$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c07de44-3af5-3080-8fd1-d2b64bbe3a7f.roa File: 5c07de44-3af5-3080-8fd1-d2b64bbe3a7f.roa (raw, json) Hash identifier: M5wQnjayejxomQcGdInglNuFcdHAiVDch//F7Isbppg= Subject key identifier: D3:C9:30:6A:8A:B7:06:AA:42:2E:A7:1B:3F:57:3F:1B:B7:BB:EC:39 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366C98B4406A237D136D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c07de44-3af5-3080-8fd1-d2b64bbe3a7f.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.197.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6c:98:b4:40:6a:23:7d:13:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d2a37915-a735-4816-b962-e640f1a7f1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:53:f9:3c:a2:64:15:85:01:84:03:8d:07:f6: b1:9b:df:f8:b6:ab:51:bb:d0:8b:3d:8b:6e:89:0c: bc:0a:81:1d:eb:e1:d8:01:1d:7c:82:67:22:c0:3e: c4:42:79:48:97:d7:a7:d9:d6:af:c4:53:dd:eb:83: 9c:6c:24:79:9b:f6:39:09:03:18:c0:5f:46:82:6f: af:59:0b:2c:db:ba:12:c3:b4:35:72:52:cc:7a:9c: 83:83:ce:94:47:a7:16:57:c2:60:5e:d7:b3:7c:4b: 91:74:b4:f7:7a:e3:2f:bf:64:b5:06:f7:8a:1e:3f: 8e:54:e6:7f:0e:94:36:5a:54:df:84:65:75:d1:66: da:d7:e5:b4:3f:30:3a:60:cc:af:f2:55:cb:5f:b2: 15:a2:2d:25:74:e0:6a:23:b9:0f:ae:85:87:12:b9: 27:66:56:80:68:f1:12:9f:ba:f5:6b:e6:36:fe:d5: 24:b4:a6:33:57:25:25:97:bb:10:ad:d4:d8:34:a4: a5:39:a3:4b:d3:21:05:99:ac:97:f3:2d:03:fd:3a: e5:5e:5d:35:98:f0:fe:6d:51:9b:5b:e8:9d:83:60: fb:80:7f:df:75:3f:82:9d:6a:24:ff:0a:a9:58:c9: 98:cf:aa:09:b8:2e:a0:c7:0c:4b:66:f5:66:0f:71: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C9:30:6A:8A:B7:06:AA:42:2E:A7:1B:3F:57:3F:1B:B7:BB:EC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c07de44-3af5-3080-8fd1-d2b64bbe3a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:af:55:14:91:f6:8d:16:d7:78:f0:c1:5e:d4:f3:61:d5:f1: de:cd:ff:21:91:24:5e:48:bf:79:d6:3a:c7:b9:bb:c5:af:57: 48:7a:e1:5f:cf:cd:34:9b:06:28:2d:a7:dd:0f:b1:88:3d:19: 48:bc:fc:62:1b:fa:b4:f1:dc:c0:fd:b9:9a:f6:05:4a:49:32: 9b:1e:d2:3b:00:a9:58:39:23:c1:61:2a:04:0f:9e:2b:2b:90: 8c:4c:9d:af:f9:94:53:09:ff:bf:94:b5:aa:82:c1:58:b3:74: 4f:e4:58:48:65:ef:c6:fe:4d:2e:f9:66:57:12:99:66:f5:7b: e6:42:71:b6:93:64:51:fa:17:57:54:33:17:f1:43:83:ee:99: 8f:f5:43:4b:0b:77:06:17:d6:e3:30:95:39:86:d3:d9:0a:0a: 24:d0:df:aa:92:85:ac:ff:a5:66:f1:20:3b:b6:42:19:73:6c: d0:a0:44:98:5d:d1:37:bd:8e:d1:39:ae:1d:c7:31:a4:48:2b: 3a:f7:1c:b3:99:4c:54:59:12:4b:3d:96:f0:66:2c:8e:7f:dd: 93:d8:20:ab:60:0a:83:fb:e4:88:a8:d5:24:24:ab:03:4a:ef: b1:36:b7:dd:41:1a:0a:27:13:f8:80:d1:f0:86:5f:5c:dc:44: 60:e4:3b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmyYtEBqI30TbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDJhMzc5MTUtYTczNS00ODE2LWI5NjItZTY0MGYxYTdmMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1P5PKJkFYUBhAONB/axm9/4tqtRu9CLPYtu iQy8CoEd6+HYAR18gmciwD7EQnlIl9en2davxFPd64OcbCR5m/Y5CQMYwF9Ggm+v WQss27oSw7Q1clLMepyDg86UR6cWV8JgXtezfEuRdLT3euMvv2S1BveKHj+OVOZ/ DpQ2WlTfhGV10Wba1+W0PzA6YMyv8lXLX7IVoi0ldOBqI7kProWHErknZlaAaPES n7r1a+Y2/tUktKYzVyUll7sQrdTYNKSlOaNL0yEFmayX8y0D/TrlXl01mPD+bVGb W+idg2D7gH/fdT+CnWok/wqpWMmYz6oJuC6gxwxLZvVmD3G7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPJMGqKtwaqQi6nGz9XPxu3u+w5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWMwN2RlNDQtM2FmNS0z MDgwLThmZDEtZDJiNjRiYmUzYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2vVRSR9o0W13jwwV7U82HV8d7N/yGRJF5Iv3nWOse5u8WvV0h64V/P zTSbBigtp90PsYg9GUi8/GIb+rTx3MD9uZr2BUpJMpse0jsAqVg5I8FhKgQPnisr kIxMna/5lFMJ/7+UtaqCwVizdE/kWEhl78b+TS75ZlcSmWb1e+ZCcbaTZFH6F1dU MxfxQ4PumY/1Q0sLdwYX1uMwlTmG09kKCiTQ36qShaz/pWbxIDu2QhlzbNCgRJhd 0Te9jtE5rh3HMaRIKzr3HLOZTFRZEks9lvBmLI5/3ZPYIKtgCoP75Iio1SQkqwNK 77E2t91BGgonE/iA0fCGX1zcRGDkOzc= -----END CERTIFICATE-----Generated at Wed Aug 6 11:12:27 2025 by rpki-client