$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cb9355c-9a47-31ae-8118-c95a5a777323.roa File: 8cb9355c-9a47-31ae-8118-c95a5a777323.roa (raw, json) Hash identifier: C/+Ya9ZNytuDOwtpxWata46udT+LKa5ZXGUSkfPO5Uk= Subject key identifier: AA:51:22:74:FD:DB:1F:FE:75:4A:66:77:EF:BC:5D:3B:52:EC:1F:A8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636729161D7DB4FC4082988 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cb9355c-9a47-31ae-8118-c95a5a777323.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:72:91:61:d7:db:4f:c4:08:29:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=903fd75b-37d5-4ec7-ad74-7647176cfa76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:ba:72:9b:91:bf:1c:77:b6:15:3d:52:db: 87:d1:63:f5:08:c5:31:17:6d:b2:c0:68:31:92:64: 98:ae:8e:0e:5f:74:81:36:b1:ba:ed:86:79:b1:37: fc:92:84:5f:ed:8f:30:77:f2:8a:db:c3:3c:ce:a9: b6:b9:c3:f0:18:ee:d7:1e:24:f2:6e:3b:32:a1:76: 65:92:fe:41:e2:d9:9d:94:1e:e7:9b:2b:86:61:cd: 1d:8b:ea:c0:c8:38:70:bb:5d:81:b4:0d:83:0f:9c: e1:98:69:4b:bd:68:dd:ef:3e:51:d7:51:3e:57:de: 98:1b:d7:a8:b8:fd:20:32:9a:35:14:73:3e:30:01: ff:db:79:e5:21:9f:80:d7:e0:e3:91:8e:c9:32:0c: f1:3d:2d:bf:39:7c:ee:86:d2:3c:94:d3:11:d6:57: 1d:2a:1c:8a:a2:12:f8:da:0b:55:da:d4:04:87:1f: 66:97:a6:3f:67:ad:77:92:84:c5:94:47:9e:e7:9d: 98:e0:0d:a3:f1:ae:a5:49:13:58:2b:e8:82:78:6f: e1:23:a1:43:53:f5:08:19:74:5b:84:ad:1e:e9:7d: 9c:7e:34:32:b1:b3:04:5f:64:fc:08:63:fb:5a:dc: 27:50:f2:dd:3f:d3:81:25:3a:ed:0e:56:f5:03:03: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:51:22:74:FD:DB:1F:FE:75:4A:66:77:EF:BC:5D:3B:52:EC:1F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cb9355c-9a47-31ae-8118-c95a5a777323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:75:2b:7e:72:a0:d3:4f:01:25:5d:fb:32:4b:90:9b:f1:27: 2f:41:4a:77:5e:67:ee:25:86:68:6f:5a:d3:88:f7:d3:5d:72: a2:40:67:e4:8a:d7:8e:4e:d9:cc:6f:57:e4:f3:dd:34:f6:00: e7:c5:e6:08:7b:bf:d6:0d:3a:94:f5:78:5a:62:0f:e6:6a:5a: 7c:12:93:f0:22:b4:89:f2:81:5a:cd:22:a6:45:30:37:85:08: 20:1c:62:ea:a0:a1:f3:ea:f7:3d:11:5e:2f:78:23:47:99:3b: 22:23:70:44:79:39:f6:3b:a8:23:ee:2b:9c:27:86:68:b5:ca: 79:3d:be:27:77:80:b4:64:47:e8:c9:2b:a4:a5:fa:54:42:ab: d3:b8:a1:8f:14:d8:5b:b6:aa:94:75:de:b9:55:6c:98:c5:53: 86:87:b4:77:ee:3d:69:a7:07:a8:54:9b:9d:93:59:69:95:26: af:4d:47:e0:c6:fe:b8:a0:62:00:52:fb:18:7f:3d:73:4e:f0: fc:df:55:0f:85:4d:c7:3f:54:36:10:57:78:57:59:47:e9:2d: 5a:03:db:a6:0d:c8:0d:39:68:46:1b:5b:3b:44:29:f3:b5:a4: d0:f7:1a:bd:03:7c:d4:44:b7:e9:bd:47:bb:e8:56:ec:b0:23: c9:3f:1c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnKRYdfbT8QIKYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OTAzZmQ3NWItMzdkNS00ZWM3LWFkNzQtNzY0NzE3NmNmYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqe6cpuRvxx3thU9UtuH0WP1CMUxF22ywGgx kmSYro4OX3SBNrG67YZ5sTf8koRf7Y8wd/KK28M8zqm2ucPwGO7XHiTybjsyoXZl kv5B4tmdlB7nmyuGYc0di+rAyDhwu12BtA2DD5zhmGlLvWjd7z5R11E+V96YG9eo uP0gMpo1FHM+MAH/23nlIZ+A1+DjkY7JMgzxPS2/OXzuhtI8lNMR1lcdKhyKohL4 2gtV2tQEhx9ml6Y/Z613koTFlEee552Y4A2j8a6lSRNYK+iCeG/hI6FDU/UIGXRb hK0e6X2cfjQysbMEX2T8CGP7WtwnUPLdP9OBJTrtDlb1AwN27wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpRInT92x/+dUpmd++8XTtS7B+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGNiOTM1NWMtOWE0Ny0z MWFlLTgxMTgtYzk1YTVhNzc3MzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB51K35yoNNPASVd+zJLkJvxJy9BSndeZ+4lhmhvWtOI99NdcqJAZ+SK 145O2cxvV+Tz3TT2AOfF5gh7v9YNOpT1eFpiD+ZqWnwSk/AitInygVrNIqZFMDeF CCAcYuqgofPq9z0RXi94I0eZOyIjcER5OfY7qCPuK5wnhmi1ynk9vid3gLRkR+jJ K6Sl+lRCq9O4oY8U2Fu2qpR13rlVbJjFU4aHtHfuPWmnB6hUm52TWWmVJq9NR+DG /rigYgBS+xh/PXNO8PzfVQ+FTcc/VDYQV3hXWUfpLVoD26YNyA05aEYbWztEKfO1 pND3Gr0DfNREt+m9R7voVuywI8k/HN8= -----END CERTIFICATE-----Generated at Fri Aug 8 19:34:10 2025 by rpki-client