$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66aa1e4-065b-3801-becf-d018b95b1c19.roa File: a66aa1e4-065b-3801-becf-d018b95b1c19.roa (raw, json) Hash identifier: aOFCrgZLRKT9eXjD1LsHOU7MekKHNFPLiHyLWcVVjSo= Subject key identifier: F1:ED:40:3F:65:F0:2A:E5:29:28:5C:8E:77:35:59:92:22:E8:9D:F9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364B122758ADE4CFF00380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66aa1e4-065b-3801-becf-d018b95b1c19.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.218.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4b:12:27:58:ad:e4:cf:f0:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=dd9e86e9-7f37-4ea9-96a2-2db2e32e9546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b3:6e:35:d8:dc:c1:28:f0:db:c6:61:3e:37: 33:9e:2b:82:1e:51:25:e5:f7:0b:43:fc:2b:c2:10: 45:fe:48:4a:57:38:93:ca:26:fd:f4:cd:c2:5d:8c: 13:1f:52:03:43:0a:06:49:ad:14:03:82:8b:94:8a: 11:b3:df:0c:3a:e4:ab:d1:13:73:e8:54:b1:d5:03: 58:4d:12:0c:40:43:6a:b7:d8:1a:1f:03:a1:83:82: 50:56:d5:2c:89:a8:ff:af:b3:e6:21:ff:89:8e:01: f6:30:fe:c6:e9:a5:a0:31:0f:f0:5c:4d:61:b3:9f: 83:cf:c5:45:50:b4:58:de:3a:84:b6:e6:db:3d:af: 81:7f:fd:9f:d3:72:82:88:54:48:52:9e:0a:1a:71: fd:a2:65:54:4f:fa:72:66:c5:15:76:51:fa:7a:a5: ba:90:08:f1:08:6c:a5:23:e6:63:04:c5:44:45:03: e6:6d:f8:4e:9a:25:24:70:23:da:6f:2c:6c:43:67: fc:8b:32:56:05:1e:7d:b7:ad:74:3d:bb:64:00:fe: c9:bc:62:c4:05:a7:ef:b9:71:10:93:c1:21:f3:78: 43:4e:3c:b3:b1:9b:81:90:b0:b0:4e:e8:5d:9f:22: 5d:79:8e:05:a7:53:8e:bc:e7:55:59:83:18:1a:87: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:ED:40:3F:65:F0:2A:E5:29:28:5C:8E:77:35:59:92:22:E8:9D:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66aa1e4-065b-3801-becf-d018b95b1c19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:1e:32:92:cc:0d:64:54:ff:b3:82:7c:e6:61:0d:bf:e3:04: 78:55:5c:ca:99:0a:81:97:58:7f:83:92:f8:e7:07:c4:b8:04: e7:1a:04:2b:05:1e:22:7c:c4:c7:20:ff:2c:4d:e5:3d:8d:6a: b7:af:ff:e2:18:d8:a9:ec:6f:1b:5a:0e:6c:b6:23:b8:6c:e2: 7f:f7:1e:6e:fb:4e:b5:1c:aa:4e:84:c7:cc:2b:c0:d2:fe:16: 67:6a:0b:e4:88:5a:3a:e2:10:93:57:66:f1:c0:19:fa:25:ac: 02:47:2b:60:c3:23:bd:c5:ad:ec:50:12:b4:b0:a7:f9:4c:de: ed:9b:4a:6c:15:36:70:d6:23:25:1b:5c:12:8d:1d:98:b9:62: 0a:86:2c:ae:a5:62:d2:72:1e:31:b9:50:d1:ea:22:1f:bf:60: 82:fe:b7:34:81:89:f8:0d:8e:c2:39:06:20:de:85:05:9f:f1: a5:e5:d5:75:53:50:49:4b:ef:b4:b1:b6:e9:69:e3:31:f8:81: ee:26:d4:db:8e:0a:da:a3:d8:db:05:03:87:d6:b4:a2:ec:8a: d2:3d:21:df:4e:db:43:88:ad:b3:90:34:8c:a8:a9:70:5b:7f: f3:0a:ea:ee:4b:cb:b3:14:a3:42:dd:ee:87:93:4d:42:4f:e9: bb:15:fc:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNksSJ1it5M/wA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZGQ5ZTg2ZTktN2YzNy00ZWE5LTk2YTItMmRiMmUzMmU5NTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rNuNdjcwSjw28ZhPjczniuCHlEl5fcLQ/wr whBF/khKVziTyib99M3CXYwTH1IDQwoGSa0UA4KLlIoRs98MOuSr0RNz6FSx1QNY TRIMQENqt9gaHwOhg4JQVtUsiaj/r7PmIf+JjgH2MP7G6aWgMQ/wXE1hs5+Dz8VF ULRY3jqEtubbPa+Bf/2f03KCiFRIUp4KGnH9omVUT/pyZsUVdlH6eqW6kAjxCGyl I+ZjBMVERQPmbfhOmiUkcCPabyxsQ2f8izJWBR59t610PbtkAP7JvGLEBafvuXEQ k8Eh83hDTjyzsZuBkLCwTuhdnyJdeY4Fp1OOvOdVWYMYGoe4SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHtQD9l8CrlKShcjnc1WZIi6J35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2YWExZTQtMDY1Yi0z ODAxLWJlY2YtZDAxOGI5NWIxYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNpWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEeMpLMDWRU/7OCfOZhDb/jBHhVXMqZCoGXWH+DkvjnB8S4BOcaBCsF HiJ8xMcg/yxN5T2Narev/+IY2KnsbxtaDmy2I7hs4n/3Hm77TrUcqk6Ex8wrwNL+ FmdqC+SIWjriEJNXZvHAGfolrAJHK2DDI73FrexQErSwp/lM3u2bSmwVNnDWIyUb XBKNHZi5YgqGLK6lYtJyHjG5UNHqIh+/YIL+tzSBifgNjsI5BiDehQWf8aXl1XVT UElL77Sxtulp4zH4ge4m1NuOCtqj2NsFA4fWtKLsitI9Id9O20OIrbOQNIyoqXBb f/MK6u5Ly7MUo0Ld7oeTTUJP6bsV/Bw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:19 2025 by rpki-client