$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123b8d52-3a31-3ba9-b4df-e9c50d3963e7.roa File: 123b8d52-3a31-3ba9-b4df-e9c50d3963e7.roa (raw, json) Hash identifier: pC5FaX6Lu93b89nb3sZC8m1mPE2xNNzGVGr7Rq9v8YM= Subject key identifier: 07:7E:13:6C:52:F9:C4:F9:25:9F:F9:D7:3D:20:44:12:EE:73:72:0F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366E516EEEB5AD70F70E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123b8d52-3a31-3ba9-b4df-e9c50d3963e7.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6e:51:6e:ee:b5:ad:70:f7:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=1a8bc842-9568-43e0-91ef-768c2be7ba0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1e:3b:22:3d:03:e7:9d:89:fe:73:54:0e:2f: 0f:6d:c2:44:dc:b5:10:39:2d:70:43:d3:2f:17:00: 0c:f3:8d:17:38:5a:f8:73:a9:0f:67:7c:2c:37:10: 72:00:77:ce:2f:bc:3b:19:bc:01:f5:48:c3:4f:31: 0a:7c:72:d3:38:32:0d:0c:01:4a:b7:0e:c0:9a:92: 5e:c1:e4:75:08:ef:7e:bc:94:7d:dd:62:9c:2e:4b: 5c:86:b0:58:85:ba:b9:cf:aa:1c:f8:e1:48:7d:8a: 87:41:3a:cb:20:92:70:52:4b:a7:ce:e6:75:ca:83: da:76:3f:d4:c5:e1:f8:40:23:75:7b:bd:24:3b:25: d8:ef:4c:c0:c8:a4:8e:03:2a:e5:03:60:a4:36:01: b5:50:8a:cb:da:3d:f2:36:5a:25:b4:f4:64:63:5c: a9:80:0c:aa:5f:0b:d8:6a:16:3f:6d:75:39:24:1e: 6a:80:7d:4d:11:21:82:fa:59:07:f3:86:22:ae:66: 4d:8c:61:6e:11:32:f3:5b:41:fc:a3:98:d4:dd:c2: 50:f6:5b:2c:ac:c8:8c:55:f4:c3:94:59:f2:e4:83: b4:f1:8b:dc:29:35:e7:b6:a5:80:71:95:5d:bc:00: 95:31:44:d7:7b:f8:4e:4d:ba:dc:44:fd:b6:f7:a2: 51:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7E:13:6C:52:F9:C4:F9:25:9F:F9:D7:3D:20:44:12:EE:73:72:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123b8d52-3a31-3ba9-b4df-e9c50d3963e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:4f:ad:d1:12:dd:30:2f:d5:18:9d:c4:af:04:38:74:bc:47: ab:84:b3:c8:7b:a3:bb:6e:7c:fc:3c:d5:d5:9d:7d:fb:cc:6e: 16:b5:aa:d7:fe:8e:f2:87:d4:93:85:d1:63:56:97:6b:f5:24: 24:8b:e7:92:2d:7a:41:d6:4e:2d:8a:fe:d5:04:7d:95:db:7e: 1d:fd:2f:26:81:b3:45:c9:cf:4d:31:ae:40:3b:e7:fe:84:f0: dd:b3:0a:71:da:c7:32:9c:d6:2c:b4:d5:9c:53:64:3f:42:92: b3:55:f9:90:20:3e:c6:d3:f6:85:42:8c:f5:c4:12:aa:ed:3c: 5c:6a:63:3a:ee:de:3b:a9:f5:73:8e:0e:56:52:4a:62:d8:1e: 37:46:54:94:7f:a9:7f:da:73:e3:77:a8:80:60:20:cd:55:39: 35:97:ca:7e:31:df:0b:a5:a8:95:1c:22:a2:18:a3:09:72:a3: 6b:b5:dd:a3:a0:dc:a6:d0:69:24:ed:f4:4e:a8:12:c3:fd:ef: 4f:cd:c8:24:1a:ca:a2:04:0a:57:85:d3:f1:bb:77:e5:ad:7c: 94:62:ac:79:a6:5b:ba:9a:10:2f:6f:45:3d:0d:b7:db:eb:9d: 5b:9e:cc:0c:7b:40:35:59:58:0a:b4:16:d7:f5:91:1b:89:19: 58:81:fb:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNm5Rbu61rXD3DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MWE4YmM4NDItOTU2OC00M2UwLTkxZWYtNzY4YzJiZTdiYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B47Ij0D552J/nNUDi8PbcJE3LUQOS1wQ9Mv FwAM840XOFr4c6kPZ3wsNxByAHfOL7w7GbwB9UjDTzEKfHLTODINDAFKtw7AmpJe weR1CO9+vJR93WKcLktchrBYhbq5z6oc+OFIfYqHQTrLIJJwUkunzuZ1yoPadj/U xeH4QCN1e70kOyXY70zAyKSOAyrlA2CkNgG1UIrL2j3yNloltPRkY1ypgAyqXwvY ahY/bXU5JB5qgH1NESGC+lkH84YirmZNjGFuETLzW0H8o5jU3cJQ9lssrMiMVfTD lFny5IO08YvcKTXntqWAcZVdvACVMUTXe/hOTbrcRP2296JRWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAd+E2xS+cT5JZ/51z0gRBLuc3IPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIzYjhkNTItM2EzMS0z YmE5LWI0ZGYtZTljNTBkMzk2M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBPrdES3TAv1RidxK8EOHS8R6uEs8h7o7tufPw81dWdffvMbha1qtf+ jvKH1JOF0WNWl2v1JCSL55ItekHWTi2K/tUEfZXbfh39LyaBs0XJz00xrkA75/6E 8N2zCnHaxzKc1iy01ZxTZD9CkrNV+ZAgPsbT9oVCjPXEEqrtPFxqYzru3jup9XOO DlZSSmLYHjdGVJR/qX/ac+N3qIBgIM1VOTWXyn4x3wulqJUcIqIYowlyo2u13aOg 3KbQaSTt9E6oEsP970/NyCQayqIECleF0/G7d+WtfJRirHmmW7qaEC9vRT0Nt9vr nVuezAx7QDVZWAq0Ftf1kRuJGViB++g= -----END CERTIFICATE-----Generated at Wed Aug 6 13:11:38 2025 by rpki-client