$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d9947bc-2914-33fc-8f23-a8c3ef370ea2.roa File: 0d9947bc-2914-33fc-8f23-a8c3ef370ea2.roa (raw, json) Hash identifier: PsNRCi3ROzWNKiFovdHar8jiHnOmpvyfLafg6m2oT7g= Subject key identifier: EF:41:57:4B:D1:CB:02:8A:41:9B:0A:1A:75:EC:B2:7B:8A:E9:58:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96362B5BA6ACD226C5C30100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d9947bc-2914-33fc-8f23-a8c3ef370ea2.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.221.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:2b:5b:a6:ac:d2:26:c5:c3:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=760a692d-2ff2-4a66-a7ef-5b4cdf5d6320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:a7:0f:cc:e9:47:d0:85:c6:70:5d:fe:af: 05:84:95:8a:4f:26:3b:7c:c0:fa:00:4a:71:a8:0a: 17:6a:68:20:45:e0:a2:95:c1:a4:38:d1:a9:3c:f6: 8c:e4:61:58:c7:82:97:2e:f2:8f:83:49:46:e4:35: 05:b6:ef:1b:a7:ae:65:27:97:e6:51:d3:d1:80:39: d4:44:1f:88:b0:f4:43:7a:c7:08:2d:58:6e:b4:2a: 25:e6:ec:f4:93:87:24:eb:8d:bb:4d:3e:87:e3:67: 3f:76:bd:f8:d1:37:aa:b0:77:06:7b:3b:92:69:db: 40:12:ee:74:08:ba:c6:e5:77:3f:03:bd:aa:75:6e: 42:d1:9f:13:46:8f:fd:4a:c6:34:6a:a5:23:e8:25: 5b:3a:7b:11:7d:93:3b:0c:0f:3a:de:cb:ef:e6:82: 32:8d:32:eb:37:de:97:ba:b5:c8:74:3e:e6:aa:8b: 32:1a:85:d2:58:de:f7:79:ed:d3:fa:f5:b1:e1:26: c6:fa:c2:81:37:d8:a3:ca:f6:c1:78:1a:aa:49:ef: e3:5f:98:0e:c0:85:de:c4:d3:cb:49:8e:b4:35:59: 9b:c6:22:fc:c2:03:04:a0:65:e4:78:28:d9:93:9c: 8d:00:2f:92:08:73:ec:dc:9d:3e:05:8f:03:29:ff: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:41:57:4B:D1:CB:02:8A:41:9B:0A:1A:75:EC:B2:7B:8A:E9:58:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d9947bc-2914-33fc-8f23-a8c3ef370ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c0:28:a2:44:f5:1c:de:91:f7:e1:30:87:0e:11:4a:b1:31: 33:dc:1e:60:b9:ce:3f:e1:9d:42:32:07:f9:a0:ef:ea:ae:05: ec:9f:48:6d:f2:ee:7f:1a:5d:9a:63:70:61:cf:87:94:bc:4f: b0:45:f8:64:d1:0c:e8:63:91:6c:8d:ba:0f:ae:71:8a:73:f6: 7d:e2:03:69:9f:f4:59:5b:56:3c:b7:d1:05:82:71:a1:2b:b5: 0f:10:33:b9:bd:ed:d3:60:50:9d:6d:33:cd:ad:dc:e2:08:c5: d9:5b:f3:86:18:cc:49:49:20:1b:94:f1:4b:74:24:81:0c:9e: 9b:fa:12:3b:0f:1e:72:5f:86:59:2e:cd:d6:a6:50:78:e7:b2: 18:1a:30:24:74:8b:5a:c6:6e:10:26:ec:5a:0a:17:1a:35:4d: 48:81:cd:59:68:6e:23:a0:6b:49:6d:22:c7:e3:40:52:34:b5: 31:d9:9c:31:a2:57:25:0c:35:90:9a:46:23:63:64:a8:59:8b: 90:24:8a:07:df:ef:1d:3e:f4:fb:86:34:dd:23:f4:6a:3a:ef: fe:66:05:cb:c7:7f:9f:3c:25:47:5c:be:89:de:92:b7:ea:4b: 7e:c7:51:37:b3:b7:c0:8b:46:22:23:6e:85:1d:ba:27:3f:a1: c3:70:e1:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNitbpqzSJsXDAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NzYwYTY5MmQtMmZmMi00YTY2LWE3ZWYtNWI0Y2RmNWQ2MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhmnD8zpR9CFxnBd/q8FhJWKTyY7fMD6AEpx qAoXamggReCilcGkONGpPPaM5GFYx4KXLvKPg0lG5DUFtu8bp65lJ5fmUdPRgDnU RB+IsPRDescILVhutCol5uz0k4ck6427TT6H42c/dr340TeqsHcGezuSadtAEu50 CLrG5Xc/A72qdW5C0Z8TRo/9SsY0aqUj6CVbOnsRfZM7DA863svv5oIyjTLrN96X urXIdD7mqosyGoXSWN73ee3T+vWx4SbG+sKBN9ijyvbBeBqqSe/jX5gOwIXexNPL SY60NVmbxiL8wgMEoGXkeCjZk5yNAC+SCHPs3J0+BY8DKf+ddwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9BV0vRywKKQZsKGnXssnuK6VjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGQ5OTQ3YmMtMjkxNC0z M2ZjLThmMjMtYThjM2VmMzcwZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbAKKJE9RzekffhMIcOEUqxMTPcHmC5zj/hnUIyB/mg7+quBeyfSG3y 7n8aXZpjcGHPh5S8T7BF+GTRDOhjkWyNug+ucYpz9n3iA2mf9FlbVjy30QWCcaEr tQ8QM7m97dNgUJ1tM82t3OIIxdlb84YYzElJIBuU8Ut0JIEMnpv6EjsPHnJfhlku zdamUHjnshgaMCR0i1rGbhAm7FoKFxo1TUiBzVlobiOga0ltIsfjQFI0tTHZnDGi VyUMNZCaRiNjZKhZi5Akigff7x0+9PuGNN0j9Go67/5mBcvHf588JUdcvonekrfq S37HUTezt8CLRiIjboUduic/ocNw4Rc= -----END CERTIFICATE-----Generated at Fri Aug 8 10:17:45 2025 by rpki-client