$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85f9d3d8-03ee-386b-8693-65dd94833163.roa File: 85f9d3d8-03ee-386b-8693-65dd94833163.roa (raw, json) Hash identifier: JKkGdVXoxcViJUshndoqNNZLxyx4VL7RNcT36cCn04w= Subject key identifier: 72:14:57:F6:B4:FD:7A:40:56:E6:AA:F0:4A:51:4F:E9:82:F5:4E:AA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364C08CD5E62EB91BC0B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85f9d3d8-03ee-386b-8693-65dd94833163.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.218.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4c:08:cd:5e:62:eb:91:bc:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ab67a628-b74f-46c9-bac5-ad573a2e9119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:77:af:c5:36:e7:16:69:cf:da:b5:6f:85: 4c:28:07:f2:22:8d:af:70:12:dc:c7:ec:cb:62:1a: 95:50:96:da:3b:28:10:90:e0:f2:18:c9:48:6e:46: 8e:90:26:8f:09:f4:54:d8:af:28:22:67:02:21:5b: 6a:44:38:9b:b7:79:59:fb:56:72:9f:96:48:f4:f6: a0:2e:15:e1:62:14:65:d9:33:ae:20:05:d4:c2:6d: 2e:76:76:e9:37:f3:93:49:83:02:5e:28:1d:a6:3e: c0:01:71:cc:48:4c:02:7d:10:a3:72:8c:4b:a8:c7: e6:e6:81:92:fc:63:cf:d9:31:6e:08:46:c1:c7:43: c4:c3:2a:68:e5:97:36:2f:f2:10:d6:33:d9:57:c2: 92:06:5b:9e:fa:0e:5a:b7:0f:bb:9e:b1:aa:27:a4: 17:35:b8:70:2f:09:85:c8:dd:38:fc:23:48:38:47: 54:bf:ba:74:17:65:38:1a:13:9b:e1:d2:7c:a6:ee: 01:a7:a8:2e:45:98:8f:7e:55:5e:5a:50:fb:74:d2: c9:e6:52:77:f5:f4:46:8c:88:8e:c2:82:0e:30:8e: 4e:8b:e6:84:6e:bf:0c:c4:e4:92:4d:de:d2:65:92: c8:ab:82:72:16:7d:ff:07:1f:52:7f:72:ee:55:b7: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:14:57:F6:B4:FD:7A:40:56:E6:AA:F0:4A:51:4F:E9:82:F5:4E:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85f9d3d8-03ee-386b-8693-65dd94833163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3c:9b:90:39:01:45:fd:c1:c6:2f:da:9a:43:43:5b:c3:c7: f3:9b:d8:58:89:53:84:3a:43:00:a7:cf:16:8f:8a:a1:54:11: 24:8f:72:7d:1c:f0:32:9b:98:4c:61:76:44:19:dd:12:66:6e: 2e:15:08:09:d7:49:62:67:b0:5a:6e:3b:28:d3:cb:fd:b7:c8: 03:cb:97:50:93:b5:21:f6:0f:77:df:59:aa:63:a2:25:6d:95: 48:08:e7:bc:0d:38:9b:08:65:51:10:76:35:4f:00:73:d4:03: 42:41:57:7b:df:1f:92:5f:ac:a1:af:45:04:8e:8d:f9:dc:ca: 8a:82:0f:5b:15:60:6f:91:54:b1:70:15:b7:4e:d2:72:5c:e0: 40:79:3f:02:93:3c:53:fc:10:09:37:71:db:37:53:3d:54:ac: 2c:9e:10:ca:0d:2e:5f:d0:c5:09:a7:29:bb:f0:cc:4a:38:51: 33:96:ba:72:7e:75:82:71:24:29:3b:f7:35:5d:4c:43:e9:aa: aa:98:65:66:e1:16:e5:1a:e3:49:fc:9f:3d:da:d1:3e:3f:79: 19:64:78:6e:e6:0d:3c:e7:c3:aa:f7:6b:16:d0:78:f4:8b:16: 1a:05:53:b5:01:71:e9:41:0c:a5:5f:a3:9f:61:c0:6c:4a:5e: dd:a8:5f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkwIzV5i65G8C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YWI2N2E2MjgtYjc0Zi00NmM5LWJhYzUtYWQ1NzNhMmU5MTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZB3r8U25xZpz9q1b4VMKAfyIo2vcBLcx+zL YhqVUJbaOygQkODyGMlIbkaOkCaPCfRU2K8oImcCIVtqRDibt3lZ+1Zyn5ZI9Pag LhXhYhRl2TOuIAXUwm0udnbpN/OTSYMCXigdpj7AAXHMSEwCfRCjcoxLqMfm5oGS /GPP2TFuCEbBx0PEwypo5Zc2L/IQ1jPZV8KSBlue+g5atw+7nrGqJ6QXNbhwLwmF yN04/CNIOEdUv7p0F2U4GhOb4dJ8pu4Bp6guRZiPflVeWlD7dNLJ5lJ39fRGjIiO woIOMI5Oi+aEbr8MxOSSTd7SZZLIq4JyFn3/Bx9Sf3LuVbeYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIUV/a0/XpAVuaq8EpRT+mC9U6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODVmOWQzZDgtMDNlZS0z ODZiLTg2OTMtNjVkZDk0ODMzMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE8m5A5AUX9wcYv2ppDQ1vDx/Ob2FiJU4Q6QwCnzxaPiqFUESSPcn0c 8DKbmExhdkQZ3RJmbi4VCAnXSWJnsFpuOyjTy/23yAPLl1CTtSH2D3ffWapjoiVt lUgI57wNOJsIZVEQdjVPAHPUA0JBV3vfH5JfrKGvRQSOjfncyoqCD1sVYG+RVLFw FbdO0nJc4EB5PwKTPFP8EAk3cds3Uz1UrCyeEMoNLl/QxQmnKbvwzEo4UTOWunJ+ dYJxJCk79zVdTEPpqqqYZWbhFuUa40n8nz3a0T4/eRlkeG7mDTznw6r3axbQePSL FhoFU7UBcelBDKVfo59hwGxKXt2oX3A= -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:51 2025 by rpki-client