$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9cd4185e-9544-3ba2-b31a-9dd046486238.roa File: 9cd4185e-9544-3ba2-b31a-9dd046486238.roa (raw, json) Hash identifier: OW/MtQ6PR1RFCqCmBhXP1+rYYA7RpZKgnaHw9Q9xAdM= Subject key identifier: 1A:32:3F:A8:5D:4C:AE:F4:07:57:16:5E:ED:ED:09:45:59:5F:FD:7E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366C2DE0B6F4AA352015C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9cd4185e-9544-3ba2-b31a-9dd046486238.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.197.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6c:2d:e0:b6:f4:aa:35:20:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7d6ea9ec-ac36-48e7-83fa-a34953cc2968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:50:4f:65:e4:96:e0:e0:2a:a1:cc:da:c9: 35:11:60:d5:b2:b9:52:a9:7c:93:bf:c3:05:fa:87: 31:5b:7d:d4:b2:7a:33:54:38:8d:f6:fa:5e:59:b2: 23:72:97:9a:8c:aa:57:c1:47:e3:08:b2:d4:a4:75: 06:30:c6:be:a1:9d:6c:6f:11:37:92:a2:41:c3:4c: 44:e4:9b:83:eb:d9:0f:1f:a4:f6:1d:d8:32:19:ba: 32:23:d7:d6:24:3f:49:76:01:35:15:28:0b:1b:d2: 6a:71:42:9d:7c:44:26:1d:05:0c:e3:e8:5b:33:2c: b2:26:53:a7:f4:96:84:43:23:7b:47:d1:ef:d8:07: 8a:33:77:c4:dc:07:7a:ae:b0:1c:06:45:51:c4:2e: ff:e6:32:e4:f3:19:d3:ed:45:04:94:42:52:d7:3c: d1:75:81:91:33:b2:bc:5b:8c:30:ab:30:c8:78:34: 34:31:97:03:e7:25:cf:89:bb:ed:96:b8:61:39:fe: 7f:32:23:9f:1d:20:66:bd:a7:f9:71:59:32:84:93: cf:8f:e8:38:01:35:b9:79:0c:5e:67:ed:f9:ec:d5: d5:79:44:ae:7f:9a:fb:5c:98:3f:5c:63:bd:17:da: 1b:48:67:e1:74:85:ff:91:43:c4:05:8b:d7:b9:2a: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:3F:A8:5D:4C:AE:F4:07:57:16:5E:ED:ED:09:45:59:5F:FD:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9cd4185e-9544-3ba2-b31a-9dd046486238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:4c:81:40:fa:af:f0:df:d2:c1:f7:21:7e:d8:e5:7b:7b:a0: d9:24:4b:cc:a3:43:6c:a5:3e:67:d1:7a:0f:47:16:e5:ec:3c: 6a:2a:3e:92:25:33:9d:a8:6d:2b:ab:7f:65:ce:26:9e:0c:cd: 6b:2f:78:07:47:f9:79:b9:b8:08:e1:d5:b5:99:81:29:8a:80: 50:04:a5:17:06:73:0d:8b:b7:a7:03:55:d4:ce:f7:2c:43:2c: 24:20:b4:25:3b:15:02:43:89:1a:aa:92:54:1a:be:b6:b3:bf: 8d:08:5b:b3:4f:95:b1:6a:47:e4:41:20:24:0c:5a:5a:3a:e8: f5:67:88:1f:bd:74:5a:49:94:94:c1:bb:e5:61:36:72:c1:ad: 3e:7a:b7:bb:6e:fe:44:08:35:37:9b:da:b7:db:47:3f:8c:4f: 55:4f:5c:41:01:96:11:0a:b5:52:28:7a:0c:3b:da:df:de:94: 68:8e:96:24:37:fa:4e:ef:18:48:85:bb:35:46:d4:22:7f:d0: 6a:a6:17:e9:91:a2:e7:83:b0:19:40:3a:a2:13:76:08:9a:8e: 20:75:9a:1f:b8:b4:80:10:1b:52:f2:f3:b1:48:ca:62:16:1e: 67:28:73:03:72:ee:24:e1:df:fe:20:22:d8:4c:de:50:8c:17: 25:a8:f6:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmwt4Lb0qjUgFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk N2Q2ZWE5ZWMtYWMzNi00OGU3LTgzZmEtYTM0OTUzY2MyOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfZQT2XkluDgKqHM2sk1EWDVsrlSqXyTv8MF +ocxW33UsnozVDiN9vpeWbIjcpeajKpXwUfjCLLUpHUGMMa+oZ1sbxE3kqJBw0xE 5JuD69kPH6T2HdgyGboyI9fWJD9JdgE1FSgLG9JqcUKdfEQmHQUM4+hbMyyyJlOn 9JaEQyN7R9Hv2AeKM3fE3Ad6rrAcBkVRxC7/5jLk8xnT7UUElEJS1zzRdYGRM7K8 W4wwqzDIeDQ0MZcD5yXPibvtlrhhOf5/MiOfHSBmvaf5cVkyhJPPj+g4ATW5eQxe Z+357NXVeUSuf5r7XJg/XGO9F9obSGfhdIX/kUPEBYvXuSq4fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoyP6hdTK70B1cWXu3tCUVZX/1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWNkNDE4NWUtOTU0NC0z YmEyLWIzMWEtOWRkMDQ2NDg2MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtMgUD6r/Df0sH3IX7Y5Xt7oNkkS8yjQ2ylPmfReg9HFuXsPGoqPpIl M52obSurf2XOJp4MzWsveAdH+Xm5uAjh1bWZgSmKgFAEpRcGcw2Lt6cDVdTO9yxD LCQgtCU7FQJDiRqqklQavrazv40IW7NPlbFqR+RBICQMWlo66PVniB+9dFpJlJTB u+VhNnLBrT56t7tu/kQINTeb2rfbRz+MT1VPXEEBlhEKtVIoegw72t/elGiOliQ3 +k7vGEiFuzVG1CJ/0GqmF+mRoueDsBlAOqITdgiajiB1mh+4tIAQG1Ly87FIymIW HmcocwNy7iTh3/4gIthM3lCMFyWo9hE= -----END CERTIFICATE-----Generated at Sun Aug 10 03:51:38 2025 by rpki-client