$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dcf7bf-46e6-325f-8492-b033a693d4aa.roa File: 28dcf7bf-46e6-325f-8492-b033a693d4aa.roa (raw, json) Hash identifier: fyVgvUqqFWFmZLBt2hRJ4xL4HMJXS+0tB0vn30gktWM= Subject key identifier: B3:59:78:2D:88:D5:78:DF:10:2F:59:E3:EC:09:F5:17:AA:8D:84:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366F38DD552775D7233EA8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dcf7bf-46e6-325f-8492-b033a693d4aa.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6f:38:dd:55:27:75:d7:23:3e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=20b76939-2107-4ee8-8ba0-d02cc6538b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:c1:08:b5:d8:24:a6:ac:8f:f2:97:c5:0e: 0f:9e:33:bf:54:42:10:91:c7:82:10:eb:9f:f0:29: e4:34:ce:26:43:18:7c:3e:f4:ff:68:53:1c:08:17: 69:d3:e1:aa:19:8a:3a:55:2c:84:dd:bb:df:7f:29: b3:3b:2f:63:d8:50:22:1e:d1:3b:00:16:7b:7a:84: b3:3b:fb:dd:ed:6b:15:0b:38:34:13:56:c2:13:ed: b3:25:a1:1e:8d:8d:cd:bc:23:f6:d5:8e:1c:05:68: 24:9a:09:8d:10:c5:19:c7:01:3d:b1:91:ff:9c:e6: 60:8a:11:cb:9a:50:85:48:b1:00:67:92:51:83:64: 70:9d:af:0a:ad:40:ae:67:9d:83:19:b8:d1:60:3d: 71:62:4e:1a:f9:6c:80:66:9d:9d:7d:7a:0f:97:42: 2e:f6:83:be:12:fb:c4:89:6b:48:eb:c6:ee:56:f3: e6:e0:ad:6b:41:e8:ba:c0:9e:2d:70:a3:30:af:97: 72:9c:51:4d:4c:7a:11:63:da:59:4a:20:73:05:ff: 2e:18:3d:ea:b8:03:a8:66:e4:58:42:19:94:7a:80: f1:c2:8c:e9:33:a9:99:33:fe:0b:8f:68:d8:fc:2b: 64:6b:20:cb:3e:e1:1c:3e:75:fb:2a:48:7f:dc:4f: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:59:78:2D:88:D5:78:DF:10:2F:59:E3:EC:09:F5:17:AA:8D:84:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dcf7bf-46e6-325f-8492-b033a693d4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:42:45:f5:09:47:4e:2d:36:4a:b3:54:b4:c1:ff:3e:b1:b5: e1:e4:61:ef:03:ff:dd:d0:56:15:38:c6:b7:1b:68:b6:c0:3b: 2c:a7:9d:eb:88:e2:b1:a1:5e:51:0a:e2:f0:6e:54:b5:59:84: 84:8e:4b:10:c9:8d:6e:dd:72:e2:83:26:8b:d0:fc:43:f0:75: c7:68:43:7b:30:59:62:55:8e:d4:6b:9a:42:9b:3c:d5:63:ce: 6d:60:27:bd:3f:e4:f4:1d:60:d1:47:6e:99:55:f2:68:00:a4: 4f:50:a3:e3:0b:af:81:3a:32:59:85:1b:83:94:45:10:d3:52: dc:7e:14:54:ef:76:0b:4d:d8:f9:6a:27:fb:cf:7d:22:82:3d: 69:a9:24:6a:a6:5a:08:2d:fa:4b:45:1c:e6:c1:1c:85:0d:ae: 63:bb:6d:16:01:09:b4:c4:0e:f2:3c:69:9b:3f:f0:fd:09:93: fe:e2:a3:42:a4:a2:4e:99:6a:13:67:79:29:6d:d1:2d:5e:aa: 11:c5:0d:2c:26:6c:23:7b:80:13:c4:0f:13:b1:65:8e:1f:71: 9d:c7:b8:bb:26:21:de:a6:45:e7:f1:01:3a:27:b6:6f:35:cf: 74:bd:64:47:ca:72:5d:0a:41:4f:c5:96:8e:d7:9c:82:3c:5a: a1:b7:15:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNm843VUnddcjPqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MjBiNzY5MzktMjEwNy00ZWU4LThiYTAtZDAyY2M2NTM4YjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFzBCLXYJKasj/KXxQ4PnjO/VEIQkceCEOuf 8CnkNM4mQxh8PvT/aFMcCBdp0+GqGYo6VSyE3bvffymzOy9j2FAiHtE7ABZ7eoSz O/vd7WsVCzg0E1bCE+2zJaEejY3NvCP21Y4cBWgkmgmNEMUZxwE9sZH/nOZgihHL mlCFSLEAZ5JRg2Rwna8KrUCuZ52DGbjRYD1xYk4a+WyAZp2dfXoPl0Iu9oO+EvvE iWtI68buVvPm4K1rQei6wJ4tcKMwr5dynFFNTHoRY9pZSiBzBf8uGD3quAOoZuRY QhmUeoDxwozpM6mZM/4Lj2jY/CtkayDLPuEcPnX7Kkh/3E8y4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNZeC2I1XjfEC9Z4+wJ9ReqjYQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhkY2Y3YmYtNDZlNi0z MjVmLTg0OTItYjAzM2E2OTNkNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5CRfUJR04tNkqzVLTB/z6xteHkYe8D/93QVhU4xrcbaLbAOyynneuI 4rGhXlEK4vBuVLVZhISOSxDJjW7dcuKDJovQ/EPwdcdoQ3swWWJVjtRrmkKbPNVj zm1gJ70/5PQdYNFHbplV8mgApE9Qo+MLr4E6MlmFG4OURRDTUtx+FFTvdgtN2Plq J/vPfSKCPWmpJGqmWggt+ktFHObBHIUNrmO7bRYBCbTEDvI8aZs/8P0Jk/7io0Kk ok6ZahNneSlt0S1eqhHFDSwmbCN7gBPEDxOxZY4fcZ3HuLsmId6mRefxATontm81 z3S9ZEfKcl0KQU/Flo7XnII8WqG3Fd8= -----END CERTIFICATE-----Generated at Sat Aug 9 03:03:34 2025 by rpki-client