$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d860fb2-3bd9-388c-9d11-e0109ebd148b.roa File: 8d860fb2-3bd9-388c-9d11-e0109ebd148b.roa (raw, json) Hash identifier: riEFFjddgT8oZZep6XmEPX4sL8k0z6sHL5MakP4kr9A= Subject key identifier: 13:66:39:C2:5C:60:49:34:99:03:61:48:B4:89:F6:87:FB:80:34:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A66C07B019BE8A2B21BA4D780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d860fb2-3bd9-388c-9d11-e0109ebd148b.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 22773 IP address blocks: 72.214.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:7b:01:9b:e8:a2:b2:1b:a4:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=2d77944d-f97c-4f16-bfa2-7084661fd9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8e:36:3f:97:94:ce:ef:1f:a5:59:c6:c0:49: 67:ae:5f:91:a5:61:fe:4c:01:76:17:ef:f5:2f:76: 7b:c6:db:52:a8:28:3c:a9:f6:fc:34:f1:5a:d4:96: fe:9b:7f:45:b5:41:a7:aa:4b:fe:e0:d0:14:a7:2a: b6:27:19:5c:30:36:5d:2f:aa:f7:7b:c9:92:22:7e: fd:db:95:dc:1f:ac:56:ed:59:01:aa:a6:35:14:9d: a1:1e:99:5d:d7:5a:6f:0c:94:fc:44:d9:f0:fc:a7: 81:ef:46:7b:69:29:1a:a9:34:98:5c:c9:82:03:09: d3:82:12:02:75:ed:d8:24:29:23:23:51:9f:34:76: 5e:21:7b:0a:75:46:25:f4:a3:e6:7b:ca:50:9d:b4: 76:e3:0d:af:17:d1:df:18:69:6f:0a:6e:f3:ea:a0: ba:40:43:83:6c:b5:46:7d:f2:b6:1c:60:56:7d:a7: a9:a2:35:e6:f6:66:91:4a:a9:da:36:c9:53:b7:fa: 7a:2d:fa:41:1a:51:16:5c:d3:08:e0:bf:c9:fa:05: 5c:12:30:10:49:38:42:5f:df:11:a1:81:7f:8f:75: d0:07:05:55:23:04:88:e5:60:69:d7:fe:6e:45:f0: 90:c3:ba:b2:69:aa:94:5b:a9:7d:b7:35:f4:70:a9: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:66:39:C2:5C:60:49:34:99:03:61:48:B4:89:F6:87:FB:80:34:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d860fb2-3bd9-388c-9d11-e0109ebd148b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.214.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:80:50:c3:d4:67:39:b4:02:40:43:f8:f1:7e:38:97:f6:30: b2:ec:69:0a:48:f6:60:d5:a6:da:07:16:ff:dd:f0:17:1b:90: 03:39:c0:fc:11:74:26:8a:c4:5b:b5:f1:61:e9:2c:d1:81:02: 52:fe:a6:49:70:3c:81:89:0a:58:e2:1b:6c:0e:33:39:49:09: aa:29:a1:1b:74:96:4b:fd:ae:a8:8a:02:fb:1d:3a:28:fe:49: cb:cd:48:ab:0a:f3:23:c6:5b:7f:c3:50:f4:19:c4:9f:70:1e: ec:20:6d:04:6a:00:48:3d:af:79:26:0d:c8:e9:ba:5f:e7:55: cc:a1:43:d6:dd:68:02:4f:47:b9:69:a6:21:0a:42:63:38:cb: 9b:14:eb:a4:98:a7:4c:a5:ce:48:24:51:bc:de:c0:1e:f8:1c: e0:a4:43:03:f5:f8:af:d1:18:6f:89:09:59:59:9f:b8:a5:ba: 7c:65:59:b1:c9:b2:1f:6b:5e:79:0a:2e:a7:86:1b:17:9d:2e: dd:9a:bf:a1:7c:9e:3a:fa:dc:f7:59:ce:8c:7e:d9:72:93:9d: d0:68:23:12:ed:fb:56:19:e7:10:d0:3a:98:e0:59:f9:68:f3: 8c:a0:22:ee:d7:f2:ec:f8:3c:a7:1b:9a:8f:a4:94:eb:75:ee: b8:9a:f7:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHsBm+iishuk14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk MmQ3Nzk0NGQtZjk3Yy00ZjE2LWJmYTItNzA4NDY2MWZkOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY42P5eUzu8fpVnGwElnrl+RpWH+TAF2F+/1 L3Z7xttSqCg8qfb8NPFa1Jb+m39FtUGnqkv+4NAUpyq2JxlcMDZdL6r3e8mSIn79 25XcH6xW7VkBqqY1FJ2hHpld11pvDJT8RNnw/KeB70Z7aSkaqTSYXMmCAwnTghIC de3YJCkjI1GfNHZeIXsKdUYl9KPme8pQnbR24w2vF9HfGGlvCm7z6qC6QEODbLVG ffK2HGBWfaepojXm9maRSqnaNslTt/p6LfpBGlEWXNMI4L/J+gVcEjAQSThCX98R oYF/j3XQBwVVIwSI5WBp1/5uRfCQw7qyaaqUW6l9tzX0cKmInQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNmOcJcYEk0mQNhSLSJ9of7gDSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGQ4NjBmYjItM2JkOS0z ODhjLTlkMTEtZTAxMDllYmQxNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSAUMPUZzm0AkBD+PF+OJf2MLLsaQpI9mDVptoHFv/d8BcbkAM5wPwR dCaKxFu18WHpLNGBAlL+pklwPIGJCljiG2wOMzlJCaopoRt0lkv9rqiKAvsdOij+ ScvNSKsK8yPGW3/DUPQZxJ9wHuwgbQRqAEg9r3kmDcjpul/nVcyhQ9bdaAJPR7lp piEKQmM4y5sU66SYp0ylzkgkUbzewB74HOCkQwP1+K/RGG+JCVlZn7ilunxlWbHJ sh9rXnkKLqeGGxedLt2av6F8njr63PdZzox+2XKTndBoIxLt+1YZ5xDQOpjgWflo 84ygIu7X8uz4PKcbmo+klOt17ria990= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:21 2025 by rpki-client