$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa3a185-b296-31d8-8c33-6d188efffc41.roa File: 4aa3a185-b296-31d8-8c33-6d188efffc41.roa (raw, json) Hash identifier: qexFjlF1oyPPytuHwvL5Y5Z2MYDm6S9oSRO+KZEOdMo= Subject key identifier: 1F:DD:06:8F:9F:66:D4:59:BA:3B:8E:D8:71:BC:95:B1:AE:DB:1F:E3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963670D08711D34ECCF9B8F0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa3a185-b296-31d8-8c33-6d188efffc41.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:70:d0:87:11:d3:4e:cc:f9:b8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=942278e2-8bd2-41e8-966f-073c344ae5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d7:fc:af:54:2f:3c:eb:e5:10:a3:24:4c:ef: a8:3c:7b:a9:df:1b:3b:cb:5d:41:1b:fa:04:b1:c5: ee:03:54:6b:5c:c0:76:4c:d6:bb:9d:d9:9c:89:16: 8c:87:ef:41:72:57:ee:42:08:c9:d0:cf:b6:d0:a7: b6:70:73:72:be:7b:57:51:f8:68:30:88:b3:ca:61: b9:14:55:5d:5c:1f:56:51:6d:88:39:5c:d2:0e:e3: 3d:db:02:e3:86:e0:f7:5b:3c:f8:9f:6d:ac:69:7b: db:fe:00:1b:85:f8:a4:f9:5d:b5:6e:11:99:7d:6e: ad:f7:fc:79:ca:e1:64:43:ae:36:28:3e:ce:4f:39: 77:82:b6:49:de:88:c4:9d:49:c2:6f:76:f1:02:37: 53:29:90:1b:9b:41:3f:47:ab:77:95:19:19:e5:06: 81:6d:44:2e:bc:21:b3:48:1f:36:a7:25:a2:a8:2e: fd:00:60:c3:6d:0c:29:d9:98:3e:52:04:b3:15:79: 2c:c4:d1:ff:e2:48:6d:b5:47:b3:c3:cb:ee:be:b5: f9:ae:1f:82:84:8c:88:0b:89:78:f1:33:f5:db:aa: d4:6c:93:45:e3:71:bd:10:13:23:e9:c7:46:25:55: dc:47:d5:f8:c2:85:53:33:32:f9:a5:c6:fb:42:44: a2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DD:06:8F:9F:66:D4:59:BA:3B:8E:D8:71:BC:95:B1:AE:DB:1F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa3a185-b296-31d8-8c33-6d188efffc41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e1:c2:47:00:ee:5b:9c:c1:60:7a:0c:8a:eb:20:3e:4a:33: c2:ff:4f:e6:31:12:f6:f1:8c:95:db:0e:83:f6:b0:d0:04:68: b2:95:0b:77:98:c8:5f:2c:94:48:5e:a5:a6:f2:af:59:d8:c2: 5b:89:ec:95:1f:f0:49:93:80:ef:e7:08:96:d2:d4:ce:40:90: 68:a0:9e:e4:8d:1f:cb:d9:dc:3c:42:64:23:4f:f0:a8:0a:f1: bb:e9:8b:22:f6:d3:38:f7:e0:68:5a:b2:a4:d7:8e:28:b5:98: 2d:5a:9c:12:44:67:00:cc:df:53:c7:ef:08:e9:d0:b5:21:32: b7:a6:16:e0:9d:63:47:88:13:32:cc:7e:dc:8e:db:e1:9f:fe: 05:18:0f:90:ed:f1:cc:41:b9:de:5c:fa:dd:dc:e0:ff:28:23: 27:65:13:f1:71:66:d9:68:ac:e9:df:34:f7:42:20:5a:eb:7d: 77:26:12:32:97:5e:31:18:21:07:12:a3:fd:ed:5f:18:8b:92: ad:d7:8d:ea:8d:c2:4f:c5:e5:9f:79:39:25:62:75:e2:1c:9c: af:89:59:68:48:12:ad:99:2e:e4:56:12:ba:9d:12:f6:99:77: d8:2e:f3:47:74:88:32:ca:ea:94:79:6f:c7:99:a8:5f:05:a8: 56:34:28:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnDQhxHTTsz5uPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OTQyMjc4ZTItOGJkMi00MWU4LTk2NmYtMDczYzM0NGFlNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNf8r1QvPOvlEKMkTO+oPHup3xs7y11BG/oE scXuA1RrXMB2TNa7ndmciRaMh+9BclfuQgjJ0M+20Ke2cHNyvntXUfhoMIizymG5 FFVdXB9WUW2IOVzSDuM92wLjhuD3Wzz4n22saXvb/gAbhfik+V21bhGZfW6t9/x5 yuFkQ642KD7OTzl3grZJ3ojEnUnCb3bxAjdTKZAbm0E/R6t3lRkZ5QaBbUQuvCGz SB82pyWiqC79AGDDbQwp2Zg+UgSzFXksxNH/4khttUezw8vuvrX5rh+ChIyIC4l4 8TP126rUbJNF43G9EBMj6cdGJVXcR9X4woVTMzL5pcb7QkSirQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/dBo+fZtRZujuO2HG8lbGu2x/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGFhM2ExODUtYjI5Ni0z MWQ4LThjMzMtNmQxODhlZmZmYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrhwkcA7lucwWB6DIrrID5KM8L/T+YxEvbxjJXbDoP2sNAEaLKVC3eY yF8slEhepabyr1nYwluJ7JUf8EmTgO/nCJbS1M5AkGignuSNH8vZ3DxCZCNP8KgK 8bvpiyL20zj34GhasqTXjii1mC1anBJEZwDM31PH7wjp0LUhMremFuCdY0eIEzLM ftyO2+Gf/gUYD5Dt8cxBud5c+t3c4P8oIydlE/FxZtlorOnfNPdCIFrrfXcmEjKX XjEYIQcSo/3tXxiLkq3XjeqNwk/F5Z95OSVideIcnK+JWWhIEq2ZLuRWErqdEvaZ d9gu80d0iDLK6pR5b8eZqF8FqFY0KEs= -----END CERTIFICATE-----Generated at Fri Aug 8 20:54:43 2025 by rpki-client