$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d452c61-9b93-31ed-a0c0-7e66a74a86f9.roa File: 3d452c61-9b93-31ed-a0c0-7e66a74a86f9.roa (raw, json) Hash identifier: lIg6EfE2w1VMl39v79mEnWtL1VC9DOWPiYli7SgtjPY= Subject key identifier: 40:8A:3D:96:7A:8D:42:4F:E4:55:10:75:17:8B:51:08:56:87:17:17 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367280A06C3EF6FE609F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d452c61-9b93-31ed-a0c0-7e66a74a86f9.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:72:80:a0:6c:3e:f6:fe:60:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=be4dc534-a089-44bc-a7e7-77e032d60608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:0f:6f:78:7f:0b:3d:ee:60:32:2e:e1:2d: 70:cb:92:8f:1b:14:b6:69:a5:37:55:fe:fa:70:9f: 76:f9:2a:50:f3:15:6c:d1:2a:04:67:76:11:a1:5e: 1c:9e:f1:f2:01:90:41:fe:f7:98:ef:d8:d6:8b:bf: fd:f3:60:8f:88:3a:52:03:9c:91:21:1f:a4:ca:16: b2:db:a5:75:7d:77:29:79:2a:c0:e6:92:a5:30:b7: ce:3e:3b:5b:94:80:b8:dd:4c:b4:6a:ae:c4:e3:ed: de:f5:9e:6e:99:80:cd:8f:63:7f:f0:a7:1d:38:88: 02:dc:fe:ea:3c:7b:93:b6:1e:6c:27:8b:48:4c:3a: 9c:57:e0:7d:27:08:b9:8f:d7:30:6e:f6:4b:e1:a0: c5:ce:b8:55:36:64:ff:31:e7:81:5a:da:fa:02:6a: 6e:ec:47:20:a1:10:14:f9:2f:f2:93:51:d7:e2:6e: 01:8d:ac:cd:5a:91:7a:16:4d:7f:04:1d:5a:4e:24: 02:96:28:7c:99:fd:89:86:d5:21:53:3d:de:65:a1: 47:08:46:8b:d3:73:da:f4:31:f6:1f:e9:a9:23:bf: 79:24:01:99:45:31:cf:77:45:7d:54:a9:65:fd:12: b0:a8:86:04:e2:c5:b0:24:55:7a:81:2b:28:21:30: e9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:3D:96:7A:8D:42:4F:E4:55:10:75:17:8B:51:08:56:87:17:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d452c61-9b93-31ed-a0c0-7e66a74a86f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3f:0a:fd:c8:d7:9a:3b:60:12:d6:c4:25:6e:45:39:e0:b3: 89:49:99:1d:2c:98:26:d9:23:73:e9:d0:18:55:d9:66:dc:cc: 91:ca:cb:63:d1:eb:51:86:4a:37:fb:36:a1:58:6a:a9:b7:fc: b1:71:cf:6b:39:0f:5d:25:a9:7b:51:e7:cb:25:8b:f8:3a:c5: 8e:06:c9:37:d4:3a:d6:dc:9a:dc:fc:1f:6a:72:e3:0b:a9:7f: 0d:ae:ab:f0:b1:f7:5a:8e:c2:0d:ce:f3:38:2c:39:5e:a6:60: 10:c6:01:b6:ca:80:31:1b:64:72:2b:fe:43:c1:67:d4:09:d6: 41:d1:1d:40:51:54:96:56:f0:8a:18:13:9f:1e:18:fb:81:ce: 57:b7:72:22:a6:49:e6:60:ff:70:5f:db:cf:17:79:d7:6b:68: c4:dd:d5:b6:7f:f8:7e:d8:16:13:ec:c8:24:cf:a5:f4:0c:1d: 31:42:9d:3c:d6:8d:0b:11:75:5e:b2:ea:e5:3b:f2:8a:cc:4b: 97:ac:00:b6:38:a8:bd:e0:dd:02:d2:15:2a:6e:34:7e:a7:ff: c1:da:d2:03:98:f4:cf:ca:05:c7:5a:a0:b9:3e:2f:28:52:4e: 40:bb:76:d9:0c:68:28:f8:fc:7d:9d:d2:f4:8f:37:17:1e:9f: e0:6a:d9:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnKAoGw+9v5gnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmU0ZGM1MzQtYTA4OS00NGJjLWE3ZTctNzdlMDMyZDYwNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/kPb3h/Cz3uYDIu4S1wy5KPGxS2aaU3Vf76 cJ92+SpQ8xVs0SoEZ3YRoV4cnvHyAZBB/veY79jWi7/982CPiDpSA5yRIR+kyhay 26V1fXcpeSrA5pKlMLfOPjtblIC43Uy0aq7E4+3e9Z5umYDNj2N/8KcdOIgC3P7q PHuTth5sJ4tITDqcV+B9Jwi5j9cwbvZL4aDFzrhVNmT/MeeBWtr6Ampu7EcgoRAU +S/yk1HX4m4BjazNWpF6Fk1/BB1aTiQClih8mf2JhtUhUz3eZaFHCEaL03Pa9DH2 H+mpI795JAGZRTHPd0V9VKll/RKwqIYE4sWwJFV6gSsoITDpTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECKPZZ6jUJP5FUQdReLUQhWhxcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Q0NTJjNjEtOWI5My0z MWVkLWEwYzAtN2U2NmE3NGE4NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs/Cv3I15o7YBLWxCVuRTngs4lJmR0smCbZI3Pp0BhV2WbczJHKy2PR 61GGSjf7NqFYaqm3/LFxz2s5D10lqXtR58sli/g6xY4GyTfUOtbcmtz8H2py4wup fw2uq/Cx91qOwg3O8zgsOV6mYBDGAbbKgDEbZHIr/kPBZ9QJ1kHRHUBRVJZW8IoY E58eGPuBzle3ciKmSeZg/3Bf288XeddraMTd1bZ/+H7YFhPsyCTPpfQMHTFCnTzW jQsRdV6y6uU78orMS5esALY4qL3g3QLSFSpuNH6n/8Ha0gOY9M/KBcdaoLk+LyhS TkC7dtkMaCj4/H2d0vSPNxcen+Bq2Xo= -----END CERTIFICATE-----Generated at Thu Aug 7 02:05:04 2025 by rpki-client