$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20c9a334-de10-3b1c-af93-acf1555b93d1.roa File: 20c9a334-de10-3b1c-af93-acf1555b93d1.roa (raw, json) Hash identifier: PCtY0fVPusdwzZATJRaaYaY6Mbk4WTyV7HDOtm5JAZY= Subject key identifier: 3E:A4:87:84:4F:56:DD:34:85:78:C9:74:CF:39:2E:96:1A:77:AC:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366B11450C74452B122B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20c9a334-de10-3b1c-af93-acf1555b93d1.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.197.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6b:11:45:0c:74:45:2b:12:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=83b8e968-2935-4e7d-a14c-39395d39ed13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:b2:b8:10:0a:e2:44:8a:3b:ea:9e:51:79: f7:24:cd:19:19:53:49:8b:05:c6:5a:80:56:8d:92: 15:02:db:83:64:b1:f6:46:eb:e6:98:14:a7:db:0a: eb:d9:0a:45:04:31:f5:e8:e2:29:8d:33:f8:d6:bc: fa:8a:1c:0f:1c:2c:fb:52:68:17:e3:46:e6:d9:6c: 9e:07:79:97:7d:a5:5d:23:1f:2e:7c:ef:35:41:d7: 66:3a:13:dd:9d:40:12:cc:90:33:c6:93:f2:46:e4: bc:a4:95:f2:e6:56:81:bd:f6:a5:8b:d5:64:1a:99: f6:41:6c:06:e1:6a:29:4a:83:31:ed:0c:bf:ee:c0: 6b:08:88:04:ea:74:07:86:3c:2d:8e:f9:e1:2c:2e: fe:3b:1b:14:ac:c3:8f:59:ee:3a:1a:5e:8e:86:42: 87:b9:75:23:2a:27:82:bc:e3:dc:5b:85:3d:cd:2f: c6:78:36:32:9e:ff:36:5a:3f:ff:70:2f:f1:17:21: da:a4:5c:8e:55:b3:fe:04:74:34:10:a6:70:bf:c8: f4:ae:a9:c5:41:5c:a2:5a:d9:81:c1:e5:2e:b4:e3: 81:90:92:9d:52:9b:09:d1:8b:2c:20:6b:f6:0c:60: bf:58:4f:26:c8:35:79:40:f7:be:77:0e:2a:7b:44: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:87:84:4F:56:DD:34:85:78:C9:74:CF:39:2E:96:1A:77:AC:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20c9a334-de10-3b1c-af93-acf1555b93d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:06:5e:ca:0b:ee:70:cc:eb:27:80:1b:36:6b:bd:33:a0:35: f0:7d:bb:a5:17:eb:a3:77:8d:7e:c5:bc:cd:60:39:0d:df:93: a0:a9:38:94:0d:ae:5a:ac:86:0a:3b:15:be:26:10:10:e9:cb: a1:85:6f:41:f4:61:72:2c:b8:70:88:ee:b5:ad:e0:58:62:b8: bd:87:fe:95:5f:61:84:d4:87:68:81:30:c8:d1:ce:61:e5:c4: 78:91:c6:b6:59:03:b7:fe:76:c0:27:b2:1f:4b:ae:58:d1:c3: dc:3d:9d:fe:4d:7e:99:73:b8:f5:b2:ac:5a:f6:ba:21:85:7a: 0b:01:21:7d:2a:6c:14:fb:d8:01:97:28:ed:87:ca:b0:d8:ef: 5c:4f:24:91:42:be:04:5e:18:3e:1b:e3:0e:12:c9:5b:1e:4f: 8f:18:ba:54:a6:fd:cd:5f:1f:6c:f5:16:d8:93:0c:4f:22:35: 92:b3:39:f7:3f:ee:40:ca:1f:b3:14:e4:05:18:0a:54:dd:3b: c2:85:48:4f:0e:6f:17:30:0d:c0:47:c1:b2:ba:6e:ec:64:b0: 11:8b:e4:23:53:27:dc:5b:3c:21:27:5d:ee:3a:47:94:95:f5: e9:c2:87:fe:f4:56:47:6c:84:33:66:4d:50:f7:04:05:10:70: 45:b6:ca:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmsRRQx0RSsSKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODNiOGU5NjgtMjkzNS00ZTdkLWExNGMtMzkzOTVkMzllZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKyyuBAK4kSKO+qeUXn3JM0ZGVNJiwXGWoBW jZIVAtuDZLH2RuvmmBSn2wrr2QpFBDH16OIpjTP41rz6ihwPHCz7UmgX40bm2Wye B3mXfaVdIx8ufO81QddmOhPdnUASzJAzxpPyRuS8pJXy5laBvfali9VkGpn2QWwG 4WopSoMx7Qy/7sBrCIgE6nQHhjwtjvnhLC7+OxsUrMOPWe46Gl6OhkKHuXUjKieC vOPcW4U9zS/GeDYynv82Wj//cC/xFyHapFyOVbP+BHQ0EKZwv8j0rqnFQVyiWtmB weUutOOBkJKdUpsJ0YssIGv2DGC/WE8myDV5QPe+dw4qe0Sc+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6kh4RPVt00hXjJdM85LpYad6ysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjBjOWEzMzQtZGUxMC0z YjFjLWFmOTMtYWNmMTU1NWI5M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMGXsoL7nDM6yeAGzZrvTOgNfB9u6UX66N3jX7FvM1gOQ3fk6CpOJQN rlqshgo7Fb4mEBDpy6GFb0H0YXIsuHCI7rWt4FhiuL2H/pVfYYTUh2iBMMjRzmHl xHiRxrZZA7f+dsAnsh9LrljRw9w9nf5NfplzuPWyrFr2uiGFegsBIX0qbBT72AGX KO2HyrDY71xPJJFCvgReGD4b4w4SyVseT48YulSm/c1fH2z1FtiTDE8iNZKzOfc/ 7kDKH7MU5AUYClTdO8KFSE8ObxcwDcBHwbK6buxksBGL5CNTJ9xbPCEnXe46R5SV 9enCh/70VkdshDNmTVD3BAUQcEW2yrs= -----END CERTIFICATE-----Generated at Wed Aug 6 06:06:43 2025 by rpki-client