkF2oM/arSQHLzM3PXFDYlAbCU12LphXizHzvH8ai3V/qiuyOr 9HLL4bE5cLtxTMNUm18x7czCmxmkWx9J4RXFw5BC9e5ewe4flbtI8gl8lGBiVqKs 8OoZrIWQeG1p8jhuTCIWIxJ8zXdXOMJmtUkV+Rf1WJ5ugdCSSYgJS7LL0VxlwtG8 CjmCJD0afzrDpPfLcjUt5RFu2I2OGTwY5sRFP6lm8WYf3d+v1WwgFxiViv1Uha5u haJ8YRDNW87XXGuRaBT6JU42fNzQOFX1KYpGjVJbKrQLcyTt1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/g+PKrVy5z4atGU7fUU12lND6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGY5NjEzMGEtMjk2MS0z MTM4LTk2MmQtMDMxMWQ2OTcyOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9YjzIIVtolQ6iP16qVE3Gd0xJghawbpXC43NRLKTNG83LKfV2uVNJH 5pNHE0XjzBSLGcp/lMGtHLCXWfhr9flGT4C22whH709LZxDF7GTr96ZhYnfE7qu0 ih38/Nk8Cpj+zyrdrR/iTN5/RLq1lDW4RVxa4TjA/ql5OC9Kd52oY6QTjyBZTjgV 2reygMqSPUWFioj67UiVQKpQBg2DgMtcUr+WX7SXamSrjtda/k2tSe9wI7QbQQC4 TyNBteb0sK6q/0TO6VhClzQZBN7OS0LVOQJL6gbhCkJ6cKlN+3SJmmLGkYS/Y3a5 8RWv2EmhwPDW1TWEw5lWksPn8cF3af0= -----END CERTIFICATE-----Generated at Wed Jul 2 10:21:09 2025 by rpki-client