$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7004efa9-c950-3606-9c9f-1ca2407017e1.roa File: 7004efa9-c950-3606-9c9f-1ca2407017e1.roa (raw, json) Hash identifier: IlQ5F4487ySZ/HOespeezK21gTfyP03bbR5USgP9hIo= Subject key identifier: 7B:37:AD:DA:2F:B1:A0:95:A4:9B:7C:11:C4:DB:F8:9D:8A:06:F0:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636702DE420BB7753BD9840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7004efa9-c950-3606-9c9f-1ca2407017e1.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:70:2d:e4:20:bb:77:53:bd:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=2079c473-c09d-4e92-ae1e-ca9a5b9719fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:a5:f0:56:a7:46:f6:9d:a2:9d:30:21:2d: a4:0e:b8:39:f2:d6:15:3d:4b:50:92:df:88:76:48: 07:fd:65:ff:55:b1:e8:8c:d2:ad:35:fc:c3:dc:d3: f7:99:58:ce:ae:6a:71:6c:1c:c8:83:94:c1:cf:fe: ba:dc:67:ed:01:54:e4:d9:5f:66:cf:8c:fc:81:8c: 27:29:c4:db:cf:e5:a3:0b:b6:97:8a:93:fc:e2:a9: 74:e0:c2:9e:67:b0:52:26:58:12:f9:6f:f5:59:e5: fb:dc:b1:66:aa:b9:f2:fe:35:8f:95:ab:72:4c:eb: fe:06:96:9f:37:cd:c2:0e:2a:06:cc:36:74:a0:a4: b9:e5:a0:7f:30:5d:27:1f:fa:20:8e:8e:49:6e:13: 28:ff:42:59:de:9e:8e:33:aa:c4:4d:af:2f:dc:9b: ee:16:5a:c7:3e:a2:4d:d0:e5:27:74:96:ac:74:ba: 2b:55:86:19:86:08:1f:b4:a5:4e:2e:59:47:42:24: 4f:82:b6:ab:f8:21:ce:93:af:22:33:19:be:ef:6e: 6d:28:f6:45:8b:20:02:da:46:1b:30:3e:df:aa:60: af:b3:b2:3c:22:8a:02:fb:56:8b:86:ac:95:b4:ae: 4c:49:28:17:2e:42:bb:aa:eb:a6:ed:d0:03:29:37: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:37:AD:DA:2F:B1:A0:95:A4:9B:7C:11:C4:DB:F8:9D:8A:06:F0:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7004efa9-c950-3606-9c9f-1ca2407017e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1b:a8:a7:77:b8:76:94:4d:c1:62:5d:90:b6:6c:4b:10:11: 96:b1:db:a7:be:c3:ff:76:24:29:e3:d1:99:d4:cd:84:ed:5a: 47:6e:b5:a3:1e:78:40:a4:8a:d7:60:56:55:37:b1:58:e4:51: 65:57:5f:db:09:4c:ab:ae:3b:d0:bf:9c:a1:c2:e2:08:70:e8: fa:5b:2b:c9:32:53:a9:a4:e5:ea:70:6f:39:86:ee:2f:4e:8c: 4f:ab:d3:fd:30:58:cc:14:c5:3a:e5:2a:d5:91:a8:76:0a:2c: 39:d5:12:88:7e:d4:7e:6d:b9:3e:96:96:02:17:cd:88:1a:68: 13:d0:b8:98:bd:40:87:14:ec:47:ce:cf:79:bc:31:fe:ac:55: 24:a7:fb:60:21:05:e6:98:40:3d:fc:c4:1c:fc:d3:8e:c9:99: 30:0a:87:54:2f:6f:5b:e8:da:82:86:7a:b5:d3:93:2f:44:95: 57:00:5a:cc:b1:64:76:5c:28:26:c9:b1:6b:11:28:fd:0a:d0: 0d:24:a1:a3:d3:a8:b0:ff:a3:78:f4:25:68:56:ab:d9:17:79: a3:79:b3:3d:b4:67:78:6f:d5:4e:76:d0:b1:75:2b:80:e5:31: db:2b:2c:df:44:37:7a:7f:a5:a3:b1:4d:55:b2:87:73:50:90: 2a:7c:0b:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnAt5CC7d1O9mEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MjA3OWM0NzMtYzA5ZC00ZTkyLWFlMWUtY2E5YTViOTcxOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocul8FanRvadop0wIS2kDrg58tYVPUtQkt+I dkgH/WX/VbHojNKtNfzD3NP3mVjOrmpxbBzIg5TBz/663GftAVTk2V9mz4z8gYwn KcTbz+WjC7aXipP84ql04MKeZ7BSJlgS+W/1WeX73LFmqrny/jWPlatyTOv+Bpaf N83CDioGzDZ0oKS55aB/MF0nH/ogjo5JbhMo/0JZ3p6OM6rETa8v3JvuFlrHPqJN 0OUndJasdLorVYYZhggftKVOLllHQiRPgrar+CHOk68iMxm+725tKPZFiyAC2kYb MD7fqmCvs7I8IooC+1aLhqyVtK5MSSgXLkK7quum7dADKTdN3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHs3rdovsaCVpJt8EcTb+J2KBvDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzAwNGVmYTktYzk1MC0z NjA2LTljOWYtMWNhMjQwNzAxN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQbqKd3uHaUTcFiXZC2bEsQEZax26e+w/92JCnj0ZnUzYTtWkdutaMe eECkitdgVlU3sVjkUWVXX9sJTKuuO9C/nKHC4ghw6PpbK8kyU6mk5epwbzmG7i9O jE+r0/0wWMwUxTrlKtWRqHYKLDnVEoh+1H5tuT6WlgIXzYgaaBPQuJi9QIcU7EfO z3m8Mf6sVSSn+2AhBeaYQD38xBz8047JmTAKh1Qvb1vo2oKGerXTky9ElVcAWsyx ZHZcKCbJsWsRKP0K0A0koaPTqLD/o3j0JWhWq9kXeaN5sz20Z3hv1U520LF1K4Dl MdsrLN9EN3p/paOxTVWyh3NQkCp8C0E= -----END CERTIFICATE-----Generated at Sat Aug 9 14:23:02 2025 by rpki-client