$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4571b679-7f9e-33d0-aebc-da4462bfb28d.roa File: 4571b679-7f9e-33d0-aebc-da4462bfb28d.roa (raw, json) Hash identifier: WvgJElhKMMwzo4muhsbDsUk6pI26l1lbs9i03Ss2SVM= Subject key identifier: 13:F1:1A:72:9B:87:61:9F:69:44:5B:EC:0C:34:90:68:95:7C:EE:2D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96362AFB1F136AEBBD5D31A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4571b679-7f9e-33d0-aebc-da4462bfb28d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.213.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:2a:fb:1f:13:6a:eb:bd:5d:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=fa42d666-b1e8-4e16-a59c-25e26a7c92a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:b8:2b:e1:f3:07:e3:ff:cb:7f:9e:bd:7f: ac:62:14:62:d8:09:3f:45:57:56:ff:2e:6c:e0:72: 15:f8:58:cd:6a:e4:20:52:34:f9:5f:bc:7c:68:d7: 7c:a1:97:7e:34:4e:01:cb:d0:bd:da:5f:70:6c:cb: f8:b4:31:19:17:15:88:c3:ab:78:dc:8f:9a:86:95: de:b4:76:c0:e9:c3:3d:09:fd:ab:cf:d4:f8:c6:7a: 6e:0e:71:9f:16:a8:6d:48:12:d6:47:42:d3:23:36: b0:c6:fa:d8:07:19:a7:69:cf:49:5c:e3:41:22:85: 62:dc:78:e7:21:29:7c:82:a7:08:1d:53:58:a3:83: 71:0f:f7:71:e5:1c:bd:45:b7:ca:a4:cb:c2:f2:ac: 11:16:d3:53:2a:1a:23:ee:14:d9:1b:9a:a5:16:1f: 15:21:9d:b6:ef:cb:5f:16:2c:1b:3d:34:27:c9:5d: b3:cc:f3:aa:43:19:36:2a:97:78:3b:a4:e1:ab:bf: c0:78:18:e9:7b:f7:48:16:2b:e8:fb:d0:52:86:86: 25:6e:49:6d:42:fb:d7:04:39:9c:29:b1:4a:59:07: 3a:66:19:d0:08:98:29:32:d0:8d:8a:55:c3:c8:35: 8a:e8:21:74:dd:21:5f:ba:38:2c:bb:46:d9:65:43: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F1:1A:72:9B:87:61:9F:69:44:5B:EC:0C:34:90:68:95:7C:EE:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4571b679-7f9e-33d0-aebc-da4462bfb28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.213.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:06:ca:df:fb:85:7f:72:85:5d:9d:4d:ab:e7:d9:af:82:2b: 9c:0f:5b:ae:f6:39:04:48:2f:c2:8a:9d:92:67:e2:7d:92:d7: 30:e1:0d:b6:32:b1:c5:0d:1a:6a:e5:58:67:d2:b0:a4:72:c8: 9a:d9:a2:40:91:fb:34:5f:a8:6c:15:bc:62:bb:af:17:d6:4b: 37:13:aa:f5:75:1f:1b:c9:ad:01:17:d2:25:60:6a:70:f1:c2: db:4d:cf:7a:8d:58:61:28:2b:4a:54:ef:76:fb:7e:fd:12:d8: d6:34:08:15:64:60:05:99:e0:c2:21:18:99:38:d3:b6:ac:59: 5b:fd:3e:fd:a7:66:42:5c:7d:1d:ed:37:3a:72:1f:b3:a5:a9: 8c:59:65:e9:17:76:c0:d3:71:77:9e:e3:31:67:8c:ba:28:00: 70:39:b7:6d:75:3c:b2:0b:a0:48:19:15:53:73:b1:5c:1d:cd: cf:6c:fb:1b:13:84:36:4d:d1:66:5e:73:ec:92:0c:99:05:82: 0b:f1:6e:d8:3e:a0:fa:53:89:9d:0d:54:dd:3f:88:4b:e9:20: 64:dd:62:93:1f:d9:15:bc:30:0e:cd:7f:4e:99:7c:e3:37:39: c7:3f:f4:f1:9a:0e:1a:b5:cf:20:29:f4:ce:b0:2d:f3:51:3e: e2:bb:f3:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNir7HxNq671dMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmE0MmQ2NjYtYjFlOC00ZTE2LWE1OWMtMjVlMjZhN2M5MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN64K+HzB+P/y3+evX+sYhRi2Ak/RVdW/y5s 4HIV+FjNauQgUjT5X7x8aNd8oZd+NE4By9C92l9wbMv4tDEZFxWIw6t43I+ahpXe tHbA6cM9Cf2rz9T4xnpuDnGfFqhtSBLWR0LTIzawxvrYBxmnac9JXONBIoVi3Hjn ISl8gqcIHVNYo4NxD/dx5Ry9RbfKpMvC8qwRFtNTKhoj7hTZG5qlFh8VIZ2278tf FiwbPTQnyV2zzPOqQxk2Kpd4O6Thq7/AeBjpe/dIFivo+9BShoYlbkltQvvXBDmc KbFKWQc6ZhnQCJgpMtCNilXDyDWK6CF03SFfujgsu0bZZUPlRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPxGnKbh2GfaURb7Aw0kGiVfO4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDU3MWI2NzktN2Y5ZS0z M2QwLWFlYmMtZGE0NDYyYmZiMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkGyt/7hX9yhV2dTavn2a+CK5wPW672OQRIL8KKnZJn4n2S1zDhDbYy scUNGmrlWGfSsKRyyJrZokCR+zRfqGwVvGK7rxfWSzcTqvV1HxvJrQEX0iVganDx wttNz3qNWGEoK0pU73b7fv0S2NY0CBVkYAWZ4MIhGJk407asWVv9Pv2nZkJcfR3t NzpyH7OlqYxZZekXdsDTcXee4zFnjLooAHA5t211PLILoEgZFVNzsVwdzc9s+xsT hDZN0WZec+ySDJkFggvxbtg+oPpTiZ0NVN0/iEvpIGTdYpMf2RW8MA7Nf06ZfOM3 Occ/9PGaDhq1zyAp9M6wLfNRPuK780o= -----END CERTIFICATE-----Generated at Fri Aug 8 00:37:47 2025 by rpki-client