$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa File: 07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa (raw, json) Hash identifier: dD1/cuqkQKmN5L2igFEGR4+pRH2G2Ousc+zNhiqIQZk= Subject key identifier: 01:48:0B:D7:6A:15:11:42:62:CE:8D:90:53:72:42:FD:B4:8B:9D:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963675B2A2A8E73CA6BB5B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.221.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:75:b2:a2:a8:e7:3c:a6:bb:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=4eb7702b-13a9-45a4-9c50-69454970e54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:a9:11:54:6a:b5:4f:70:fa:93:de:7e:61: e3:a3:f0:04:de:8a:9b:2e:02:b9:ce:21:25:d9:db: e7:0d:80:c4:c1:ec:2f:36:ad:28:2f:cb:ff:85:ec: 72:b2:c3:07:24:f2:f5:be:4a:8d:77:96:0b:55:05: 65:13:bf:bd:f3:96:88:a1:8b:9c:77:6d:e0:b5:3f: e5:24:fd:84:1b:75:2f:ff:2b:ba:0a:db:a6:f7:47: 75:6c:66:48:93:7c:fe:36:57:42:3d:ac:31:df:9e: 9e:5f:0d:6d:46:fa:47:b8:47:42:21:12:2b:38:26: 79:8d:92:ab:d4:ae:0a:6f:7f:36:2c:65:21:7a:53: 7a:14:b0:f7:7f:c8:68:fe:a6:07:b3:77:9f:43:8d: 0a:f9:38:4a:21:b5:82:bc:85:ac:ca:5a:89:35:e4: 90:f1:c0:96:df:db:25:4f:95:4b:a2:77:ee:b0:fa: ef:01:b2:16:dd:29:bb:1d:0d:ac:58:02:73:3c:94: 92:c3:0c:f2:67:bf:7b:9a:04:ea:10:c5:12:2b:c2: 72:ea:b4:9b:56:d2:ba:c6:f9:92:72:ca:bb:2b:99: c1:08:e3:15:96:0f:c4:70:19:59:05:38:77:a4:23: f7:c5:6e:04:ee:62:1d:21:b7:62:39:e9:14:f6:b6: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:48:0B:D7:6A:15:11:42:62:CE:8D:90:53:72:42:FD:B4:8B:9D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:31:7c:a1:67:2a:bc:0a:52:f9:a4:0a:08:9e:4e:3c:23:0f: 87:ef:05:3e:d9:27:4c:87:fe:1f:09:56:6d:d5:8d:00:2c:63: d2:74:f7:dd:dc:49:9e:02:9d:cb:75:9e:9a:dc:29:00:7e:2f: c6:fb:d1:74:3c:a7:bc:30:cb:aa:0c:b6:57:1b:c2:6f:fd:a1: 79:70:0f:dd:db:41:c9:29:cb:07:70:52:e7:7f:f7:4d:3e:21: c2:82:91:1e:fc:b7:30:21:f8:40:9a:42:7b:e4:00:34:b4:9e: 66:5f:30:d4:79:7a:c9:0d:d4:31:f5:c3:f8:ee:d1:67:75:36: ca:bd:df:bf:41:06:b6:45:af:30:9f:4f:2a:9f:af:50:5b:2e: a7:53:46:05:cc:27:70:45:3a:ef:06:aa:bd:c9:7f:91:1a:98: 2e:1a:c9:49:ba:8b:f9:53:98:97:49:ae:8b:4d:b8:4f:7b:64: 30:4b:98:91:72:66:20:89:d0:94:8b:64:ef:5c:88:54:1b:92: 51:8b:1b:1b:16:20:78:71:2a:bb:da:99:1f:94:8c:0d:61:55: 4a:6b:9c:5d:ab:07:e8:6f:87:e9:c3:32:4b:d0:4d:22:bd:6a: d7:64:6c:d0:b1:1d:3d:21:46:88:f7:1b:9b:74:41:17:30:f1: 8a:2e:bb:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnWyoqjnPKa7W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NGViNzcwMmItMTNhOS00NWE0LTljNTAtNjk0NTQ5NzBlNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLypEVRqtU9w+pPefmHjo/AE3oqbLgK5ziEl 2dvnDYDEwewvNq0oL8v/hexyssMHJPL1vkqNd5YLVQVlE7+985aIoYucd23gtT/l JP2EG3Uv/yu6Ctum90d1bGZIk3z+NldCPawx356eXw1tRvpHuEdCIRIrOCZ5jZKr 1K4Kb382LGUhelN6FLD3f8ho/qYHs3efQ40K+ThKIbWCvIWsylqJNeSQ8cCW39sl T5VLonfusPrvAbIW3Sm7HQ2sWAJzPJSSwwzyZ797mgTqEMUSK8Jy6rSbVtK6xvmS csq7K5nBCOMVlg/EcBlZBTh3pCP3xW4E7mIdIbdiOekU9ralEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFIC9dqFRFCYs6NkFNyQv20i50GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDdlNmExOTYtYzRmNy0z ZWFmLWI1YzItNjNmZWVmNzdhYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8xfKFnKrwKUvmkCgieTjwjD4fvBT7ZJ0yH/h8JVm3VjQAsY9J0993c SZ4Cnct1nprcKQB+L8b70XQ8p7wwy6oMtlcbwm/9oXlwD93bQckpywdwUud/900+ IcKCkR78tzAh+ECaQnvkADS0nmZfMNR5eskN1DH1w/ju0Wd1Nsq9379BBrZFrzCf Tyqfr1BbLqdTRgXMJ3BFOu8Gqr3Jf5EamC4ayUm6i/lTmJdJrotNuE97ZDBLmJFy ZiCJ0JSLZO9ciFQbklGLGxsWIHhxKrvamR+UjA1hVUprnF2rB+hvh+nDMkvQTSK9 atdkbNCxHT0hRoj3G5t0QRcw8YouuzE= -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:42 2025 by rpki-client