$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a61a37-1119-37ad-897f-7001a97fe242.roa File: e9a61a37-1119-37ad-897f-7001a97fe242.roa (raw, json) Hash identifier: rAGlgIufkkra5+0rze5CTXTlWWz3S6CEiFJto4GJEi4= Subject key identifier: A9:02:08:1E:24:0C:4F:50:52:1F:B1:93:84:B6:D6:B9:CE:D6:2E:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E77008A1EF51065C3D49300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a61a37-1119-37ad-897f-7001a97fe242.roa Signing time: Thu 19 Jun 2025 14:40:39 +0000 ROA not before: Thu 19 Jun 2025 14:40:39 +0000 ROA not after: Wed 17 Sep 2025 14:40:39 +0000 asID: 22773 IP address blocks: 72.212.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:00:8a:1e:f5:10:65:c3:d4:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:39 2025 GMT Not After : Sep 17 14:40:39 2025 GMT Subject: CN=c1f1a3fd-f63a-4cf2-b9c4-8ab46d5ec201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:f2:02:85:94:2b:35:21:67:6a:d2:c1:60: 50:cc:c4:0d:ce:7e:19:5a:4c:2f:e4:d1:25:86:b6: 5f:6f:75:90:04:a3:be:51:71:05:23:6e:cf:b1:46: 26:4b:47:7d:26:ae:7f:3f:6f:ba:bc:9a:e1:0a:db: c3:66:1c:fd:91:35:56:a5:ef:e9:f5:5f:6e:14:ed: e1:20:8b:2b:22:f5:3a:99:1b:cc:37:c8:b2:29:08: 20:c1:ac:84:9a:07:fc:f8:b3:db:d5:4f:e3:62:17: 2a:a8:08:61:33:36:07:73:08:4d:72:4c:80:06:d0: 79:2d:1e:4d:4f:39:64:fb:22:6f:d5:a9:20:57:74: 2f:6e:dc:34:e9:ea:d1:1f:0c:5a:98:22:b5:51:18: 9d:32:a2:0a:94:08:8e:12:9a:92:d2:26:ea:d4:08: b6:9c:9e:61:37:87:a0:02:4d:90:88:65:d0:b2:9e: d7:c0:9e:01:b7:20:2a:e1:5c:56:80:7e:45:6c:69: 5b:e9:f8:b2:89:70:75:e5:0f:f5:d7:50:02:16:4d: 68:b0:47:f1:bf:45:ec:75:60:4a:05:4b:c3:77:f9: 75:9a:89:54:12:b7:5e:d5:25:ed:6b:b4:6d:2c:36: 42:89:74:f8:9f:71:11:6e:9c:f5:8d:2b:df:29:b9: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:02:08:1E:24:0C:4F:50:52:1F:B1:93:84:B6:D6:B9:CE:D6:2E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a61a37-1119-37ad-897f-7001a97fe242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:2a:67:65:57:57:0b:fb:36:79:70:bf:42:dc:b4:3e:40:55: f8:20:78:70:bf:6a:de:26:1f:f6:14:7d:1a:e3:65:00:4e:6b: e2:e9:31:02:79:75:a4:1a:e8:96:5b:24:98:da:ad:02:dc:9f: 93:0a:53:27:15:dd:b9:3b:1d:a0:6a:1a:13:7c:a5:c6:41:84: f3:56:8f:7a:71:fb:4a:82:ad:db:5e:c7:dd:35:4c:0d:1c:c2: bc:33:66:7f:b5:9f:72:b9:48:ff:5d:99:7f:d9:a1:40:f2:d6: 96:11:01:df:bd:23:99:07:71:e0:3f:d0:f7:02:0a:69:ea:70: 62:5f:dc:fc:df:14:32:92:d8:b5:d4:0d:00:1c:b1:4d:8d:7e: 35:8f:82:00:f3:08:29:9f:a4:4b:0b:99:44:25:50:d3:69:43: 2b:f8:1f:db:c5:11:f2:52:6d:3c:86:8f:31:21:70:2e:89:ac: 37:5e:2f:e8:d4:1d:c6:bc:db:fa:e0:7f:30:56:51:cb:88:25: 7f:83:6c:64:84:4c:19:bf:e7:20:91:54:18:ce:0e:e7:fe:11: dc:c2:78:c1:3b:9e:02:db:87:11:82:f4:9d:0b:95:77:82:8e: 8d:af:dc:51:ab:8a:de:7e:86:54:dd:e6:ce:0c:b8:9e:66:14: e2:34:45:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dwCKHvUQZcPUkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAzOVoXDTI1MDkxNzE0NDAzOVowLzEtMCsGA1UEAxMk YzFmMWEzZmQtZjYzYS00Y2YyLWI5YzQtOGFiNDZkNWVjMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9XyAoWUKzUhZ2rSwWBQzMQNzn4ZWkwv5NEl hrZfb3WQBKO+UXEFI27PsUYmS0d9Jq5/P2+6vJrhCtvDZhz9kTVWpe/p9V9uFO3h IIsrIvU6mRvMN8iyKQggwayEmgf8+LPb1U/jYhcqqAhhMzYHcwhNckyABtB5LR5N Tzlk+yJv1akgV3Qvbtw06erRHwxamCK1URidMqIKlAiOEpqS0ibq1Ai2nJ5hN4eg Ak2QiGXQsp7XwJ4BtyAq4VxWgH5FbGlb6fiyiXB15Q/111ACFk1osEfxv0XsdWBK BUvDd/l1molUErde1SXta7RtLDZCiXT4n3ERbpz1jSvfKbnjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkCCB4kDE9QUh+xk4S21rnO1i5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTlhNjFhMzctMTExOS0z N2FkLTg5N2YtNzAwMWE5N2ZlMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgqZ2VXVwv7Nnlwv0LctD5AVfggeHC/at4mH/YUfRrjZQBOa+LpMQJ5 daQa6JZbJJjarQLcn5MKUycV3bk7HaBqGhN8pcZBhPNWj3px+0qCrdtex901TA0c wrwzZn+1n3K5SP9dmX/ZoUDy1pYRAd+9I5kHceA/0PcCCmnqcGJf3PzfFDKS2LXU DQAcsU2NfjWPggDzCCmfpEsLmUQlUNNpQyv4H9vFEfJSbTyGjzEhcC6JrDdeL+jU Hca82/rgfzBWUcuIJX+DbGSETBm/5yCRVBjODuf+EdzCeME7ngLbhxGC9J0LlXeC jo2v3FGrit5+hlTd5s4MuJ5mFOI0RQQ= -----END CERTIFICATE-----Generated at Wed Jul 2 07:43:45 2025 by rpki-client