$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43cfc700-9fe5-39af-8ebf-cc335385d599.roa File: 43cfc700-9fe5-39af-8ebf-cc335385d599.roa (raw, json) Hash identifier: AlSQ3h5sDFtjZa9ArTJabumIK5n6D9epPLKaXlzDXig= Subject key identifier: E3:B3:2B:5A:71:B1:84:B0:AA:C7:01:F8:E2:C0:50:77:05:67:00:C2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AC710FD34C41CF93A5ADF1880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43cfc700-9fe5-39af-8ebf-cc335385d599.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 22773 IP address blocks: 72.222.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:fd:34:c4:1c:f9:3a:5a:df:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=cc419a47-9e83-4a6f-9d78-475676a2da23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e7:de:18:2b:93:30:dc:ce:b2:99:13:b7:52: ae:a2:f0:23:88:7d:6b:98:41:92:8e:0b:08:42:7f: fa:8c:e2:43:85:e3:90:12:31:ff:fc:f2:54:82:9a: cd:87:43:b4:19:33:ca:38:4d:f3:66:bf:8e:fd:2c: f1:fd:e2:8b:e2:d9:dc:c7:ca:05:57:cf:f9:cc:ee: bc:a9:e0:41:54:14:67:10:22:b3:9e:82:c8:00:56: 97:3b:bb:ba:33:0e:06:5e:6a:07:b0:61:52:7a:64: fc:af:a5:a9:83:a4:4a:3d:35:69:20:77:ae:53:bb: b7:85:d8:72:bd:a3:ff:16:15:66:ee:c1:68:f6:65: ab:ec:ea:af:40:f5:ce:b4:59:2f:91:93:e5:24:d3: c9:67:43:ae:46:a3:45:71:c9:c9:3d:3b:71:9a:ed: 16:58:8f:6f:a6:9e:1f:c4:11:1d:7d:4b:86:85:10: fb:68:e7:ba:82:62:f3:2f:cf:30:61:ea:ac:8d:1a: a8:68:fe:f8:04:4a:30:d0:0c:3e:83:48:08:83:07: c3:ab:5a:cd:ee:0b:47:e9:68:0a:14:9c:ad:0e:19: 53:8d:51:ad:6a:a2:98:ca:1a:50:bc:f3:30:29:ea: 95:9a:d2:61:02:21:ff:a9:55:0b:68:a7:14:1a:16: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B3:2B:5A:71:B1:84:B0:AA:C7:01:F8:E2:C0:50:77:05:67:00:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43cfc700-9fe5-39af-8ebf-cc335385d599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d9:61:80:08:0c:c9:3a:05:66:32:da:a1:7d:e7:ed:11:59: 96:1d:4c:7a:fe:22:c4:9b:1e:5a:d6:77:e0:41:1b:59:5a:1d: c2:33:b8:59:e8:df:bb:f0:d2:4c:33:77:e9:f8:96:2e:20:c9: 8b:d8:61:c8:fa:51:30:f1:ce:80:e8:f3:59:75:50:79:ed:66: bd:6e:6f:0c:40:ae:19:f6:4e:c3:7d:aa:75:2b:3d:5b:b7:1e: fc:f5:c5:a9:d0:0e:bd:52:a2:6c:b2:b4:6c:29:98:f9:c4:92: 41:01:81:49:f6:a5:40:ed:71:e3:ea:5d:3c:f9:6b:44:7c:27: 0f:2b:38:bd:e8:8f:76:ca:61:a0:62:58:a1:96:4a:97:29:e3: e5:0e:68:cc:8a:41:b1:ec:9c:72:38:13:d5:43:b8:92:75:22: ff:15:28:a6:47:8c:b1:cd:7f:e9:41:7a:ed:a2:78:3c:23:cf: 17:a4:a3:a3:74:af:87:7a:6e:a2:b6:40:29:7f:cb:f6:27:a7: b8:f6:f3:df:8d:81:a3:85:20:b2:64:f6:54:8a:4b:ce:e7:e7: b6:8c:37:60:99:6c:02:9a:4d:29:49:e8:5c:b7:bf:03:74:8a: 78:1e:b5:2c:e8:88:47:5c:4b:02:ce:c9:0c:41:80:50:6e:2d: 33:ea:02:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEP00xBz5OlrfGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk Y2M0MTlhNDctOWU4My00YTZmLTlkNzgtNDc1Njc2YTJkYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjufeGCuTMNzOspkTt1KuovAjiH1rmEGSjgsI Qn/6jOJDheOQEjH//PJUgprNh0O0GTPKOE3zZr+O/Szx/eKL4tncx8oFV8/5zO68 qeBBVBRnECKznoLIAFaXO7u6Mw4GXmoHsGFSemT8r6Wpg6RKPTVpIHeuU7u3hdhy vaP/FhVm7sFo9mWr7OqvQPXOtFkvkZPlJNPJZ0OuRqNFccnJPTtxmu0WWI9vpp4f xBEdfUuGhRD7aOe6gmLzL88wYeqsjRqoaP74BEow0Aw+g0gIgwfDq1rN7gtH6WgK FJytDhlTjVGtaqKYyhpQvPMwKeqVmtJhAiH/qVULaKcUGhZEXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOzK1pxsYSwqscB+OLAUHcFZwDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNjZmM3MDAtOWZlNS0z OWFmLThlYmYtY2MzMzUzODVkNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfZYYAIDMk6BWYy2qF95+0RWZYdTHr+IsSbHlrWd+BBG1laHcIzuFno 37vw0kwzd+n4li4gyYvYYcj6UTDxzoDo81l1UHntZr1ubwxArhn2TsN9qnUrPVu3 Hvz1xanQDr1SomyytGwpmPnEkkEBgUn2pUDtcePqXTz5a0R8Jw8rOL3oj3bKYaBi WKGWSpcp4+UOaMyKQbHsnHI4E9VDuJJ1Iv8VKKZHjLHNf+lBeu2ieDwjzxeko6N0 r4d6bqK2QCl/y/Ynp7j289+NgaOFILJk9lSKS87n57aMN2CZbAKaTSlJ6Fy3vwN0 ingetSzoiEdcSwLOyQxBgFBuLTPqAvQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:49:29 2025 by rpki-client