$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/819c5221-84c4-37d4-9130-0bab1669b0d3.roa File: 819c5221-84c4-37d4-9130-0bab1669b0d3.roa (raw, json) Hash identifier: KNRWoPpKs4SIVN5oOafjq+iHX8irUkJ0tWvjc/xBCpI= Subject key identifier: 1A:26:73:5B:C6:8C:AE:5E:EF:DB:5F:0B:A6:42:27:80:02:9D:D0:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367413ED1FB4CADA0A5440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/819c5221-84c4-37d4-9130-0bab1669b0d3.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:74:13:ed:1f:b4:ca:da:0a:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d52daa78-d9e5-424e-9840-e81ee71f5c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:a8:65:3e:ff:bc:53:28:18:8f:8d:55:08: a8:0f:00:ab:1c:81:0e:bc:bb:85:2c:ab:ff:38:14: 5d:12:6d:5d:31:a6:f2:a3:e7:b3:93:ee:05:b6:6a: 9e:47:f5:e3:4d:28:53:bc:e6:ea:4b:8d:69:4b:28: 84:e1:e0:72:3a:80:cc:43:66:c2:05:48:7d:f0:84: ed:30:b0:7a:bc:9a:70:6a:6f:5a:4e:8a:e8:0c:6f: 10:70:1b:16:95:12:82:69:b0:8c:2b:2e:7d:79:61: 70:c1:d1:5e:be:1e:40:98:2e:a7:f0:97:92:ba:df: 22:4b:d7:c6:4b:df:fa:1a:87:2f:e5:1a:64:0d:ea: 6e:1d:32:ed:eb:93:55:eb:53:0d:0a:dd:32:16:4f: 2f:47:e1:99:69:0d:d5:4c:18:ba:79:5e:b9:af:28: cc:22:e2:14:d7:93:47:49:de:05:78:03:1e:0f:7c: d0:48:0c:e3:95:52:bc:c6:b5:b5:52:af:53:5b:17: 9f:27:40:73:ac:ad:2e:42:ab:50:40:e9:69:2f:c0: fa:1e:03:06:b3:0e:fa:bf:78:88:06:4f:1a:28:ec: 03:4c:bc:84:d2:c2:df:ba:4d:5d:0e:5e:19:f0:92: 1a:60:15:d0:98:1c:f9:ed:14:0f:75:d3:88:99:59: 53:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:26:73:5B:C6:8C:AE:5E:EF:DB:5F:0B:A6:42:27:80:02:9D:D0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/819c5221-84c4-37d4-9130-0bab1669b0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a2:9c:29:0e:f0:11:30:cf:1c:65:3c:53:2c:ca:92:60:9e: c3:34:69:07:22:e9:51:2a:0a:63:71:c3:d2:c1:1f:ee:ed:3b: 4a:29:67:eb:be:d2:b1:58:60:d9:e5:9c:a5:1b:6f:38:42:7b: 29:b5:f4:cc:76:c7:b6:86:04:46:8a:c1:82:4f:74:bc:c1:23: f4:13:3c:08:77:ab:49:41:cf:26:09:17:36:96:70:41:c5:09: 9f:62:ec:fd:2d:96:fe:b4:52:f2:a8:7e:a7:65:31:97:9e:f6: 69:cc:a0:42:98:54:e8:f9:ad:99:cc:40:61:f4:9a:4f:9c:84: 1c:10:03:13:09:de:9c:c4:29:4a:d3:58:5c:75:4a:01:50:d9: 4e:bc:e5:b9:cd:fb:c9:2b:1a:4f:94:37:32:15:95:be:0e:96: a7:93:47:d5:63:07:f1:e6:cb:65:ca:4b:d5:60:f9:15:0c:cf: 02:1f:5a:e7:3e:5f:bf:81:9a:4a:72:a0:1f:23:f8:90:01:20: 02:0b:3e:6c:8e:74:f0:d1:86:42:bb:55:f0:08:13:f6:b5:4c: 9e:7e:a4:74:60:53:41:d3:d3:54:fd:2b:6b:2b:14:09:27:90: a2:6d:0b:11:bb:dd:33:71:55:1f:c8:5d:63:94:d5:f0:cf:8d: 9f:43:4e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnQT7R+0ytoKVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDUyZGFhNzgtZDllNS00MjRlLTk4NDAtZTgxZWU3MWY1YzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE2oZT7/vFMoGI+NVQioDwCrHIEOvLuFLKv/ OBRdEm1dMabyo+ezk+4FtmqeR/XjTShTvObqS41pSyiE4eByOoDMQ2bCBUh98ITt MLB6vJpwam9aToroDG8QcBsWlRKCabCMKy59eWFwwdFevh5AmC6n8JeSut8iS9fG S9/6Gocv5RpkDepuHTLt65NV61MNCt0yFk8vR+GZaQ3VTBi6eV65ryjMIuIU15NH Sd4FeAMeD3zQSAzjlVK8xrW1Uq9TWxefJ0BzrK0uQqtQQOlpL8D6HgMGsw76v3iI Bk8aKOwDTLyE0sLfuk1dDl4Z8JIaYBXQmBz57RQPddOImVlT2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBomc1vGjK5e79tfC6ZCJ4ACndChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODE5YzUyMjEtODRjNC0z N2Q0LTkxMzAtMGJhYjE2NjliMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeinCkO8BEwzxxlPFMsypJgnsM0aQci6VEqCmNxw9LBH+7tO0opZ+u+ 0rFYYNnlnKUbbzhCeym19Mx2x7aGBEaKwYJPdLzBI/QTPAh3q0lBzyYJFzaWcEHF CZ9i7P0tlv60UvKofqdlMZee9mnMoEKYVOj5rZnMQGH0mk+chBwQAxMJ3pzEKUrT WFx1SgFQ2U685bnN+8krGk+UNzIVlb4OlqeTR9VjB/Hmy2XKS9Vg+RUMzwIfWuc+ X7+BmkpyoB8j+JABIAILPmyOdPDRhkK7VfAIE/a1TJ5+pHRgU0HT01T9K2srFAkn kKJtCxG73TNxVR/IXWOU1fDPjZ9DTpw= -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:57 2025 by rpki-client