$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/997cf553-f9ca-3894-a017-f281148f812c.roa File: 997cf553-f9ca-3894-a017-f281148f812c.roa (raw, json) Hash identifier: X5h7EZUUSUX7jhogaGOwxBaBJtCaE2G4jyI9QvhYFKc= Subject key identifier: 72:35:36:81:2A:A3:E0:DC:34:47:74:FD:AF:3E:43:31:A3:EF:53:22 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963677326C97DA153596FB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/997cf553-f9ca-3894-a017-f281148f812c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.221.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:77:32:6c:97:da:15:35:96:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7b720c9a-aaeb-4a90-bfd8-c0b7d8445dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7b:29:04:ca:21:ad:11:3b:0a:f2:e5:e4:7c: d2:1a:81:ae:af:65:a1:82:c0:53:9a:3a:a2:dd:5e: e7:d9:32:4e:15:32:37:1c:d5:c7:1a:51:52:4a:73: 01:86:91:9c:c6:b6:21:ea:fd:e0:fa:2f:52:eb:4c: 1e:55:e9:34:99:38:7d:71:b9:80:a5:45:73:ff:37: 81:21:d7:c4:78:19:85:a5:aa:01:63:ae:1a:a4:f2: d9:85:f7:b5:2a:5b:05:3f:eb:b6:e4:0e:77:ae:4a: e2:4d:2b:8e:21:c2:08:de:91:fe:2e:16:35:08:1e: 4e:75:ae:04:c8:cf:d5:89:44:4b:b4:3e:11:89:66: 7e:93:6c:9d:98:f2:51:98:84:f7:27:ee:6e:2c:c2: 0c:ad:0e:aa:ae:c7:02:ae:3e:14:54:c7:8b:0b:96: 4b:22:56:6d:a9:fd:15:36:15:bb:a0:64:70:d9:ed: 00:6a:df:62:ad:8a:bf:ab:bd:9f:72:19:71:03:40: 22:82:0c:bc:c4:28:e3:0e:27:5a:34:0a:33:83:6c: 2e:62:1c:83:b2:c9:a2:c8:8d:43:88:ae:7f:86:bf: 0e:45:ea:c0:d6:31:33:d4:59:c0:ff:6a:b6:40:18: 84:fc:ea:ba:63:f7:52:4f:f8:c4:7a:36:b1:03:9d: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:35:36:81:2A:A3:E0:DC:34:47:74:FD:AF:3E:43:31:A3:EF:53:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/997cf553-f9ca-3894-a017-f281148f812c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f6:da:72:06:07:bb:e1:7c:9e:e8:11:ec:3c:e0:cc:0c:03: bb:10:e3:2e:18:dc:fd:05:e1:e1:f7:5b:00:c8:05:28:f5:e0: 33:93:d2:54:aa:64:80:63:e0:8e:6f:35:01:73:f8:dc:98:94: 1d:66:a9:c1:d7:5f:6d:16:e7:8b:14:fc:59:37:5a:d0:5e:96: 35:2c:a1:7d:f1:7b:26:16:5b:57:60:85:8d:10:37:12:4f:95: 43:c9:13:96:a6:b1:7c:53:2f:7d:76:ae:c5:87:43:03:11:87: 74:ab:3c:f7:11:6a:2e:75:e0:93:1b:8d:a1:51:c6:ad:56:7b: a1:4d:8c:9e:97:0d:3e:77:de:d4:fa:a4:68:09:b1:d4:17:b4: 81:71:a1:2f:d6:9e:5b:4b:e4:35:74:07:89:27:74:cf:ec:fd: d1:6d:00:6c:1e:7d:c7:a4:9f:56:35:53:7b:aa:20:7c:ff:cf: 6d:d9:c4:8e:66:7c:91:3d:96:27:5c:6b:67:e9:89:86:12:20: ba:da:0f:10:85:ca:7a:0a:15:cf:54:72:de:10:1d:cb:0b:48: f0:2a:91:f2:6a:73:9f:b2:94:c4:91:2f:53:2f:56:f0:50:9b: 15:ab:97:ba:80:2a:06:6f:10:43:9f:17:a4:4d:95:3b:a3:dc: 5b:b7:25:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNncybJfaFTWW+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk N2I3MjBjOWEtYWFlYi00YTkwLWJmZDgtYzBiN2Q4NDQ1ZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHspBMohrRE7CvLl5HzSGoGur2WhgsBTmjqi 3V7n2TJOFTI3HNXHGlFSSnMBhpGcxrYh6v3g+i9S60weVek0mTh9cbmApUVz/zeB IdfEeBmFpaoBY64apPLZhfe1KlsFP+u25A53rkriTSuOIcII3pH+LhY1CB5Oda4E yM/ViURLtD4RiWZ+k2ydmPJRmIT3J+5uLMIMrQ6qrscCrj4UVMeLC5ZLIlZtqf0V NhW7oGRw2e0Aat9irYq/q72fchlxA0Aiggy8xCjjDidaNAozg2wuYhyDssmiyI1D iK5/hr8ORerA1jEz1FnA/2q2QBiE/Oq6Y/dST/jEejaxA52jpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI1NoEqo+DcNEd0/a8+QzGj71MiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTk3Y2Y1NTMtZjljYS0z ODk0LWEwMTctZjI4MTE0OGY4MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn22nIGB7vhfJ7oEew84MwMA7sQ4y4Y3P0F4eH3WwDIBSj14DOT0lSq ZIBj4I5vNQFz+NyYlB1mqcHXX20W54sU/Fk3WtBeljUsoX3xeyYWW1dghY0QNxJP lUPJE5amsXxTL312rsWHQwMRh3SrPPcRai514JMbjaFRxq1We6FNjJ6XDT533tT6 pGgJsdQXtIFxoS/WnltL5DV0B4kndM/s/dFtAGwefcekn1Y1U3uqIHz/z23ZxI5m fJE9lidca2fpiYYSILraDxCFynoKFc9Uct4QHcsLSPAqkfJqc5+ylMSRL1MvVvBQ mxWrl7qAKgZvEEOfF6RNlTuj3Fu3JZ0= -----END CERTIFICATE-----Generated at Sat Aug 9 05:46:37 2025 by rpki-client