$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21a26e5f-b851-38fd-ae8b-596ac811a22c.roa File: 21a26e5f-b851-38fd-ae8b-596ac811a22c.roa (raw, json) Hash identifier: KcN0xQ+cYlzgGlIKmn7e0XV81sNCAtCtVX/mgG7+AYs= Subject key identifier: 2E:DA:87:F9:25:BE:45:C5:0F:AE:26:45:98:30:CD:56:DF:5D:00:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366AB6C50B62A94547D480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21a26e5f-b851-38fd-ae8b-596ac811a22c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.197.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6a:b6:c5:0b:62:a9:45:47:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f7590478-8e06-4223-b9fa-5813d2520be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:57:84:e7:59:b4:a9:af:e4:51:a6:72:ab: 94:f6:61:6d:ac:75:ff:3c:61:54:f4:f7:34:74:22: 62:fd:16:e6:aa:3e:96:d6:1b:68:50:e1:15:4f:3a: 48:75:ee:46:54:33:8b:56:22:85:cb:ed:14:6b:9d: 6d:4e:34:1c:af:32:c4:12:89:7b:e3:13:4a:9f:7f: fc:2d:dd:09:31:67:02:60:5b:2a:e0:db:6e:11:7e: 7b:11:9a:3d:e6:a3:e6:6a:34:9b:60:15:b6:48:a3: bd:f6:69:dd:4f:65:89:65:3b:91:50:44:29:79:0f: 3c:28:88:f8:5f:de:35:c3:ba:62:24:39:8c:27:cd: 91:a4:53:a8:86:6a:3b:cd:b5:ef:21:7a:93:a4:6e: c8:1c:d4:4c:80:4a:55:da:e6:a9:fb:5c:19:ba:1d: 14:3e:d1:0f:ea:ea:d7:4e:30:42:1c:1c:cd:b2:0a: 83:90:4f:06:16:63:13:cb:c2:fc:74:8b:8a:be:d6: 98:91:75:9e:fe:86:ec:90:1b:f9:59:69:56:81:f3: 6b:93:ff:86:83:87:d6:27:8d:1c:e8:2c:c5:ad:71: da:19:f8:31:30:22:2e:5d:cc:93:1d:bb:02:56:3d: 21:4f:1c:04:d5:d7:45:67:ac:ed:83:d0:87:ad:0e: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:87:F9:25:BE:45:C5:0F:AE:26:45:98:30:CD:56:DF:5D:00:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21a26e5f-b851-38fd-ae8b-596ac811a22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2d:2d:25:c4:7d:36:b3:10:eb:7a:62:46:d5:13:b9:19:98: f4:13:e8:0f:27:e8:91:89:c0:fa:f7:bf:cd:b9:69:c7:b0:35: 20:bb:ae:25:96:b7:2a:1c:2c:2f:5e:d2:c6:31:7d:8f:58:13: 24:df:83:d3:60:e6:78:c0:2c:f0:45:f4:96:22:a6:d8:76:b0: 3f:c6:07:b4:0b:38:6e:2c:00:bd:3a:76:d6:63:21:53:8a:a9: 52:41:82:ec:b8:26:04:a4:cd:3a:b1:f7:d6:bd:9a:41:0c:ec: f5:c2:12:a0:68:a3:b3:3a:2a:5a:c1:f1:4b:6c:d0:49:c7:56: 5f:c5:bc:c8:25:70:fb:2c:bc:a4:5c:6c:1a:87:b9:fd:fb:a7: 2b:47:ca:86:80:ad:13:9d:00:18:5e:98:45:ff:e5:2a:3a:55: a6:93:03:4e:68:0c:23:ea:04:7f:52:bc:9c:f7:4a:60:7b:28: fd:5f:b3:d6:81:25:76:0f:ee:5d:c0:d5:64:41:d4:2a:c2:e0: 92:e0:71:23:09:de:a2:ed:6b:48:df:63:12:46:da:c3:90:ae: 0f:7f:5a:b6:bd:65:49:d4:f4:23:2c:8a:b6:72:b3:ab:45:6b: 80:18:10:00:f4:5f:d4:12:3b:9c:ef:94:36:34:36:40:7b:ac: 4a:8f:05:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmq2xQtiqUVH1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Zjc1OTA0NzgtOGUwNi00MjIzLWI5ZmEtNTgxM2QyNTIwYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeFXhOdZtKmv5FGmcquU9mFtrHX/PGFU9Pc0 dCJi/Rbmqj6W1htoUOEVTzpIde5GVDOLViKFy+0Ua51tTjQcrzLEEol74xNKn3/8 Ld0JMWcCYFsq4NtuEX57EZo95qPmajSbYBW2SKO99mndT2WJZTuRUEQpeQ88KIj4 X941w7piJDmMJ82RpFOohmo7zbXvIXqTpG7IHNRMgEpV2uap+1wZuh0UPtEP6urX TjBCHBzNsgqDkE8GFmMTy8L8dIuKvtaYkXWe/obskBv5WWlWgfNrk/+Gg4fWJ40c 6CzFrXHaGfgxMCIuXcyTHbsCVj0hTxwE1ddFZ6ztg9CHrQ55xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7ah/klvkXFD64mRZgwzVbfXQCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFhMjZlNWYtYjg1MS0z OGZkLWFlOGItNTk2YWM4MTFhMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8tLSXEfTazEOt6YkbVE7kZmPQT6A8n6JGJwPr3v825acewNSC7riWW tyocLC9e0sYxfY9YEyTfg9Ng5njALPBF9JYipth2sD/GB7QLOG4sAL06dtZjIVOK qVJBguy4JgSkzTqx99a9mkEM7PXCEqBoo7M6KlrB8Uts0EnHVl/FvMglcPssvKRc bBqHuf37pytHyoaArROdABhemEX/5So6VaaTA05oDCPqBH9SvJz3SmB7KP1fs9aB JXYP7l3A1WRB1CrC4JLgcSMJ3qLta0jfYxJG2sOQrg9/Wra9ZUnU9CMsirZys6tF a4AYEAD0X9QSO5zvlDY0NkB7rEqPBdg= -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:38 2025 by rpki-client