$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6a66c1a2-56da-3867-bd35-7de054dd9986.roa File: 6a66c1a2-56da-3867-bd35-7de054dd9986.roa (raw, json) Hash identifier: tZGFermTQMKyC/y4vqHHcaHXOWx9BqdDOkp59AipB34= Subject key identifier: 38:E1:08:9F:D7:0E:FA:29:58:59:A0:80:14:B7:2C:4D:CA:AF:AC:8A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963629F80A6487868DF94B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6a66c1a2-56da-3867-bd35-7de054dd9986.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.209.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:29:f8:0a:64:87:86:8d:f9:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=01a53c94-ab62-4511-bed2-20ecc6e34973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:ad:7d:6a:30:76:f6:ed:67:84:d5:f2:38: 71:40:72:62:ab:70:42:59:32:cd:a1:9f:59:d6:7a: 48:8a:e4:f8:e6:cc:20:3a:09:57:8c:ba:b7:98:24: a9:f1:2f:91:fe:84:95:c2:c3:7d:77:d6:65:63:33: 25:0e:7a:48:37:85:fa:66:1f:f8:a6:28:3d:d6:79: b0:2f:85:98:7f:14:d6:04:6a:0a:0a:67:ae:fc:f4: 49:ad:68:50:ee:47:2c:86:1d:60:bc:58:00:52:fe: 29:21:42:8d:c4:d8:28:b1:e3:59:e4:45:0b:3e:5f: cc:75:b5:f8:e9:ef:7c:f8:1a:59:ab:43:0c:83:0e: c0:8e:fc:fe:1a:42:a8:9d:7f:a1:d4:f9:b8:e8:0f: 9d:cb:2c:83:a5:98:d6:23:7c:92:5e:e3:8c:22:f8: 0a:ed:13:d1:d9:ca:e8:8c:67:d9:a6:6f:da:46:45: af:e1:9f:21:58:b1:45:f0:e9:2d:75:3f:64:4f:33: 65:67:ec:3e:1d:d7:56:98:dc:bb:5d:f2:0c:f6:19: d4:f5:b3:07:aa:be:cf:1a:c6:fa:30:d8:b9:1c:0b: 76:76:79:2b:04:d1:75:d2:80:4e:94:ae:18:47:8f: df:fe:b7:20:3e:b4:57:30:7b:b1:14:41:1a:7d:0c: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E1:08:9F:D7:0E:FA:29:58:59:A0:80:14:B7:2C:4D:CA:AF:AC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6a66c1a2-56da-3867-bd35-7de054dd9986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:98:0d:79:bd:1f:24:bc:db:d3:74:40:13:93:1f:36:db:f2: 2d:97:a6:e5:eb:66:a9:3a:92:18:e0:f7:4d:6e:7a:d2:97:09: 11:6b:90:48:31:d0:d4:60:c8:89:71:ba:70:3d:fd:32:56:da: 5a:3e:52:85:c0:75:10:b5:2a:8b:68:d7:cc:f6:9b:a7:23:79: de:02:e4:45:38:9d:4b:3d:b8:62:c2:b7:c1:cd:79:5b:6f:65: 35:cb:af:de:9e:60:e6:e9:8b:aa:6c:fb:26:02:28:90:40:81: 37:82:e3:30:61:de:62:87:ef:29:fb:80:1c:25:db:db:a8:57: 2a:b2:d9:4b:06:db:cd:4f:1e:09:43:1b:cc:86:ba:15:86:03: a9:a1:7f:61:6d:01:c4:02:07:61:d4:a3:ac:0a:87:51:0c:c0: 44:33:29:d1:6e:5a:e5:27:6b:8c:07:88:6d:ab:c5:76:9f:a3: 45:8a:01:0d:fb:bb:84:dd:40:49:48:96:ee:eb:71:02:d0:45: 50:4d:12:4f:75:91:19:4f:0f:5f:6d:96:69:d3:1e:1f:f6:1d: bb:c7:f5:ce:95:d5:30:eb:f3:19:8a:d6:28:ac:a5:f9:99:10: 39:a0:bc:98:dc:82:ac:78:c7:d0:18:21:04:d1:f9:a9:90:49: f0:ea:4e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNin4CmSHho35SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MDFhNTNjOTQtYWI2Mi00NTExLWJlZDItMjBlY2M2ZTM0OTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtetfWowdvbtZ4TV8jhxQHJiq3BCWTLNoZ9Z 1npIiuT45swgOglXjLq3mCSp8S+R/oSVwsN9d9ZlYzMlDnpIN4X6Zh/4pig91nmw L4WYfxTWBGoKCmeu/PRJrWhQ7kcshh1gvFgAUv4pIUKNxNgoseNZ5EULPl/MdbX4 6e98+BpZq0MMgw7Ajvz+GkKonX+h1Pm46A+dyyyDpZjWI3ySXuOMIvgK7RPR2cro jGfZpm/aRkWv4Z8hWLFF8OktdT9kTzNlZ+w+HddWmNy7XfIM9hnU9bMHqr7PGsb6 MNi5HAt2dnkrBNF10oBOlK4YR4/f/rcgPrRXMHuxFEEafQzhwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjhCJ/XDvopWFmggBS3LE3Kr6yKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmE2NmMxYTItNTZkYS0z ODY3LWJkMzUtN2RlMDU0ZGQ5OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyYDXm9HyS829N0QBOTHzbb8i2XpuXrZqk6khjg901uetKXCRFrkEgx 0NRgyIlxunA9/TJW2lo+UoXAdRC1Koto18z2m6cjed4C5EU4nUs9uGLCt8HNeVtv ZTXLr96eYObpi6ps+yYCKJBAgTeC4zBh3mKH7yn7gBwl29uoVyqy2UsG281PHglD G8yGuhWGA6mhf2FtAcQCB2HUo6wKh1EMwEQzKdFuWuUna4wHiG2rxXafo0WKAQ37 u4TdQElIlu7rcQLQRVBNEk91kRlPD19tlmnTHh/2HbvH9c6V1TDr8xmK1iispfmZ EDmgvJjcgqx4x9AYIQTR+amQSfDqTsg= -----END CERTIFICATE-----Generated at Sat Aug 9 05:40:06 2025 by rpki-client