$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/213f39f7-e151-3c11-8d49-8581e8732522.roa File: 213f39f7-e151-3c11-8d49-8581e8732522.roa (raw, json) Hash identifier: BMqdfRjYSr2bO42HTpLnEBz3P6WyyDa9O0emjaYkYhA= Subject key identifier: 00:01:67:ED:91:6D:2C:E6:75:BB:DB:B9:79:28:A2:5A:74:6E:E5:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963674DC87186B9C1830BF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/213f39f7-e151-3c11-8d49-8581e8732522.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:74:dc:87:18:6b:9c:18:30:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=812a6330-17c4-419d-b8b2-a5ecebfda42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:d5:ff:b0:2a:48:33:fd:b3:cb:d0:63:aa: b3:65:24:f7:9d:1b:5b:97:3f:69:55:72:f2:bb:c3: fc:a7:b0:ef:30:8f:f9:e7:12:b6:11:ab:7e:03:f2: 02:e0:4c:73:c1:b5:c9:92:31:61:8e:7f:06:cd:89: 77:0e:30:1d:e0:e0:b1:8d:c6:24:8f:b2:31:fd:31: 96:97:8f:2a:ca:83:aa:5d:0e:bf:68:83:e5:d2:c7: fd:9b:02:75:97:12:b4:b7:af:bf:45:2a:09:8c:bf: cb:a2:f9:06:c9:ee:3f:4e:79:0f:08:1f:f7:b5:02: 91:48:f9:83:47:24:d1:b8:f7:c4:c6:29:02:48:71: ce:77:48:2d:91:87:fb:f8:a5:62:0a:47:eb:6a:5d: 2e:cf:0f:a6:fa:9b:4a:dc:f3:88:f6:ec:ad:93:03: 19:35:a6:f8:79:f3:97:86:b8:fe:d9:b3:12:bd:50: f4:b5:e9:ae:cd:20:53:cd:9b:6e:01:10:2b:f4:fb: 6c:bc:6b:37:eb:7f:00:61:f1:68:e8:5b:62:b3:d3: 94:e1:4f:2d:4d:3d:35:95:6d:d7:4d:74:d5:b6:d0: e7:27:cd:bb:b4:d1:2e:fb:0e:7f:9b:01:dd:1e:ac: da:15:c4:8a:8d:ef:0a:4e:e7:39:60:e3:50:ef:4b: 93:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:01:67:ED:91:6D:2C:E6:75:BB:DB:B9:79:28:A2:5A:74:6E:E5:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/213f39f7-e151-3c11-8d49-8581e8732522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:25:45:0d:5b:53:f2:57:a8:c0:9b:e8:08:6a:bc:d6:e8:37: 30:93:a1:55:35:d5:99:2e:65:43:e8:b3:32:42:b1:d4:db:14: cc:7b:3c:b6:71:19:79:29:3f:b7:22:cb:36:2e:e4:66:bb:44: d8:e7:f7:ae:cc:5e:c9:53:f8:79:ad:f5:75:6b:ec:98:22:00: 6d:83:2d:ac:0d:67:bb:11:8c:dd:fb:a1:54:0a:ea:b0:6f:a0: 7d:fd:75:df:a3:32:8d:7b:48:e3:50:c8:e5:6b:5b:ed:6f:f3: e6:de:28:d3:51:0b:d8:08:be:e4:2c:b0:d6:20:8e:b8:23:f9: 08:65:e8:18:74:aa:ae:3e:47:9b:49:66:9d:66:25:04:65:ba: cd:c6:cd:a6:b7:96:26:17:c8:44:2b:bc:0e:37:64:9a:a8:6f: e7:02:79:be:dc:98:8f:94:e9:24:09:44:4a:95:38:9d:10:40: 73:d7:f3:6d:fd:c6:a7:dc:c1:f7:73:c9:30:32:cd:cd:c6:d4: 02:de:a7:21:0b:d7:a0:f1:67:57:75:f9:4e:74:aa:88:ba:41: 90:39:1c:0b:82:77:7d:a5:43:a2:0c:16:c5:af:03:a7:c2:7a: b0:fb:8b:45:70:76:32:4b:6b:dd:13:9e:63:d7:e2:cf:4b:cd: ab:d1:83:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnTchxhrnBgwv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODEyYTYzMzAtMTdjNC00MTlkLWI4YjItYTVlY2ViZmRhNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtDV/7AqSDP9s8vQY6qzZST3nRtblz9pVXLy u8P8p7DvMI/55xK2Eat+A/IC4ExzwbXJkjFhjn8GzYl3DjAd4OCxjcYkj7Ix/TGW l48qyoOqXQ6/aIPl0sf9mwJ1lxK0t6+/RSoJjL/LovkGye4/TnkPCB/3tQKRSPmD RyTRuPfExikCSHHOd0gtkYf7+KViCkfral0uzw+m+ptK3POI9uytkwMZNab4efOX hrj+2bMSvVD0temuzSBTzZtuARAr9PtsvGs3638AYfFo6Ftis9OU4U8tTT01lW3X TXTVttDnJ827tNEu+w5/mwHdHqzaFcSKje8KTuc5YONQ70uTqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAABZ+2RbSzmdbvbuXkoolp0buUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjEzZjM5ZjctZTE1MS0z YzExLThkNDktODU4MWU4NzMyNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGclRQ1bU/JXqMCb6AhqvNboNzCToVU11ZkuZUPoszJCsdTbFMx7PLZx GXkpP7ciyzYu5Ga7RNjn967MXslT+Hmt9XVr7JgiAG2DLawNZ7sRjN37oVQK6rBv oH39dd+jMo17SONQyOVrW+1v8+beKNNRC9gIvuQssNYgjrgj+Qhl6Bh0qq4+R5tJ Zp1mJQRlus3Gzaa3liYXyEQrvA43ZJqob+cCeb7cmI+U6SQJREqVOJ0QQHPX8239 xqfcwfdzyTAyzc3G1ALepyEL16DxZ1d1+U50qoi6QZA5HAuCd32lQ6IMFsWvA6fC erD7i0VwdjJLa90TnmPX4s9LzavRg+A= -----END CERTIFICATE-----Generated at Fri Aug 8 19:30:11 2025 by rpki-client