$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa File: 3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa (raw, json) Hash identifier: KQnKMpEW+8LC0jn46kx4j+kw0THY+hTp5bu17gfh8go= Subject key identifier: 50:57:BC:C9:28:42:40:A0:28:68:AF:C5:72:ED:76:3F:7E:E4:31:9E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366EB86C113A8695BC7C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6e:b8:6c:11:3a:86:95:bc:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=e08b292d-30d4-4fb5-af57-3fd3bdf4c82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:9b:54:29:d6:58:c6:cb:02:55:18:48:87: c8:76:4f:3b:55:5e:a0:74:1e:fa:b0:14:d4:e0:aa: af:42:65:e8:b1:77:7b:b2:11:1c:10:10:aa:8c:58: 0d:fb:71:5f:f6:e5:95:c4:0c:b5:21:df:44:0a:ae: 06:5b:0f:f8:80:ff:a1:f1:66:ba:76:17:43:5f:c0: 32:60:0e:7e:f0:b7:e2:e0:86:74:ba:ac:39:62:1f: fd:9e:82:95:14:fd:9d:ea:23:ec:64:21:06:dc:c0: d2:7b:ac:f6:ce:a6:13:a8:38:8e:4e:e7:d4:e8:6e: 52:45:11:bd:4d:14:64:ac:f1:16:31:cf:cf:4c:c6: f8:e6:bb:1c:e5:a3:b3:cf:ea:00:58:35:ac:3b:05: 13:33:c3:da:fe:0b:3b:ba:cd:a9:93:f4:4b:6d:ef: ea:cb:95:f9:9f:07:14:c8:f3:85:45:99:60:f3:29: b2:f9:99:65:0d:a1:86:8a:63:bc:7d:69:c6:88:e1: f4:26:33:f2:6d:fa:17:88:a6:be:cb:d1:2c:73:8a: f8:a8:af:c8:30:48:6a:ba:51:a3:65:c8:fd:9b:2d: f0:84:1c:7e:d7:e3:05:ac:f3:bb:da:42:eb:95:29: f6:65:c5:29:f2:32:a6:d5:0e:24:07:ba:78:61:02: d3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:57:BC:C9:28:42:40:A0:28:68:AF:C5:72:ED:76:3F:7E:E4:31:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0d:e5:70:ba:e5:40:de:c5:d2:a5:69:55:7e:63:7d:cf:3c: 01:72:ec:b2:dd:62:9c:83:22:fd:4b:3e:95:c0:eb:d0:76:86: e4:53:ea:c9:de:79:b9:7a:1c:94:01:be:b3:25:ae:92:c3:39: 03:f7:32:55:9e:ab:69:77:c6:3c:a9:ab:d8:f8:21:7b:51:2e: f3:b4:07:06:92:64:42:09:0b:52:f8:76:a9:3e:6f:ce:6e:d9: 94:45:b8:88:e7:70:31:51:29:95:51:4f:5d:47:ae:f7:46:e3: 08:04:6f:8e:09:88:5d:29:37:9e:f3:af:6f:8c:d2:7a:c1:4a: 2c:24:23:e7:c0:10:75:ca:3d:a4:3c:84:3f:50:5b:26:cf:30: 9f:8e:eb:13:fe:20:a5:e8:ff:94:48:df:f9:51:06:73:d5:9f: 6d:0c:ba:a1:80:b7:59:70:f6:af:d4:47:35:ac:18:ca:5c:5d: df:25:fa:5e:b9:8e:00:8a:d6:55:4c:dd:f1:bd:5b:79:f3:1e: f8:2d:cc:78:b7:b7:55:6c:a3:68:1b:df:42:ef:9d:ad:ea:a4: 36:4f:b3:68:36:49:a1:b7:4a:72:73:be:ba:79:d6:13:a5:2b: 72:f6:1d:78:d8:42:38:72:65:81:3b:28:a3:4a:ab:f5:a8:8a: 14:0c:f1:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNm64bBE6hpW8fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTA4YjI5MmQtMzBkNC00ZmI1LWFmNTctM2ZkM2JkZjRjODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxubVCnWWMbLAlUYSIfIdk87VV6gdB76sBTU 4KqvQmXosXd7shEcEBCqjFgN+3Ff9uWVxAy1Id9ECq4GWw/4gP+h8Wa6dhdDX8Ay YA5+8Lfi4IZ0uqw5Yh/9noKVFP2d6iPsZCEG3MDSe6z2zqYTqDiOTufU6G5SRRG9 TRRkrPEWMc/PTMb45rsc5aOzz+oAWDWsOwUTM8Pa/gs7us2pk/RLbe/qy5X5nwcU yPOFRZlg8ymy+ZllDaGGimO8fWnGiOH0JjPybfoXiKa+y9Esc4r4qK/IMEhqulGj Zcj9my3whBx+1+MFrPO72kLrlSn2ZcUp8jKm1Q4kB7p4YQLTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBXvMkoQkCgKGivxXLtdj9+5DGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2I5NTg3YmYtMzViYy0z YzY4LWExYTctMTM3MGQ0NWQzMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYN5XC65UDexdKlaVV+Y33PPAFy7LLdYpyDIv1LPpXA69B2huRT6sne ebl6HJQBvrMlrpLDOQP3MlWeq2l3xjypq9j4IXtRLvO0BwaSZEIJC1L4dqk+b85u 2ZRFuIjncDFRKZVRT11HrvdG4wgEb44JiF0pN57zr2+M0nrBSiwkI+fAEHXKPaQ8 hD9QWybPMJ+O6xP+IKXo/5RI3/lRBnPVn20MuqGAt1lw9q/URzWsGMpcXd8l+l65 jgCK1lVM3fG9W3nzHvgtzHi3t1Vso2gb30Lvna3qpDZPs2g2SaG3SnJzvrp51hOl K3L2HXjYQjhyZYE7KKNKq/WoihQM8Q8= -----END CERTIFICATE-----Generated at Thu Aug 7 04:28:21 2025 by rpki-client