$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b1f831-6c8d-3c93-bae9-39f0db397398.roa File: 29b1f831-6c8d-3c93-bae9-39f0db397398.roa (raw, json) Hash identifier: 7v4Y2wltM8CRvL8f71UflZ1BlMsuAuQX7faboAuMPDU= Subject key identifier: 5D:63:78:0A:6B:86:CB:CF:03:98:AF:D4:9A:C6:CE:48:4C:0A:76:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636726127D54FB42D434E40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b1f831-6c8d-3c93-bae9-39f0db397398.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:72:61:27:d5:4f:b4:2d:43:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ecf1de48-4329-40c9-8cd1-c13f9fa43a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:79:ae:1d:5a:21:82:60:9c:29:17:bf:ac:00: 0d:c6:8a:3a:e8:97:1a:84:4f:1e:44:09:26:93:8e: 77:14:85:7f:b1:a5:4c:dd:b3:39:da:7d:a3:6a:e6: c4:6a:3d:ec:c9:e1:48:b6:51:81:01:70:cd:7e:50: 91:7a:60:63:96:ab:eb:cb:b4:15:1a:37:2d:57:6d: b7:ae:11:88:39:d6:c6:84:8a:c2:84:c0:16:b5:d2: e8:20:1d:2a:f7:89:e6:3f:d9:dd:ba:b1:2d:52:b9: 14:81:d6:d3:68:6d:e7:3f:80:43:1e:50:3a:22:0b: 0c:76:d0:73:ac:04:35:8d:fc:2c:8d:9b:d7:a4:6b: 53:ce:e6:b8:ed:ce:d4:e1:02:ca:5e:26:06:5e:c4: d7:c8:c2:70:9a:cf:f0:9d:8c:0f:c8:e9:b4:e9:89: 96:bc:b7:1e:86:8f:d5:85:3c:3f:db:51:14:29:7a: 6a:d6:12:8f:bc:1e:91:26:c1:3e:5e:b0:9b:32:64: 8f:b7:b8:99:1a:13:9f:94:11:9a:4b:38:45:c9:2a: af:9e:a4:c9:ed:1a:ff:c6:9b:e2:2b:e0:1d:e0:ba: 05:12:19:a4:74:68:9a:15:d2:01:d1:7e:c1:0f:e7: 21:0c:05:34:02:69:23:08:a2:b7:65:99:43:c0:88: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:63:78:0A:6B:86:CB:CF:03:98:AF:D4:9A:C6:CE:48:4C:0A:76:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b1f831-6c8d-3c93-bae9-39f0db397398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f5:9b:9c:43:3a:3d:2e:91:70:9a:0e:96:ef:5e:14:b1:b5: 2b:df:8b:c8:3d:21:eb:9c:c8:d9:d4:6c:e3:8e:1b:5a:1f:dd: 51:b7:56:5b:44:30:51:34:dd:ea:80:fd:72:78:66:05:24:1e: 88:87:20:d1:80:a8:51:9f:7d:6a:69:da:98:8c:e6:ea:04:6d: 96:55:46:30:57:cb:79:ab:db:1d:b1:88:79:2b:b2:ce:f2:da: fe:ee:ce:ff:d0:ea:6a:2a:eb:a0:5c:ca:88:52:56:2e:1b:bf: 9b:ad:7a:57:fd:02:5b:d2:dd:8e:2a:35:f5:e7:23:9b:a3:58: 20:bc:98:60:7e:6d:2b:c5:e3:a6:86:dc:01:9d:40:8c:47:b7: 23:8d:6b:9d:69:6b:ba:81:97:77:47:bf:ca:32:ce:52:21:a4: 2d:65:a3:69:53:9c:75:fa:7e:e0:15:24:5b:a4:88:92:f5:db: d0:4a:63:cb:5d:23:c4:d9:87:e1:07:0e:34:ab:48:a6:87:fe: 6f:e6:1e:cd:c2:27:21:40:ab:66:54:92:e7:db:55:91:1e:fb: a8:d6:49:44:82:ce:74:f9:19:9a:8c:1b:ea:ec:7c:e9:25:97: 13:94:df:d8:e5:2a:ff:2a:bd:04:b8:c5:14:85:61:d1:4e:d3: 58:a3:9c:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnJhJ9VPtC1DTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWNmMWRlNDgtNDMyOS00MGM5LThjZDEtYzEzZjlmYTQzYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHmuHVohgmCcKRe/rAANxoo66JcahE8eRAkm k453FIV/saVM3bM52n2jaubEaj3syeFItlGBAXDNflCRemBjlqvry7QVGjctV223 rhGIOdbGhIrChMAWtdLoIB0q94nmP9ndurEtUrkUgdbTaG3nP4BDHlA6IgsMdtBz rAQ1jfwsjZvXpGtTzua47c7U4QLKXiYGXsTXyMJwms/wnYwPyOm06YmWvLceho/V hTw/21EUKXpq1hKPvB6RJsE+XrCbMmSPt7iZGhOflBGaSzhFySqvnqTJ7Rr/xpvi K+Ad4LoFEhmkdGiaFdIB0X7BD+chDAU0AmkjCKK3ZZlDwIiPyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1jeAprhsvPA5iv1JrGzkhMCnapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjliMWY4MzEtNmM4ZC0z YzkzLWJhZTktMzlmMGRiMzk3Mzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL1m5xDOj0ukXCaDpbvXhSxtSvfi8g9IeucyNnUbOOOG1of3VG3VltE MFE03eqA/XJ4ZgUkHoiHINGAqFGffWpp2piM5uoEbZZVRjBXy3mr2x2xiHkrss7y 2v7uzv/Q6moq66BcyohSVi4bv5utelf9AlvS3Y4qNfXnI5ujWCC8mGB+bSvF46aG 3AGdQIxHtyONa51pa7qBl3dHv8oyzlIhpC1lo2lTnHX6fuAVJFukiJL129BKY8td I8TZh+EHDjSrSKaH/m/mHs3CJyFAq2ZUkufbVZEe+6jWSUSCznT5GZqMG+rsfOkl lxOU39jlKv8qvQS4xRSFYdFO01ijnA4= -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:19 2025 by rpki-client