$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3fe7009-eeac-3cd3-bca0-ad9bf86a1782.roa File: f3fe7009-eeac-3cd3-bca0-ad9bf86a1782.roa (raw, json) Hash identifier: 5ma+BVwuyT0kaN8XXCJ/7efKMeUqlEhq6vKhnzpNvW0= Subject key identifier: CE:50:4A:17:30:2B:3A:B7:B7:A9:94:AD:73:76:CA:BD:48:1F:28:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E76B18F5C9BCC8FF794717C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3fe7009-eeac-3cd3-bca0-ad9bf86a1782.roa Signing time: Thu 19 Jun 2025 14:40:02 +0000 ROA not before: Thu 19 Jun 2025 14:40:02 +0000 ROA not after: Wed 17 Sep 2025 14:40:02 +0000 asID: 22773 IP address blocks: 72.210.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:b1:8f:5c:9b:cc:8f:f7:94:71:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:40:02 2025 GMT Not After : Sep 17 14:40:02 2025 GMT Subject: CN=a904baf0-02ff-4b94-95f9-154e0d359223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:08:ad:e8:07:fd:bb:ba:09:ed:d3:f0:0e: f1:45:af:eb:e6:68:71:ff:75:51:93:13:d8:5f:dc: f2:f6:9d:69:41:82:17:89:5a:82:1a:93:21:84:d7: ed:41:99:0c:24:37:cc:a4:ca:5b:df:c7:74:09:dd: 04:1d:2c:90:d0:e6:62:c6:e5:13:c2:2a:6c:a2:1f: 46:e4:d5:5c:d9:e4:af:5a:35:24:55:64:b7:ba:d5: d3:8e:2f:2d:78:a6:dd:7d:1a:f4:db:5a:79:c2:cd: 04:b9:7a:e0:b0:9f:53:92:d9:ac:a9:4f:58:16:89: d1:ad:a3:91:b3:8c:a6:30:fd:88:de:6e:c4:62:d2: ba:94:46:63:0d:2b:d4:ea:4f:b1:e2:ea:b6:e1:25: 14:e3:c1:7b:80:d7:06:0f:1c:b1:4c:cc:74:8e:c4: de:22:e0:8e:af:e0:8e:06:6a:f9:21:18:6c:32:35: 2b:70:51:26:50:b2:c9:6e:03:73:0f:ec:f9:67:1b: 14:21:f4:0f:e1:be:ff:65:9b:93:8a:f3:4a:72:73: c3:01:c0:e3:ab:8d:7e:95:b3:d4:44:60:a9:12:c8: 2c:10:2f:40:42:1a:e9:e9:e3:6e:58:f9:ba:23:c1: 1f:8d:5c:41:cc:57:66:c5:f6:19:46:a0:1b:c6:b5: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:50:4A:17:30:2B:3A:B7:B7:A9:94:AD:73:76:CA:BD:48:1F:28:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3fe7009-eeac-3cd3-bca0-ad9bf86a1782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1f:d4:43:1b:d8:67:e8:d2:ad:6a:51:14:b6:ec:fe:60:a8: b5:c3:2d:23:1a:d2:be:66:8b:0d:b8:80:e3:d7:68:a9:88:82: 37:da:49:02:56:30:1e:3e:10:8c:50:4c:21:3a:a4:03:4e:d6: 20:45:2e:50:80:d7:8b:70:8d:14:9b:52:94:72:6e:a9:5e:30: 9a:59:3e:79:0a:44:98:78:66:62:c4:06:4f:37:13:6a:0b:d2: e7:55:b6:a7:eb:a0:cd:40:19:02:a8:a9:f9:05:db:a9:01:8d: 32:49:da:06:1f:e9:53:8b:d4:04:6d:9f:74:d8:1d:c0:1b:fc: 2e:1a:88:02:35:c4:9f:17:79:c9:bd:2b:e8:9f:00:25:ec:31: 7d:5c:0a:5b:e6:af:17:4a:57:f4:90:91:bf:07:dc:bc:2a:da: 3f:2e:f2:bd:8a:b4:fd:82:3d:a2:a7:6b:f3:b8:ae:35:7c:c2: fb:65:8a:16:94:20:d3:09:b8:0d:45:16:28:95:9f:91:24:4e: 0c:41:7e:0e:51:21:e4:4d:86:6f:83:d5:ca:8f:e6:d6:cd:0c: 30:77:05:dc:ed:fa:98:2f:51:dd:6d:39:af:91:b9:31:5b:c1: 23:69:a8:1c:bc:6f:b7:14:7b:dd:df:88:f2:10:09:f4:1b:8a: d0:5e:2c:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+drGPXJvMj/eUcXwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDAwMloXDTI1MDkxNzE0NDAwMlowLzEtMCsGA1UEAxMk YTkwNGJhZjAtMDJmZi00Yjk0LTk1ZjktMTU0ZTBkMzU5MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp4IregH/bu6Ce3T8A7xRa/r5mhx/3VRkxPY X9zy9p1pQYIXiVqCGpMhhNftQZkMJDfMpMpb38d0Cd0EHSyQ0OZixuUTwipsoh9G 5NVc2eSvWjUkVWS3utXTji8teKbdfRr021p5ws0EuXrgsJ9TktmsqU9YFonRraOR s4ymMP2I3m7EYtK6lEZjDSvU6k+x4uq24SUU48F7gNcGDxyxTMx0jsTeIuCOr+CO Bmr5IRhsMjUrcFEmULLJbgNzD+z5ZxsUIfQP4b7/ZZuTivNKcnPDAcDjq41+lbPU RGCpEsgsEC9AQhrp6eNuWPm6I8EfjVxBzFdmxfYZRqAbxrVNwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5QShcwKzq3t6mUrXN2yr1IHygEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjNmZTcwMDktZWVhYy0z Y2QzLWJjYTAtYWQ5YmY4NmExNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUf1EMb2Gfo0q1qURS27P5gqLXDLSMa0r5miw24gOPXaKmIgjfaSQJW MB4+EIxQTCE6pANO1iBFLlCA14twjRSbUpRybqleMJpZPnkKRJh4ZmLEBk83E2oL 0udVtqfroM1AGQKoqfkF26kBjTJJ2gYf6VOL1ARtn3TYHcAb/C4aiAI1xJ8Xecm9 K+ifACXsMX1cClvmrxdKV/SQkb8H3Lwq2j8u8r2KtP2CPaKna/O4rjV8wvtlihaU INMJuA1FFiiVn5EkTgxBfg5RIeRNhm+D1cqP5tbNDDB3Bdzt+pgvUd1tOa+RuTFb wSNpqBy8b7cUe93fiPIQCfQbitBeLMI= -----END CERTIFICATE-----Generated at Wed Jul 2 07:15:07 2025 by rpki-client