$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa File: 3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa (raw, json) Hash identifier: UPwWrjCOLr1c+cLd2ww3wXiieSsgdxsQB7tZa6MSirg= Subject key identifier: 59:DF:87:61:D2:90:A4:B7:86:6B:A4:EC:90:E3:7F:03:79:DB:42:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963676002D43FD071A573880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.221.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:76:00:2d:43:fd:07:1a:57:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=62be4e20-c6f6-4abc-9294-d5cae2259a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:92:ea:60:cc:91:16:67:59:7d:7c:ff:cb: 99:eb:e3:44:4c:94:fb:e9:ba:1f:f3:cc:3a:ed:15: f7:95:fe:ac:f5:f0:58:4e:5a:c0:58:04:70:71:08: 66:9f:68:75:2d:43:f7:38:82:42:35:e0:10:ed:7a: b4:51:09:53:44:06:af:e3:7b:f9:54:13:19:5a:f6: e5:cc:15:5d:78:ea:be:52:dd:9d:3e:56:82:8e:9c: 52:67:77:1b:fb:03:fb:93:80:a3:c4:ad:2c:9c:cf: ab:7b:02:0c:2d:7a:fb:f8:ec:e0:78:0a:eb:7f:3b: e7:92:0d:9a:fa:7e:34:d1:a6:35:4a:44:61:94:92: fa:fa:9a:73:33:ad:f8:74:28:7f:d9:90:06:6b:d9: eb:94:e5:39:1e:e7:ad:7b:79:1b:3c:5d:93:77:43: eb:b7:b8:db:cb:43:ae:25:72:cf:41:53:39:25:35: 23:62:5d:33:71:64:c8:1e:07:0a:3f:18:36:d5:70: 33:c2:9e:87:55:0f:4e:c2:da:87:04:43:db:3e:2c: 7b:09:0e:9c:43:32:7e:ae:f0:4a:c0:56:3b:71:3d: 75:80:dc:4e:f0:ae:a8:d2:c7:f4:95:bb:ae:77:a5: 83:9d:ee:19:61:f1:b9:1f:57:69:01:cc:26:c1:52: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DF:87:61:D2:90:A4:B7:86:6B:A4:EC:90:E3:7F:03:79:DB:42:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5b:36:bf:20:de:4e:44:8e:ff:6b:94:0c:8c:9c:7b:c4:de: 0b:a5:b7:23:51:b2:6a:95:27:56:15:d0:fd:3f:7f:46:3f:28: 22:d6:0f:53:63:d8:81:b4:4c:3a:0e:70:6c:49:3e:df:96:75: 01:f8:4d:6b:c6:fb:c9:46:96:af:4d:39:85:41:42:3a:d6:49: a6:17:c4:c4:1f:d0:86:98:1d:28:02:30:43:c8:59:25:9c:dc: bd:00:5f:9d:c1:e5:98:fd:bb:59:ef:10:2e:cf:73:45:8f:bf: 12:a7:82:4c:1f:ad:90:07:f2:16:59:e5:f1:4a:3e:c3:4f:29: 83:ac:18:db:bb:8b:13:b8:9c:1e:9a:84:5c:2a:20:da:10:02: 75:0d:b6:74:f6:44:f1:2f:05:a4:c4:2a:f6:bb:cc:81:db:5b: b4:ce:10:c1:20:9a:d4:98:56:94:ea:2a:3d:ae:8c:59:c7:f1: 21:b1:b1:37:27:86:da:93:b3:48:a7:43:88:27:c4:c9:de:24: aa:3f:e2:16:dd:97:41:42:13:d3:fd:70:df:d8:68:f9:2f:aa: a3:74:64:ac:4f:e0:f6:b9:fe:c5:e0:b6:02:59:cf:ef:51:68: fd:6b:4e:72:24:13:89:f5:f4:f2:f2:88:a0:a5:64:db:7a:9b: 9e:3c:7b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnYALUP9BxpXOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NjJiZTRlMjAtYzZmNi00YWJjLTkyOTQtZDVjYWUyMjU5YTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEyS6mDMkRZnWX18/8uZ6+NETJT76bof88w6 7RX3lf6s9fBYTlrAWARwcQhmn2h1LUP3OIJCNeAQ7Xq0UQlTRAav43v5VBMZWvbl zBVdeOq+Ut2dPlaCjpxSZ3cb+wP7k4CjxK0snM+rewIMLXr7+OzgeArrfzvnkg2a +n400aY1SkRhlJL6+ppzM634dCh/2ZAGa9nrlOU5Huete3kbPF2Td0Prt7jby0Ou JXLPQVM5JTUjYl0zcWTIHgcKPxg21XAzwp6HVQ9OwtqHBEPbPix7CQ6cQzJ+rvBK wFY7cT11gNxO8K6o0sf0lbuud6WDne4ZYfG5H1dpAcwmwVKwFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnfh2HSkKS3hmuk7JDjfwN520LoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZlZDMzYjctNmI1YS0z YzM1LWI1NmUtOGQwMWJmNTMxNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhbNr8g3k5Ejv9rlAyMnHvE3gultyNRsmqVJ1YV0P0/f0Y/KCLWD1Nj 2IG0TDoOcGxJPt+WdQH4TWvG+8lGlq9NOYVBQjrWSaYXxMQf0IaYHSgCMEPIWSWc 3L0AX53B5Zj9u1nvEC7Pc0WPvxKngkwfrZAH8hZZ5fFKPsNPKYOsGNu7ixO4nB6a hFwqINoQAnUNtnT2RPEvBaTEKva7zIHbW7TOEMEgmtSYVpTqKj2ujFnH8SGxsTcn htqTs0inQ4gnxMneJKo/4hbdl0FCE9P9cN/YaPkvqqN0ZKxP4Pa5/sXgtgJZz+9R aP1rTnIkE4n19PLyiKClZNt6m548e0c= -----END CERTIFICATE-----Generated at Thu Aug 7 04:30:52 2025 by rpki-client