$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e3e5c6c-e11b-32e9-bc0f-cdb65dda182c.roa File: 1e3e5c6c-e11b-32e9-bc0f-cdb65dda182c.roa (raw, json) Hash identifier: 56nfJvAl/lsOovLJmWqd2ZzmGLX0Zb5+YnlDZIIxXkw= Subject key identifier: C0:96:20:D6:36:A8:1E:E9:51:7D:71:26:FD:B8:3F:E8:04:7D:E5:E3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366FB841DBD4AC0A94CBA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e3e5c6c-e11b-32e9-bc0f-cdb65dda182c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6f:b8:41:db:d4:ac:0a:94:cb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=39be4153-d978-48d8-b08c-4de6b7efe564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:54:ac:e3:06:6d:24:8f:cd:a5:9d:81:dc: 82:ae:fc:a0:1d:d4:cc:86:50:4f:f8:d4:c1:79:91: 48:0a:66:bd:1a:db:43:7e:df:d6:1b:c0:29:d8:0f: 3c:9f:1a:26:62:81:43:58:70:cc:ef:4d:77:9f:a2: ee:ca:74:ae:7e:0b:40:87:e4:e8:e0:2f:f8:12:c4: 87:e6:4f:87:54:fd:2e:e8:de:b5:8d:3f:ac:44:39: 48:25:a8:5c:a7:c0:4f:1f:a7:73:d1:78:1c:e3:a1: 00:a0:d2:ca:70:d2:03:98:72:60:00:ee:42:98:17: ab:20:2f:ca:86:66:d2:09:be:19:01:a2:20:06:20: ff:68:f2:f4:17:3b:17:f9:3e:bf:d4:03:f7:e8:30: 68:c6:6e:ee:7f:3f:83:e4:07:9b:c6:73:fa:33:27: 21:02:dd:74:0d:50:da:a1:bc:7b:c3:60:2b:11:14: 3f:de:94:ba:0f:31:87:34:6b:75:36:d7:c3:61:18: 32:c8:96:54:34:d9:ba:cd:26:6e:79:25:14:e1:4f: 4d:ec:e4:f7:b4:33:5d:3b:d7:28:b3:a3:81:b6:a7: bb:2d:0c:a5:52:f6:c5:ef:3f:88:cf:d1:58:d8:f8: 46:fa:1e:53:9b:6c:61:a1:0c:1b:9b:9c:b9:3d:21: 63:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:96:20:D6:36:A8:1E:E9:51:7D:71:26:FD:B8:3F:E8:04:7D:E5:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e3e5c6c-e11b-32e9-bc0f-cdb65dda182c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b2:ec:9e:c7:43:73:7d:06:ae:bf:67:ed:7d:33:2f:82:0f: 3f:54:25:2d:6e:bc:57:e3:4d:0d:23:11:b0:0f:13:f5:02:db: c3:a6:2d:bd:51:fb:b9:f4:77:76:b7:5a:c5:66:f5:57:3c:c7: 58:66:23:82:ea:43:7a:5f:13:c9:50:a4:7c:8c:6d:cd:16:e2: 8d:66:12:d3:6e:60:f1:40:72:87:48:ca:fb:aa:b9:a0:1f:6e: 18:da:29:89:2b:c3:eb:89:5c:c2:aa:b8:d2:b0:b4:30:e1:53: 70:a0:96:1e:42:50:5b:59:90:d0:88:69:11:eb:f8:20:d0:fa: d7:11:ff:e8:8e:cc:7f:1a:5f:54:61:a8:ed:dc:92:54:ee:22: 63:69:a9:ef:a0:0e:18:1c:67:78:58:82:bc:d1:db:58:a1:fb: 81:d3:46:25:90:c6:3c:17:54:77:64:b2:e2:c4:d5:18:33:ef: 4b:bd:c8:a9:ce:eb:b6:5b:47:00:27:88:ad:59:41:f5:ab:7e: e5:6b:ec:90:a0:41:71:cf:7d:22:de:ed:97:ba:ac:42:b2:1d: e5:39:93:ba:f7:42:ed:30:ea:8f:34:ed:62:ca:f4:20:92:3b: 17:81:e3:0b:83:74:6f:cf:3e:5d:bd:91:0c:eb:da:8c:74:aa: 86:d0:53:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNm+4QdvUrAqUy6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzliZTQxNTMtZDk3OC00OGQ4LWIwOGMtNGRlNmI3ZWZlNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjpUrOMGbSSPzaWdgdyCrvygHdTMhlBP+NTB eZFICma9GttDft/WG8Ap2A88nxomYoFDWHDM7013n6LuynSufgtAh+To4C/4EsSH 5k+HVP0u6N61jT+sRDlIJahcp8BPH6dz0Xgc46EAoNLKcNIDmHJgAO5CmBerIC/K hmbSCb4ZAaIgBiD/aPL0FzsX+T6/1AP36DBoxm7ufz+D5AebxnP6MychAt10DVDa obx7w2ArERQ/3pS6DzGHNGt1NtfDYRgyyJZUNNm6zSZueSUU4U9N7OT3tDNdO9co s6OBtqe7LQylUvbF7z+Iz9FY2PhG+h5Tm2xhoQwbm5y5PSFj2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCWINY2qB7pUX1xJv24P+gEfeXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWUzZTVjNmMtZTExYi0z MmU5LWJjMGYtY2RiNjVkZGExODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMeiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKay7J7HQ3N9Bq6/Z+19My+CDz9UJS1uvFfjTQ0jEbAPE/UC28OmLb1R +7n0d3a3WsVm9Vc8x1hmI4LqQ3pfE8lQpHyMbc0W4o1mEtNuYPFAcodIyvuquaAf bhjaKYkrw+uJXMKquNKwtDDhU3Cglh5CUFtZkNCIaRHr+CDQ+tcR/+iOzH8aX1Rh qO3cklTuImNpqe+gDhgcZ3hYgrzR21ih+4HTRiWQxjwXVHdksuLE1Rgz70u9yKnO 67ZbRwAniK1ZQfWrfuVr7JCgQXHPfSLe7Ze6rEKyHeU5k7r3Qu0w6o807WLK9CCS OxeB4wuDdG/PPl29kQzr2ox0qobQU+A= -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:35 2025 by rpki-client