$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6198006f-dae8-30e5-bf98-1ffcdf70a624.roa File: 6198006f-dae8-30e5-bf98-1ffcdf70a624.roa (raw, json) Hash identifier: RJrcjTb+7Psk5aeiVXLUemHE6/PaZ6GvwO1zXqxB4Ho= Subject key identifier: 4B:1A:09:94:02:43:FB:15:2C:17:DD:02:DC:2F:01:E3:AC:A4:06:B8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963673F72BDA1CE0C9666888 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6198006f-dae8-30e5-bf98-1ffcdf70a624.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:73:f7:2b:da:1c:e0:c9:66:68:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d3424331-d741-4b17-bd3a-9c5f120ddafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:c8:23:2d:fe:1f:43:6f:f2:04:c1:cf:c3: b6:88:e7:fb:05:af:52:18:07:ea:10:aa:30:fd:ca: 83:3d:26:70:0d:be:ba:b1:15:5a:86:05:ce:5e:f9: a8:b5:c8:31:66:cf:54:ca:6b:49:b7:40:4a:9c:9d: 6c:af:85:23:18:e7:e0:85:9e:91:af:82:5b:49:f9: 9b:af:1e:1e:20:0b:9e:5b:26:87:ce:e4:1d:77:00: 71:de:e6:2d:46:52:95:27:4b:b4:07:f5:b3:4c:6a: db:c2:e7:4c:07:88:0c:89:cb:43:e8:3d:9c:78:8d: 97:31:12:24:b6:af:3b:50:e5:a7:df:c4:4c:73:9b: 27:3c:2a:78:75:a7:1d:10:b4:ee:fd:04:34:df:13: 41:b5:4f:d5:a9:9a:07:b4:0c:e6:b1:97:5b:c7:44: c8:c2:66:00:90:08:c8:9d:0e:7a:7f:28:26:70:e0: 55:93:51:27:95:41:a6:ce:c5:d3:ff:16:c8:dd:73: 15:df:9a:88:37:3c:f3:c4:bc:f5:c0:8b:2f:2d:c4: 06:6b:cb:b7:33:52:6f:ea:4f:e9:ec:3b:88:92:93: a6:6f:62:fd:73:8c:93:02:23:dd:af:12:d7:ad:67: 4b:d9:e4:6d:2e:b5:a1:c7:5f:dc:71:43:fe:09:70: a6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1A:09:94:02:43:FB:15:2C:17:DD:02:DC:2F:01:E3:AC:A4:06:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6198006f-dae8-30e5-bf98-1ffcdf70a624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:98:31:ea:31:b6:8a:e6:44:25:98:7d:3c:53:84:16:0a:eb: a3:50:4a:e8:02:12:1e:18:10:4b:71:fd:7d:a4:70:3e:5b:40: 7d:2d:65:89:37:83:e8:38:25:bd:5e:ba:7c:13:14:f9:16:05: 12:44:14:6b:2c:8f:dc:a0:ee:35:ec:45:e2:1c:1f:82:9c:02: 15:0f:5e:63:97:c6:bf:3c:d8:8a:2c:9f:6f:5f:32:76:37:32: 31:1a:e3:0a:6f:f4:6f:c9:51:35:8f:32:4b:2b:7e:b3:f1:06: d3:e1:cc:bd:cf:6a:c7:55:4d:31:4d:3a:15:38:a1:71:87:87: 5b:68:bc:6e:b1:1c:af:dc:90:1a:75:b6:12:6d:00:98:83:3b: 2b:51:f0:dd:10:1a:df:1a:8e:0d:ba:59:0d:22:4a:a0:df:48: 92:3a:8a:3e:f1:c7:57:57:d4:84:67:b8:49:bc:04:af:be:70: 07:35:d5:0f:21:8c:8e:17:d8:2a:86:8c:f5:85:ea:31:86:5f: b2:de:00:7a:07:ed:e1:a8:a6:9d:08:43:5f:74:2c:ea:3d:5f: dc:3f:ed:14:46:1e:2c:8f:78:13:ae:36:de:1e:43:b5:98:aa: d5:0e:91:3f:a7:17:8c:4b:18:00:05:61:e0:f6:16:de:88:af: f8:1c:ac:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnP3K9oc4MlmaIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDM0MjQzMzEtZDc0MS00YjE3LWJkM2EtOWM1ZjEyMGRkYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZDIIy3+H0Nv8gTBz8O2iOf7Ba9SGAfqEKow /cqDPSZwDb66sRVahgXOXvmotcgxZs9UymtJt0BKnJ1sr4UjGOfghZ6Rr4JbSfmb rx4eIAueWyaHzuQddwBx3uYtRlKVJ0u0B/WzTGrbwudMB4gMictD6D2ceI2XMRIk tq87UOWn38RMc5snPCp4dacdELTu/QQ03xNBtU/VqZoHtAzmsZdbx0TIwmYAkAjI nQ56fygmcOBVk1EnlUGmzsXT/xbI3XMV35qINzzzxLz1wIsvLcQGa8u3M1Jv6k/p 7DuIkpOmb2L9c4yTAiPdrxLXrWdL2eRtLrWhx1/ccUP+CXCmqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsaCZQCQ/sVLBfdAtwvAeOspAa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjE5ODAwNmYtZGFlOC0z MGU1LWJmOTgtMWZmY2RmNzBhNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiYMeoxtormRCWYfTxThBYK66NQSugCEh4YEEtx/X2kcD5bQH0tZYk3 g+g4Jb1eunwTFPkWBRJEFGssj9yg7jXsReIcH4KcAhUPXmOXxr882Iosn29fMnY3 MjEa4wpv9G/JUTWPMksrfrPxBtPhzL3PasdVTTFNOhU4oXGHh1tovG6xHK/ckBp1 thJtAJiDOytR8N0QGt8ajg26WQ0iSqDfSJI6ij7xx1dX1IRnuEm8BK++cAc11Q8h jI4X2CqGjPWF6jGGX7LeAHoH7eGopp0IQ190LOo9X9w/7RRGHiyPeBOuNt4eQ7WY qtUOkT+nF4xLGAAFYeD2Ft6Ir/gcrFI= -----END CERTIFICATE-----Generated at Wed Aug 6 14:15:33 2025 by rpki-client