$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7aa839cb-4584-3eb7-9fe3-d5fe874740f7.roa File: 7aa839cb-4584-3eb7-9fe3-d5fe874740f7.roa (raw, json) Hash identifier: DP7DvRRzggeorNQnAEkgK5LC4zgzjd2vNTv4jJ2Kf+M= Subject key identifier: F2:AC:B8:FB:82:97:60:17:57:8B:DC:8D:97:4C:F6:E8:C8:81:C7:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636761918216D62A8BA5E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7aa839cb-4584-3eb7-9fe3-d5fe874740f7.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.221.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:76:19:18:21:6d:62:a8:ba:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d6fbf858-fd46-47eb-a2ed-074530d2149c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8f:69:95:10:de:8d:2c:9d:1c:4a:c3:fe:db: c4:7e:a2:c4:4e:a7:f0:1c:7f:64:f8:de:64:e2:79: 7f:a8:f1:32:e7:75:aa:6f:ea:57:b6:35:0f:7d:85: c7:fd:36:1e:11:00:7f:e8:55:1a:1e:9c:18:2d:cf: e6:28:7a:d4:dd:aa:ea:5d:d7:71:c2:aa:02:bc:11: 13:f3:a8:98:dd:df:49:8a:a7:ec:15:d9:80:d8:49: 5a:dc:3b:a2:3c:1f:b5:77:d3:72:46:c7:b4:6e:ce: f3:8a:86:e5:79:9c:e7:43:e1:fa:12:c1:07:0d:ad: ad:1d:4a:82:aa:ec:b5:4b:77:a1:97:6d:28:a6:e2: 97:45:26:e8:31:75:26:ee:6b:49:d3:66:ec:a5:f4: 18:69:bf:df:17:c0:dc:6b:24:1e:2c:b3:c9:14:75: 64:5b:6c:a9:25:85:66:68:50:89:31:49:d4:79:23: 5b:d9:68:8e:d7:9b:21:8d:40:ba:ac:18:d3:a8:27: e2:d7:b7:67:6e:9a:d9:d3:a1:0f:80:0c:54:72:8b: c5:dc:58:20:98:cd:b2:29:5a:dc:1b:0b:b9:9a:35: 43:34:12:ce:94:f4:e0:a4:81:81:0e:f1:fb:d9:7d: e1:a6:65:99:cc:71:e1:16:ee:34:15:4f:05:ca:a2: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AC:B8:FB:82:97:60:17:57:8B:DC:8D:97:4C:F6:E8:C8:81:C7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7aa839cb-4584-3eb7-9fe3-d5fe874740f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:80:13:1c:8f:a8:33:1b:e9:d3:bd:f8:50:01:6b:5b:de:5f: 08:bf:7c:98:22:71:58:e5:3c:6e:26:76:e2:ff:6b:c3:0d:23: 66:8c:40:28:e8:05:83:0b:29:e6:56:ff:b7:ab:b2:e3:c7:e0: 61:e4:d1:b5:ff:3a:1d:24:e3:60:5a:c0:6e:9e:62:7f:54:ae: b8:d9:cb:5b:7b:42:fa:ba:85:52:4c:61:c5:df:2d:7d:b6:0f: 16:fe:20:ef:3b:5c:96:05:66:b2:59:45:3e:61:b9:64:86:12: 29:00:62:7e:50:fc:bc:2b:24:42:ef:a1:ae:8e:91:2d:c0:53: b1:2d:12:dd:6e:c2:5b:ed:ab:49:5a:7e:ff:cb:d8:cc:88:86: be:03:55:09:a4:b2:70:ad:85:82:a2:39:10:f0:94:61:13:9e: 0d:32:b2:99:59:d4:8b:ac:6d:1e:90:09:b6:4d:fa:66:c9:38: 1b:3b:ec:8a:7a:52:82:3b:20:10:23:90:57:eb:ee:81:dd:c2: cb:b0:e6:be:22:38:b2:4f:06:91:a6:e6:38:c1:5d:67:36:6f: a6:33:f6:a2:96:f1:a2:7a:23:8b:85:cf:91:03:a7:e7:23:35: 31:67:28:94:f5:9e:3f:de:b1:ea:ad:f2:e5:4a:b3:a4:bb:44: f7:b0:b5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnYZGCFtYqi6XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDZmYmY4NTgtZmQ0Ni00N2ViLWEyZWQtMDc0NTMwZDIxNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I9plRDejSydHErD/tvEfqLETqfwHH9k+N5k 4nl/qPEy53Wqb+pXtjUPfYXH/TYeEQB/6FUaHpwYLc/mKHrU3arqXddxwqoCvBET 86iY3d9JiqfsFdmA2Ela3DuiPB+1d9NyRse0bs7ziobleZznQ+H6EsEHDa2tHUqC quy1S3ehl20opuKXRSboMXUm7mtJ02bspfQYab/fF8DcayQeLLPJFHVkW2ypJYVm aFCJMUnUeSNb2WiO15shjUC6rBjTqCfi17dnbprZ06EPgAxUcovF3FggmM2yKVrc Gwu5mjVDNBLOlPTgpIGBDvH72X3hpmWZzHHhFu40FU8FyqIUAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKsuPuCl2AXV4vcjZdM9ujIgcd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2FhODM5Y2ItNDU4NC0z ZWI3LTlmZTMtZDVmZTg3NDc0MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuAExyPqDMb6dO9+FABa1veXwi/fJgicVjlPG4mduL/a8MNI2aMQCjo BYMLKeZW/7ersuPH4GHk0bX/Oh0k42BawG6eYn9UrrjZy1t7Qvq6hVJMYcXfLX22 Dxb+IO87XJYFZrJZRT5huWSGEikAYn5Q/LwrJELvoa6OkS3AU7EtEt1uwlvtq0la fv/L2MyIhr4DVQmksnCthYKiORDwlGETng0ysplZ1IusbR6QCbZN+mbJOBs77Ip6 UoI7IBAjkFfr7oHdwsuw5r4iOLJPBpGm5jjBXWc2b6Yz9qKW8aJ6I4uFz5EDp+cj NTFnKJT1nj/eseqt8uVKs6S7RPewtXA= -----END CERTIFICATE-----Generated at Fri Aug 8 20:53:32 2025 by rpki-client