$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88cb9afe-96f0-3b4a-a632-17acfc8a8736.roa File: 88cb9afe-96f0-3b4a-a632-17acfc8a8736.roa (raw, json) Hash identifier: MaAjTVUVqZ/UqaeRPpcTu46gspRQjiuu2BGTcWxt0k0= Subject key identifier: DD:EE:49:8C:6E:DF:79:79:EB:89:EE:46:D6:F7:F1:15:89:37:4C:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364B4F61F13833D66BC880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88cb9afe-96f0-3b4a-a632-17acfc8a8736.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.218.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4b:4f:61:f1:38:33:d6:6b:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=15cb4bb5-f41e-4727-96e7-535e3e1f9298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:44:ea:5e:4f:f0:b6:a0:52:02:c4:94:51:cb: 63:46:39:78:8d:4f:42:bf:b8:9c:77:10:14:61:da: de:a7:c4:41:29:98:83:88:48:71:c2:92:dd:69:f3: a1:46:60:99:9b:1e:b3:69:f7:0d:5f:01:44:ed:c4: 30:dd:83:9a:fd:b6:1a:93:a7:cd:3f:9e:99:f9:9e: 20:68:7b:80:a0:aa:6c:e4:b2:48:0c:fe:70:ed:6c: 7e:ca:4f:12:b4:ba:49:ea:a8:17:5a:52:9b:b6:59: 02:ad:11:cf:0e:c7:78:1e:d1:4d:ac:db:10:8b:99: 02:e9:1e:07:61:e3:34:fc:7c:2e:60:a7:1e:91:8b: 8b:46:22:a0:8a:0d:c9:9e:8e:54:a9:22:39:ba:3f: 9c:a6:72:0d:10:18:b8:da:2b:06:82:d4:e6:c6:35: 19:97:8e:89:63:f3:be:90:b4:cd:b4:61:50:da:1e: c1:3e:8c:bd:84:84:cb:34:6d:5c:27:cc:1e:90:07: 34:98:cc:e3:79:16:c1:aa:ab:2d:4f:f6:84:26:e3: 3c:a4:f7:45:99:84:7c:9b:a2:6a:4e:35:00:6f:64: dd:24:e2:5c:c9:01:ee:a3:04:6d:54:dc:f4:00:80: b0:65:0e:e7:8a:08:e9:3d:90:da:49:69:25:06:a7: 9d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:49:8C:6E:DF:79:79:EB:89:EE:46:D6:F7:F1:15:89:37:4C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88cb9afe-96f0-3b4a-a632-17acfc8a8736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:43:cb:bb:1c:44:34:ab:1e:3b:21:d8:e5:a1:b4:e7:eb:e6: 45:b8:54:b8:63:b0:94:94:3b:b7:00:37:5d:dc:72:f8:aa:44: 93:f9:99:54:d1:35:a3:a4:5b:c8:f5:12:59:e8:57:16:78:95: 26:5a:68:0d:0a:18:1f:82:ad:00:6c:b4:72:e0:46:14:67:45: f8:00:2e:2e:bc:8c:7c:ab:19:e7:ca:8b:a7:c0:97:4f:27:26: be:4c:9c:df:11:19:29:47:58:73:9c:b3:c9:d2:20:9b:bc:8a: 5c:18:12:8d:4b:0f:1d:a0:5a:66:fd:3d:a1:ba:a7:dc:7b:4b: 52:68:29:41:b0:21:a1:f5:9b:ab:af:95:d5:78:58:c0:2f:b6: f1:98:6c:e7:61:9c:c4:bb:4f:87:93:af:f5:7f:59:2e:0b:0a: d0:d1:a0:91:94:d4:c5:a1:ba:2c:c1:88:b0:f6:b2:49:3e:3b: cc:fb:e1:3b:6d:79:cc:3a:e2:15:f0:e3:be:bb:4c:e9:0c:89: d7:8d:fa:e8:45:68:19:de:34:ec:d1:b5:53:0a:00:70:6e:49: 46:43:8b:d9:df:fe:53:75:48:fe:d4:23:92:33:6e:b9:39:80: 8a:e2:bd:7b:c8:5a:48:e3:34:55:0c:e2:a2:d8:29:84:ea:e7: dd:8d:9b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNktPYfE4M9ZryIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MTVjYjRiYjUtZjQxZS00NzI3LTk2ZTctNTM1ZTNlMWY5Mjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUTqXk/wtqBSAsSUUctjRjl4jU9Cv7icdxAU Ydrep8RBKZiDiEhxwpLdafOhRmCZmx6zafcNXwFE7cQw3YOa/bYak6fNP56Z+Z4g aHuAoKps5LJIDP5w7Wx+yk8StLpJ6qgXWlKbtlkCrRHPDsd4HtFNrNsQi5kC6R4H YeM0/HwuYKcekYuLRiKgig3Jno5UqSI5uj+cpnINEBi42isGgtTmxjUZl46JY/O+ kLTNtGFQ2h7BPoy9hITLNG1cJ8wekAc0mMzjeRbBqqstT/aEJuM8pPdFmYR8m6Jq TjUAb2TdJOJcyQHuowRtVNz0AICwZQ7nigjpPZDaSWklBqedOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3uSYxu33l564nuRtb38RWJN0wDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODhjYjlhZmUtOTZmMC0z YjRhLWE2MzItMTdhY2ZjOGE4NzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdDy7scRDSrHjsh2OWhtOfr5kW4VLhjsJSUO7cAN13ccviqRJP5mVTR NaOkW8j1ElnoVxZ4lSZaaA0KGB+CrQBstHLgRhRnRfgALi68jHyrGefKi6fAl08n Jr5MnN8RGSlHWHOcs8nSIJu8ilwYEo1LDx2gWmb9PaG6p9x7S1JoKUGwIaH1m6uv ldV4WMAvtvGYbOdhnMS7T4eTr/V/WS4LCtDRoJGU1MWhuizBiLD2skk+O8z74Ttt ecw64hXw4767TOkMideN+uhFaBneNOzRtVMKAHBuSUZDi9nf/lN1SP7UI5Izbrk5 gIrivXvIWkjjNFUM4qLYKYTq592Nm/M= -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:14 2025 by rpki-client