$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7b2e3cd-57f9-3ef2-b6dc-79857aaa3fe4.roa File: a7b2e3cd-57f9-3ef2-b6dc-79857aaa3fe4.roa (raw, json) Hash identifier: 6AENsp4QB4uJpKPn4+ibMKpNtgM3XWwBiHOCwYwJ+S0= Subject key identifier: 86:BE:96:81:12:20:25:0F:3A:6D:E5:9B:2A:A7:E2:1A:5C:7A:A2:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364CC687CBF872294210C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7b2e3cd-57f9-3ef2-b6dc-79857aaa3fe4.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.218.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4c:c6:87:cb:f8:72:29:42:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=0f3d68c2-7862-4cfa-8bac-a8b31834067f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:db:fa:8c:8f:c0:65:74:0a:1d:10:9c:9d: ce:f7:d2:1b:11:5d:b9:c6:12:a9:11:81:32:08:e4: 29:fd:85:e3:8c:b1:ea:ab:11:43:11:a0:f4:6e:e6: 1f:32:69:20:05:a1:d8:c5:81:66:27:24:bd:09:5e: c5:96:7a:a0:6e:ea:6e:7f:f9:19:17:f5:8a:26:e8: d9:5d:c3:2b:10:ab:98:b7:fc:77:b9:da:c7:31:0d: 18:43:ce:8e:0a:06:03:b0:8b:59:04:9b:34:c1:0f: e2:ca:77:eb:48:1a:28:8d:e8:86:9a:cd:d8:87:a9: a9:2c:21:d9:36:52:21:fa:9a:f3:83:e8:ca:d3:a2: d8:18:93:db:63:d0:a4:fc:6f:e5:f5:9f:6b:50:45: d4:92:0c:a6:43:df:5d:c9:11:b9:77:9c:ae:55:e9: 98:b9:86:09:c4:15:c3:45:16:7d:64:24:24:c8:e1: 9d:1a:6f:83:3b:67:bd:9c:fc:b1:51:88:e7:de:52: 73:76:b7:90:18:f8:33:0c:39:82:a3:86:8f:7f:1c: 78:b8:66:72:57:b9:cd:21:e3:14:da:ae:d1:00:f3: 4e:19:c1:46:c3:07:5d:a1:e3:bd:ac:40:1d:1f:fe: 01:06:5e:be:3c:63:e1:c2:32:4c:67:36:cb:27:a8: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BE:96:81:12:20:25:0F:3A:6D:E5:9B:2A:A7:E2:1A:5C:7A:A2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7b2e3cd-57f9-3ef2-b6dc-79857aaa3fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:04:cd:6f:e6:63:a6:66:4a:96:2c:33:03:b3:fc:af:02:e0: 5b:0c:96:e6:89:f2:dd:6e:1f:14:82:4c:0f:50:ef:ee:fb:69: 3c:31:78:c5:98:5e:66:02:b2:9a:88:15:a5:67:ef:99:62:1c: af:f4:d5:bc:f8:d5:a1:8d:bc:75:78:92:07:2f:c0:cd:e5:d1: 3a:28:d0:16:f4:cd:c4:20:f5:47:db:55:25:2f:00:f6:3b:60: 5b:e0:6a:b1:80:44:76:0d:50:bc:3a:80:ab:77:1b:1a:d0:df: 99:67:b9:60:42:73:c6:df:b3:e5:3c:e5:22:33:ec:77:6f:11: 74:5c:a8:c5:7a:1f:55:be:98:5a:c0:82:73:02:f3:24:d2:d3: 80:eb:db:ab:76:fd:b3:b6:a6:ff:64:8d:11:6c:95:ca:31:51: da:e4:ee:16:fd:bb:3e:72:38:ec:f7:5e:16:9a:95:36:a9:60: ff:cf:76:28:dd:90:a7:ed:cc:9b:c9:ba:0c:98:de:22:7d:6a: d7:88:58:59:49:d9:67:3b:6f:09:48:36:d4:5c:93:6b:4e:4d: de:e9:65:d4:6b:c9:c4:1b:09:d3:6a:e2:78:a8:82:45:ff:8c: 7b:8e:95:cd:3d:f9:ff:e5:ad:68:69:ed:c2:8d:1b:3f:41:94: 99:00:a2:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkzGh8v4cilCEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MGYzZDY4YzItNzg2Mi00Y2ZhLThiYWMtYThiMzE4MzQwNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwHb+oyPwGV0Ch0QnJ3O99IbEV25xhKpEYEy COQp/YXjjLHqqxFDEaD0buYfMmkgBaHYxYFmJyS9CV7Flnqgbupuf/kZF/WKJujZ XcMrEKuYt/x3udrHMQ0YQ86OCgYDsItZBJs0wQ/iynfrSBoojeiGms3Yh6mpLCHZ NlIh+przg+jK06LYGJPbY9Ck/G/l9Z9rUEXUkgymQ99dyRG5d5yuVemYuYYJxBXD RRZ9ZCQkyOGdGm+DO2e9nPyxUYjn3lJzdreQGPgzDDmCo4aPfxx4uGZyV7nNIeMU 2q7RAPNOGcFGwwddoeO9rEAdH/4BBl6+PGPhwjJMZzbLJ6jjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa+loESICUPOm3lmyqn4hpceqIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdiMmUzY2QtNTdmOS0z ZWYyLWI2ZGMtNzk4NTdhYWEzZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoEzW/mY6ZmSpYsMwOz/K8C4FsMluaJ8t1uHxSCTA9Q7+77aTwxeMWY XmYCspqIFaVn75liHK/01bz41aGNvHV4kgcvwM3l0Too0Bb0zcQg9UfbVSUvAPY7 YFvgarGARHYNULw6gKt3GxrQ35lnuWBCc8bfs+U85SIz7HdvEXRcqMV6H1W+mFrA gnMC8yTS04Dr26t2/bO2pv9kjRFslcoxUdrk7hb9uz5yOOz3XhaalTapYP/Pdijd kKftzJvJugyY3iJ9ateIWFlJ2Wc7bwlINtRck2tOTd7pZdRrycQbCdNq4niogkX/ jHuOlc09+f/lrWhp7cKNGz9BlJkAomc= -----END CERTIFICATE-----Generated at Fri Aug 8 00:50:14 2025 by rpki-client