$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2bed6696-8872-3356-a45a-3f62bdf208c7.roa File: 2bed6696-8872-3356-a45a-3f62bdf208c7.roa (raw, json) Hash identifier: MHTl+yisrxG+26LI1/lV+7kbrVtxUlycSWZd7aM3RGU= Subject key identifier: 0A:CB:15:72:85:09:00:1F:25:A3:4F:34:F6:DF:B0:DF:1C:34:CB:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364A2171432E82C22D2980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2bed6696-8872-3356-a45a-3f62bdf208c7.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.218.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4a:21:71:43:2e:82:c2:2d:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f93b3407-4dec-4bdd-9965-66cc9204f474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:05:2b:1f:ed:6c:53:14:eb:0f:cc:ed:f5: b7:06:5e:72:0d:28:7b:88:1e:7a:0c:29:a9:e4:b9: e5:91:97:c2:64:a6:26:3f:a1:88:bf:63:18:da:17: c5:24:4d:0b:65:de:3f:dd:82:9a:0d:c8:e1:54:38: 66:cc:49:20:46:80:0c:2e:a2:2c:c6:91:2c:6a:1c: a0:3a:50:ed:c0:4e:bc:ed:e7:96:46:25:68:f8:11: 8d:44:78:e9:29:7a:c2:93:22:2a:36:bb:49:cf:2c: 8f:b0:8b:f3:bc:45:f7:a4:f9:c6:1f:a1:07:f0:46: b7:2d:7c:3e:17:3c:0f:00:4e:84:f7:03:5b:8e:dc: 4b:dc:a3:e2:21:f6:08:24:7e:89:64:af:58:a7:61: e5:d3:8f:84:b5:c8:ec:a9:1c:c4:41:f3:4c:57:ad: 2b:94:a8:fc:a6:c8:3a:15:32:90:08:54:63:fb:0d: 0f:27:e2:38:0f:47:d9:04:bf:17:21:28:12:ff:ae: 0a:5b:a8:bd:1d:be:14:5a:63:6d:67:ff:88:2f:45: c8:e8:82:1e:d9:92:ca:68:ee:b5:66:d4:51:3e:ae: 66:b5:42:03:16:59:a1:1d:a1:42:1a:a2:53:20:a4: d6:f8:b4:27:7d:88:42:3a:97:38:a0:d2:82:3e:3d: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CB:15:72:85:09:00:1F:25:A3:4F:34:F6:DF:B0:DF:1C:34:CB:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2bed6696-8872-3356-a45a-3f62bdf208c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:3b:50:27:9e:aa:43:71:96:85:e9:6b:36:bd:a9:aa:ac:a7: 97:af:1d:3d:9c:ad:0f:c5:88:1b:63:d8:c8:0c:36:0c:b1:58: 51:64:a6:19:53:29:11:e3:20:5e:5d:d7:b5:3a:54:1d:ce:b9: bd:a2:60:61:2e:0a:7a:86:ee:08:4c:97:10:2d:a8:75:38:9c: 7b:bb:5b:63:c2:76:b9:02:99:2f:ae:b8:f0:4a:54:fd:a7:bc: 68:26:5b:3f:87:58:68:f9:a1:1d:ee:3d:ce:ec:0c:7b:0c:4b: 3b:a4:e5:45:dd:e1:ff:66:3d:70:32:64:5a:df:72:ad:1f:2b: e0:4b:8c:f6:00:61:fd:c6:a5:28:79:ff:3d:7b:59:ad:8b:26: a3:16:31:2f:68:c8:62:8b:eb:4a:af:df:11:de:65:2f:6a:43: c6:44:22:94:de:a6:16:c4:fe:a4:09:4e:ca:9d:d1:f2:95:f1: 79:9c:e7:51:51:75:fc:50:c9:17:bf:2d:f4:3d:34:5a:56:b1: bf:ac:95:87:7e:ce:04:75:dd:65:80:b0:f2:ff:12:d3:c9:28: 06:38:8d:6e:e1:db:d1:f7:e2:5a:09:72:8f:ce:b3:d5:61:5c: d5:58:97:96:42:5d:cf:b3:db:26:98:17:46:e3:6f:ca:67:54: 59:b3:5c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkohcUMugsItKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjkzYjM0MDctNGRlYy00YmRkLTk5NjUtNjZjYzkyMDRmNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL4FKx/tbFMU6w/M7fW3Bl5yDSh7iB56DCmp 5LnlkZfCZKYmP6GIv2MY2hfFJE0LZd4/3YKaDcjhVDhmzEkgRoAMLqIsxpEsahyg OlDtwE687eeWRiVo+BGNRHjpKXrCkyIqNrtJzyyPsIvzvEX3pPnGH6EH8Ea3LXw+ FzwPAE6E9wNbjtxL3KPiIfYIJH6JZK9Yp2Hl04+EtcjsqRzEQfNMV60rlKj8psg6 FTKQCFRj+w0PJ+I4D0fZBL8XISgS/64KW6i9Hb4UWmNtZ/+IL0XI6IIe2ZLKaO61 ZtRRPq5mtUIDFlmhHaFCGqJTIKTW+LQnfYhCOpc4oNKCPj03VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArLFXKFCQAfJaNPNPbfsN8cNMsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmJlZDY2OTYtODg3Mi0z MzU2LWE0NWEtM2Y2MmJkZjIwOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKk7UCeeqkNxloXpaza9qaqsp5evHT2crQ/FiBtj2MgMNgyxWFFkphlT KRHjIF5d17U6VB3Oub2iYGEuCnqG7ghMlxAtqHU4nHu7W2PCdrkCmS+uuPBKVP2n vGgmWz+HWGj5oR3uPc7sDHsMSzuk5UXd4f9mPXAyZFrfcq0fK+BLjPYAYf3GpSh5 /z17Wa2LJqMWMS9oyGKL60qv3xHeZS9qQ8ZEIpTephbE/qQJTsqd0fKV8Xmc51FR dfxQyRe/LfQ9NFpWsb+slYd+zgR13WWAsPL/EtPJKAY4jW7h29H34loJco/Os9Vh XNVYl5ZCXc+z2yaYF0bjb8pnVFmzXBo= -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:22 2025 by rpki-client