$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3201164-e621-3974-8ba6-a54ad9d4b301.roa File: b3201164-e621-3974-8ba6-a54ad9d4b301.roa (raw, json) Hash identifier: 3aRDHMgQyFmE7fILg2udnJA1wiTt+JTTiyAvKngU6jc= Subject key identifier: 76:84:25:B4:71:70:0C:0D:22:02:3F:30:D9:F2:B9:94:C2:16:98:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96362832D63B1B78E5492B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3201164-e621-3974-8ba6-a54ad9d4b301.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.195.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:28:32:d6:3b:1b:78:e5:49:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=e9f2bf10-6a47-47fd-91fa-5b787f372a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7f:36:8e:4d:4f:d7:dc:c2:40:1e:51:77:c7: 43:6c:0e:23:d4:59:f4:37:2f:aa:6e:14:a3:36:82: d6:9a:f2:56:a4:25:82:38:75:26:ed:04:eb:35:9b: c6:cc:0c:5d:31:b0:72:9c:f4:e7:45:ec:3e:83:75: 56:74:53:98:23:ce:ea:f7:d5:29:4f:b5:5d:1c:4c: b3:b9:ed:75:2a:9c:71:af:1b:40:60:4b:86:74:a8: 3a:fe:07:ba:98:fe:a2:52:bd:f7:a2:59:cf:88:04: c0:2b:54:b9:e5:c1:32:45:31:f0:3a:6f:b5:dc:f9: 2c:fa:f4:96:55:11:7f:12:e9:f6:89:74:c9:c7:23: a2:7f:0a:57:d0:63:47:e3:22:8f:e6:73:cd:3a:5d: d9:43:32:25:45:c6:53:53:c8:ae:17:14:63:de:f0: c3:4e:40:c8:85:d1:95:aa:6a:d0:99:c9:5d:08:9e: 20:ff:6f:ec:2c:2b:6d:c3:1f:aa:89:96:d8:f4:ea: 06:53:d2:90:45:59:bb:a9:6b:2f:ad:57:c0:27:df: 57:4d:ce:a6:54:7d:2c:74:e1:05:09:3b:18:4f:47: 0e:bd:a3:3f:6a:76:4f:8f:55:18:6a:2f:b0:b8:29: ec:54:ea:dc:0f:06:6d:c7:f7:97:85:42:ba:89:b3: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:84:25:B4:71:70:0C:0D:22:02:3F:30:D9:F2:B9:94:C2:16:98:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3201164-e621-3974-8ba6-a54ad9d4b301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.195.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b7:53:b5:e3:54:93:10:1f:2a:0f:89:4d:a1:9e:87:a2:d7: e0:1c:98:d7:dd:9e:28:ba:ee:d2:a9:26:1e:5d:cb:57:5e:8e: 3b:73:34:91:a4:cb:0d:d3:a2:0e:fe:1d:e6:dc:d1:cd:85:f4: 27:9f:76:eb:91:ac:40:1c:ef:e5:3f:61:07:96:19:2b:56:5c: 2c:cb:29:e0:3d:31:cd:4f:fc:18:29:dc:e4:dc:61:60:b1:d8: a5:4e:d5:40:72:d4:11:2a:ff:09:f6:9b:8a:e2:41:7b:9a:81: 43:80:0d:d0:1f:46:9e:10:8b:15:be:0f:1e:52:47:89:a3:16: ce:c0:f8:fe:d6:7e:91:4a:f8:08:1b:bc:0d:5c:f6:c5:e3:0a: bb:0e:6b:5b:2c:c9:65:2b:0a:22:ce:66:87:d8:9b:6c:57:99: b9:ae:f8:9b:bb:98:77:9c:1e:50:8c:a4:1c:ed:67:65:54:de: 0f:f4:bb:24:0e:ec:d2:7a:8b:0a:2c:b8:c2:4f:50:ac:03:62: fb:47:f4:59:13:ab:ec:34:9a:da:93:f0:66:50:d8:64:aa:ee: 1c:ab:c6:15:5e:47:c2:c5:31:39:15:de:bd:b4:e4:59:ff:18: a6:1c:c2:63:7b:b8:54:68:77:24:b0:72:02:d5:17:bc:53:4b: 87:c7:74:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNigy1jsbeOVJK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTlmMmJmMTAtNmE0Ny00N2ZkLTkxZmEtNWI3ODdmMzcyYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH82jk1P19zCQB5Rd8dDbA4j1Fn0Ny+qbhSj NoLWmvJWpCWCOHUm7QTrNZvGzAxdMbBynPTnRew+g3VWdFOYI87q99UpT7VdHEyz ue11KpxxrxtAYEuGdKg6/ge6mP6iUr33olnPiATAK1S55cEyRTHwOm+13Pks+vSW VRF/Eun2iXTJxyOifwpX0GNH4yKP5nPNOl3ZQzIlRcZTU8iuFxRj3vDDTkDIhdGV qmrQmcldCJ4g/2/sLCttwx+qiZbY9OoGU9KQRVm7qWsvrVfAJ99XTc6mVH0sdOEF CTsYT0cOvaM/anZPj1UYai+wuCnsVOrcDwZtx/eXhUK6ibOsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaEJbRxcAwNIgI/MNnyuZTCFpjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjMyMDExNjQtZTYyMS0z OTc0LThiYTYtYTU0YWQ5ZDRiMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO3U7XjVJMQHyoPiU2hnoei1+AcmNfdnii67tKpJh5dy1dejjtzNJGk yw3Tog7+Hebc0c2F9CefduuRrEAc7+U/YQeWGStWXCzLKeA9Mc1P/Bgp3OTcYWCx 2KVO1UBy1BEq/wn2m4riQXuagUOADdAfRp4QixW+Dx5SR4mjFs7A+P7WfpFK+Agb vA1c9sXjCrsOa1ssyWUrCiLOZofYm2xXmbmu+Ju7mHecHlCMpBztZ2VU3g/0uyQO 7NJ6iwosuMJPUKwDYvtH9FkTq+w0mtqT8GZQ2GSq7hyrxhVeR8LFMTkV3r205Fn/ GKYcwmN7uFRodySwcgLVF7xTS4fHdO4= -----END CERTIFICATE-----Generated at Fri Aug 8 20:46:45 2025 by rpki-client