$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f982281-ce69-3f28-9de6-2a19d2df3daa.roa File: 6f982281-ce69-3f28-9de6-2a19d2df3daa.roa (raw, json) Hash identifier: lAP9rr2e+nCLgzuEGKLHevuvKpKRJk6PkdB/voSSA2I= Subject key identifier: 0C:97:42:1B:1F:E4:58:1E:2C:68:D1:CD:15:60:E5:32:66:89:AF:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636737631C0F9EC0DC11D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f982281-ce69-3f28-9de6-2a19d2df3daa.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:73:76:31:c0:f9:ec:0d:c1:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8c7af2ab-390e-4029-be8a-09e4c6ce4ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:fd:ee:b8:98:a2:4d:c6:41:e8:95:eb:8e: 71:3b:3b:2f:5d:c4:e1:80:0a:13:f9:d7:33:a2:31: 5b:0e:64:8c:75:e3:dd:b5:f7:77:37:36:42:4e:5e: c6:bc:16:da:4a:53:5d:61:98:7e:44:a3:bd:94:b6: 96:f4:60:3b:60:2f:54:e7:3a:2b:ae:7d:3c:d4:55: dd:07:86:71:a8:e6:3f:dd:a0:0d:2d:1d:8d:03:c1: 06:90:10:fb:e4:9d:f8:81:46:6f:ca:e3:f9:3f:99: 04:f3:ba:74:a7:74:4f:f1:13:6b:73:1e:96:a4:93: 00:5c:30:14:be:73:ad:b3:65:6e:48:a1:f1:aa:f7: e7:04:c8:6f:92:d6:ba:29:49:ef:18:15:9c:9b:ca: d8:9f:e0:1c:8e:3b:5f:a2:65:23:44:48:46:8c:6f: 9d:cd:9c:05:79:66:2a:40:18:65:41:ef:84:29:82: 57:4a:6d:d8:f5:64:11:fa:a6:01:00:5d:71:3c:b3: 10:1e:1c:57:2c:42:5a:7b:a2:35:6c:13:8a:b9:77: 9c:99:b8:01:d4:50:85:0d:d3:9d:cc:a0:00:5a:57: 09:4d:91:58:4a:21:80:05:31:f8:df:00:82:e5:43: 61:20:9b:61:b9:4c:97:cb:44:08:ad:48:67:1a:72: fb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:97:42:1B:1F:E4:58:1E:2C:68:D1:CD:15:60:E5:32:66:89:AF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f982281-ce69-3f28-9de6-2a19d2df3daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:4c:9e:8a:45:92:52:ae:bb:7b:43:a2:c8:0b:fa:40:96:af: cf:04:97:34:62:17:99:2d:c8:88:f8:fa:39:c4:42:1c:72:fa: 3f:64:a1:e1:e2:ac:f1:ff:50:07:de:6d:ae:54:bd:c3:d5:2b: 6a:05:16:97:d6:13:20:6d:0a:2c:d6:d4:b6:fa:59:94:88:ee: 06:cb:ae:60:ab:d4:c3:49:a6:03:7c:ce:0b:99:e9:a3:51:bb: d0:32:28:8c:fd:be:8e:4e:6a:66:5f:dc:85:90:7f:6d:12:4f: 93:50:1c:48:93:8c:9e:5d:be:e0:4a:d2:2b:56:28:b3:89:90: 98:f4:fa:c8:fa:ae:c3:c8:1d:0d:43:95:8c:95:7a:b0:39:79: 78:08:6e:36:24:eb:71:03:14:31:96:11:f1:6d:bb:84:ad:e2: 22:30:2f:72:38:40:98:22:f0:10:16:73:e1:ec:47:19:ba:a9: ca:43:58:8d:99:3d:9b:1e:af:d2:4d:cb:98:5c:2e:5d:c6:19: ef:c5:f5:3c:24:a4:0d:7c:b4:9e:f2:bc:18:86:df:90:4b:d1: f1:85:f7:12:be:ce:88:26:f2:5a:7d:41:62:d1:31:df:15:37: 27:02:9b:24:ce:9a:47:fe:88:7b:a4:64:b3:07:9a:1c:d7:f2: 18:59:1c:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnN2McD57A3BHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OGM3YWYyYWItMzkwZS00MDI5LWJlOGEtMDllNGM2Y2U0ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBn97riYok3GQeiV645xOzsvXcThgAoT+dcz ojFbDmSMdePdtfd3NzZCTl7GvBbaSlNdYZh+RKO9lLaW9GA7YC9U5zorrn081FXd B4ZxqOY/3aANLR2NA8EGkBD75J34gUZvyuP5P5kE87p0p3RP8RNrcx6WpJMAXDAU vnOts2VuSKHxqvfnBMhvkta6KUnvGBWcm8rYn+AcjjtfomUjREhGjG+dzZwFeWYq QBhlQe+EKYJXSm3Y9WQR+qYBAF1xPLMQHhxXLEJae6I1bBOKuXecmbgB1FCFDdOd zKAAWlcJTZFYSiGABTH43wCC5UNhIJthuUyXy0QIrUhnGnL7awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyXQhsf5FgeLGjRzRVg5TJmia+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmY5ODIyODEtY2U2OS0z ZjI4LTlkZTYtMmExOWQyZGYzZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9MnopFklKuu3tDosgL+kCWr88ElzRiF5ktyIj4+jnEQhxy+j9koeHi rPH/UAfeba5UvcPVK2oFFpfWEyBtCizW1Lb6WZSI7gbLrmCr1MNJpgN8zguZ6aNR u9AyKIz9vo5OamZf3IWQf20ST5NQHEiTjJ5dvuBK0itWKLOJkJj0+sj6rsPIHQ1D lYyVerA5eXgIbjYk63EDFDGWEfFtu4St4iIwL3I4QJgi8BAWc+HsRxm6qcpDWI2Z PZser9JNy5hcLl3GGe/F9TwkpA18tJ7yvBiG35BL0fGF9xK+zogm8lp9QWLRMd8V NycCmyTOmkf+iHukZLMHmhzX8hhZHHA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:29:11 2025 by rpki-client