$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dbfeef7-8485-33af-b97d-799e8dcf4541.roa File: 2dbfeef7-8485-33af-b97d-799e8dcf4541.roa (raw, json) Hash identifier: +abth53Cj1A0sqkEh+ATbhM7DqGWO+ufb6drJ2sVLuU= Subject key identifier: 05:65:32:EF:90:49:20:DE:20:74:E0:87:EC:E6:18:FD:C1:37:D9:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367F6C7E8EA77F5D440780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dbfeef7-8485-33af-b97d-799e8dcf4541.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 174.65.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7f:6c:7e:8e:a7:7f:5d:44:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ca880a3d-39f3-4160-8687-3075b8d1a6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:88:aa:17:4a:78:67:83:0f:70:e0:e5:96: da:dd:44:b8:50:a2:72:d6:eb:0d:90:58:80:46:b6: 18:29:53:9a:4d:3b:a5:47:ef:18:51:05:b4:eb:83: e3:71:6c:12:5f:6a:03:27:d2:2e:73:64:08:07:a6: 36:66:41:2d:fc:5e:57:2d:79:48:93:e7:e8:c3:16: ee:3e:e0:0c:86:88:5c:0d:76:ed:60:27:b7:68:6c: b1:05:2e:e4:9b:9d:de:4a:66:3e:5d:90:61:53:d1: 0b:c1:fe:43:a3:5b:63:ef:0a:5e:b5:15:f9:4d:2a: 83:cf:dc:34:ec:fd:d7:0d:d2:69:30:03:9a:51:db: 51:7c:d0:21:3b:87:7d:41:fc:87:39:d7:3f:10:fa: ba:cb:0d:1d:24:da:5b:a2:31:17:17:47:d5:39:21: 05:1a:4e:50:4b:b7:bb:9e:f4:fd:a6:7c:04:f5:01: 66:c4:ee:1b:c2:10:7e:37:ee:57:4f:fb:58:ce:01: 51:75:bf:a4:f8:f8:48:c7:fa:f2:bc:85:8e:7b:29: cb:61:f2:54:2a:46:11:dd:b3:c7:ce:4c:60:fb:12: c4:fb:9a:79:2e:c5:25:79:8d:99:69:10:a1:2f:02: 58:f7:08:dc:df:3d:9c:66:1c:fa:25:cb:1c:2c:2e: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:65:32:EF:90:49:20:DE:20:74:E0:87:EC:E6:18:FD:C1:37:D9:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dbfeef7-8485-33af-b97d-799e8dcf4541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:66:cd:98:55:a5:77:e8:82:c0:15:f6:6b:1e:ec:4d:e1:90: 04:45:a1:ce:a7:c8:4c:81:2b:77:4c:d9:de:10:b1:c7:05:aa: 4b:b6:ac:df:4c:35:4b:4e:3a:b5:8f:c3:32:87:9f:70:d4:c8: 57:26:89:29:45:a0:d3:96:e6:64:d0:77:bf:d7:22:62:1e:18: a7:af:06:cc:bc:8d:b6:2d:9f:43:8c:ad:a4:6e:69:c2:03:7b: b7:a7:cd:1c:dd:c4:06:29:2c:e6:68:7b:60:92:66:0f:81:7a: 73:8e:27:d4:af:9f:e8:06:99:90:af:ea:bf:0b:d1:a4:8b:1e: 19:17:46:35:11:6e:bb:5d:d7:91:87:90:3d:68:d9:d1:3a:65: 3d:63:a8:8f:cc:93:27:88:c6:51:85:8e:62:01:ac:05:ec:2b: 37:9b:ab:b3:d1:32:3d:1d:f6:3e:86:94:ce:3e:01:ea:14:73: 4b:ba:bf:46:e8:75:63:73:99:ea:91:23:f8:e8:ca:e5:69:e1: 3f:17:eb:52:98:c0:e8:f1:f6:ce:e0:6a:13:c3:b8:f8:da:bf: a3:47:bc:fc:f7:88:1d:37:6d:11:81:c3:fa:91:62:61:9b:ed: 51:7b:27:37:97:70:0e:90:19:ec:e3:01:1e:5c:69:57:89:f2: 5a:72:12:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNn9sfo6nf11EB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Y2E4ODBhM2QtMzlmMy00MTYwLTg2ODctMzA3NWI4ZDFhNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXSIqhdKeGeDD3Dg5Zba3US4UKJy1usNkFiA RrYYKVOaTTulR+8YUQW064PjcWwSX2oDJ9Iuc2QIB6Y2ZkEt/F5XLXlIk+fowxbu PuAMhohcDXbtYCe3aGyxBS7km53eSmY+XZBhU9ELwf5Do1tj7wpetRX5TSqDz9w0 7P3XDdJpMAOaUdtRfNAhO4d9QfyHOdc/EPq6yw0dJNpbojEXF0fVOSEFGk5QS7e7 nvT9pnwE9QFmxO4bwhB+N+5XT/tYzgFRdb+k+PhIx/ryvIWOeynLYfJUKkYR3bPH zkxg+xLE+5p5LsUleY2ZaRChLwJY9wjc3z2cZhz6JcscLC7f7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVlMu+QSSDeIHTgh+zmGP3BN9msMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRiZmVlZjctODQ4NS0z M2FmLWI5N2QtNzk5ZThkY2Y0NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJmzZhVpXfogsAV9mse7E3hkARFoc6nyEyBK3dM2d4QsccFqku2rN9M NUtOOrWPwzKHn3DUyFcmiSlFoNOW5mTQd7/XImIeGKevBsy8jbYtn0OMraRuacID e7enzRzdxAYpLOZoe2CSZg+BenOOJ9Svn+gGmZCv6r8L0aSLHhkXRjURbrtd15GH kD1o2dE6ZT1jqI/MkyeIxlGFjmIBrAXsKzebq7PRMj0d9j6GlM4+AeoUc0u6v0bo dWNzmeqRI/joyuVp4T8X61KYwOjx9s7gahPDuPjav6NHvPz3iB03bRGBw/qRYmGb 7VF7JzeXcA6QGezjAR5caVeJ8lpyEpo= -----END CERTIFICATE-----Generated at Sat Aug 9 02:48:16 2025 by rpki-client