$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab038efe-f628-35a0-b481-15718c3f353c.roa File: ab038efe-f628-35a0-b481-15718c3f353c.roa (raw, json) Hash identifier: LfAi9vuJN1/IIbmB7lFHLsoa82EVScjvXHsbO4Kha/Y= Subject key identifier: BA:40:68:8E:2B:E2:0A:9A:85:10:73:00:9B:B8:C7:27:97:3E:87:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366EE195414FE1D708CC5B Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab038efe-f628-35a0-b481-15718c3f353c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6e:e1:95:41:4f:e1:d7:08:cc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a46193be-67b9-49f8-96d9-c01903d79075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0a:b4:31:01:7c:6b:d6:3a:3a:ea:c4:94:dc: b3:e2:e9:3a:e9:0b:cc:3c:18:44:48:12:63:65:94: fe:ef:56:3a:61:a8:4e:35:0b:f3:22:53:ed:0a:4e: 62:19:4a:63:1f:a6:07:d1:5c:86:1b:bc:e9:da:89: 0f:67:07:0e:9e:ec:b9:38:3c:78:d1:77:f6:4f:9b: 61:96:d3:c3:b6:a5:77:80:ce:13:49:19:fc:1c:74: 7f:9a:19:9c:ef:85:a7:43:27:ba:c6:56:1e:0c:69: 2c:41:ba:0b:1c:c9:7e:2b:57:18:af:d5:95:1c:a0: 5b:c6:57:35:d4:be:93:3c:58:e2:15:98:22:fd:cf: ba:46:56:57:7c:1b:36:3a:7d:be:d3:9a:9f:b1:96: 7b:6c:c6:8e:98:2e:9a:8c:bd:dc:63:a4:e0:9e:7f: b4:fa:3c:5e:40:0e:07:59:f0:4a:aa:66:ab:5c:fc: 24:21:a3:aa:44:61:87:6c:10:45:bd:a1:d1:12:4e: cd:49:da:f9:bc:b2:70:b9:83:78:e9:77:5f:6f:d8: da:40:31:9c:62:48:28:5f:8c:17:07:e4:35:7c:30: 53:25:7f:54:62:05:17:0d:16:38:ba:55:41:40:28: ca:d5:ec:66:cd:31:2d:e5:2d:3d:07:86:26:a3:00: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:40:68:8E:2B:E2:0A:9A:85:10:73:00:9B:B8:C7:27:97:3E:87:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab038efe-f628-35a0-b481-15718c3f353c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:46:f1:9b:b6:0f:10:25:f6:6b:9b:59:5b:23:e5:5c:34:78: df:45:6f:3e:19:fa:9b:45:a9:26:c9:17:ba:60:cf:66:41:16: 74:85:d2:23:e3:ba:de:03:ff:77:e7:ed:52:20:52:33:2c:5e: ed:69:d1:53:12:bc:c1:1a:5e:2b:b2:76:44:6c:79:c5:ee:16: d5:78:e6:d4:96:96:00:88:fe:56:92:2c:1b:a3:1e:75:94:33: 14:de:d0:f5:9e:d0:7e:85:40:b8:e0:13:22:d7:a9:54:83:50: a7:f7:27:c6:e9:fc:cd:1c:87:f4:1f:54:36:bf:2b:77:70:47: 08:9c:a5:90:00:b6:4a:71:c7:f3:40:1d:3d:fe:dc:88:e4:57: cc:ed:83:77:80:ea:7d:e7:27:8b:fa:45:15:f3:da:25:1c:97: a0:c3:b8:39:fe:80:a4:27:15:9a:14:1e:31:c5:06:52:78:b0: ae:bf:61:2a:3b:d3:5b:2d:42:35:a1:15:29:db:65:9f:fa:3a: c8:7a:63:e2:75:81:b6:43:bf:89:61:b6:d7:91:31:12:76:b8: f5:0c:1c:60:ce:7e:58:b5:1b:1c:c7:c9:b6:b5:67:3d:91:13: 4d:ec:08:15:64:55:57:ae:d6:5d:ce:ea:58:b4:dc:96:50:31: b8:e2:17:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNm7hlUFP4dcIzFswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTQ2MTkzYmUtNjdiOS00OWY4LTk2ZDktYzAxOTAzZDc5MDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwq0MQF8a9Y6OurElNyz4uk66QvMPBhESBJj ZZT+71Y6YahONQvzIlPtCk5iGUpjH6YH0VyGG7zp2okPZwcOnuy5ODx40Xf2T5th ltPDtqV3gM4TSRn8HHR/mhmc74WnQye6xlYeDGksQboLHMl+K1cYr9WVHKBbxlc1 1L6TPFjiFZgi/c+6RlZXfBs2On2+05qfsZZ7bMaOmC6ajL3cY6Tgnn+0+jxeQA4H WfBKqmarXPwkIaOqRGGHbBBFvaHREk7NSdr5vLJwuYN46Xdfb9jaQDGcYkgoX4wX B+Q1fDBTJX9UYgUXDRY4ulVBQCjK1exmzTEt5S09B4YmowDlvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpAaI4r4gqahRBzAJu4xyeXPodWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWIwMzhlZmUtZjYyOC0z NWEwLWI0ODEtMTU3MThjM2YzNTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhG8Zu2DxAl9mubWVsj5Vw0eN9Fbz4Z+ptFqSbJF7pgz2ZBFnSF0iPj ut4D/3fn7VIgUjMsXu1p0VMSvMEaXiuydkRsecXuFtV45tSWlgCI/laSLBujHnWU MxTe0PWe0H6FQLjgEyLXqVSDUKf3J8bp/M0ch/QfVDa/K3dwRwicpZAAtkpxx/NA HT3+3IjkV8ztg3eA6n3nJ4v6RRXz2iUcl6DDuDn+gKQnFZoUHjHFBlJ4sK6/YSo7 01stQjWhFSnbZZ/6Osh6Y+J1gbZDv4lhtteRMRJ2uPUMHGDOfli1GxzHyba1Zz2R E03sCBVkVVeu1l3O6li03JZQMbjiFzQ= -----END CERTIFICATE-----Generated at Fri Aug 8 13:04:05 2025 by rpki-client