$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b573e1c2-cc91-3966-9351-cff3f368128a.roa File: b573e1c2-cc91-3966-9351-cff3f368128a.roa (raw, json) Hash identifier: dp6XlRYGy4Eqxod1/MFUiZ94M2zG+UFzEdAqJ7sDjZg= Subject key identifier: 04:D2:4B:8D:35:B9:F7:A7:18:F1:6F:3D:8F:52:F4:71:D9:10:03:A7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366E42C59279E6743D2040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b573e1c2-cc91-3966-9351-cff3f368128a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6e:42:c5:92:79:e6:74:3d:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8c3275b6-a542-4a7b-bbef-410015233d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:2d:21:2d:4a:27:c5:c5:d0:0c:79:32:f5: aa:83:21:28:94:a1:a2:1b:40:bc:23:0d:42:b6:ed: 76:da:aa:04:b1:a0:b8:15:bc:b7:41:c1:47:1d:26: 86:56:d2:8b:9d:85:a0:b0:0a:17:69:0f:5f:cf:e9: df:6a:da:2c:45:70:23:eb:b6:8e:bc:f7:7a:5e:6f: f4:ba:d0:b1:36:04:8e:02:7a:dd:51:e0:7a:f6:d6: ec:5b:84:f0:9a:40:2a:a9:2e:1d:1e:71:dd:62:25: dc:9f:14:65:10:6a:31:4b:c9:48:be:a9:00:66:7c: 46:13:42:e4:78:b2:34:49:cf:7f:ce:31:97:d3:a3: ca:23:e3:70:dd:cf:f2:75:c1:18:f3:1f:40:7e:e4: 90:92:28:4e:05:31:85:7d:1c:cb:5f:72:f3:59:9b: 64:7c:a9:59:82:57:40:6b:5b:48:cf:2a:18:af:1e: 80:c1:b9:17:75:71:c1:76:f9:40:04:9c:a4:fd:43: d6:0e:02:ea:9f:eb:27:bc:8c:88:af:b2:8d:4a:30: 92:dc:b8:21:b5:21:f3:69:31:b6:c6:3a:7c:44:6b: c0:37:7d:38:c0:fa:ea:f7:25:0b:59:96:04:4c:7d: 05:7b:d6:02:f7:bd:2e:33:6f:9e:27:61:29:44:e6: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D2:4B:8D:35:B9:F7:A7:18:F1:6F:3D:8F:52:F4:71:D9:10:03:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b573e1c2-cc91-3966-9351-cff3f368128a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b7:21:21:63:02:8b:d7:9a:de:99:ca:86:4c:02:1b:68:37: 3a:d2:b0:cb:b0:31:50:07:6a:0a:79:bd:a4:6f:d1:82:bb:c3: 5f:2f:28:9d:da:8d:b4:d8:81:2c:b3:a9:23:6e:64:59:82:60: 64:8c:3f:68:14:35:15:9a:80:c1:81:3e:68:2f:29:e7:ce:41: 91:a9:7d:ba:3b:6a:64:b3:51:79:28:de:25:19:a2:4b:88:1b: 90:9c:30:10:c5:e2:b0:ae:9b:16:27:56:8e:83:11:61:48:6d: 00:af:29:bc:1c:0a:c5:8f:2d:02:40:00:1c:9b:94:49:32:8c: 19:03:74:cb:6e:2d:b9:36:8b:b8:db:cb:61:80:08:f3:a8:e8: a9:9e:b6:43:5f:a7:3c:04:46:9c:c4:2c:6d:dd:1d:ab:2d:bf: 1a:0f:4b:29:fe:9b:d8:5f:2a:f6:f6:28:f3:79:85:c5:7c:be: a1:90:da:2c:30:75:2f:82:2b:27:00:c3:df:05:5e:be:47:80: bf:ac:a0:19:db:5c:24:85:18:1c:6d:00:89:1e:cc:e9:85:23: fd:51:8f:ff:cd:7f:88:1f:6c:fa:aa:43:0c:08:65:52:7f:78: fa:6a:09:f9:09:c4:88:71:57:67:9b:16:4b:dd:6b:6d:06:30: c6:6f:a4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNm5CxZJ55nQ9IEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OGMzMjc1YjYtYTU0Mi00YTdiLWJiZWYtNDEwMDE1MjMzZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhktIS1KJ8XF0Ax5MvWqgyEolKGiG0C8Iw1C tu122qoEsaC4Fby3QcFHHSaGVtKLnYWgsAoXaQ9fz+nfatosRXAj67aOvPd6Xm/0 utCxNgSOAnrdUeB69tbsW4TwmkAqqS4dHnHdYiXcnxRlEGoxS8lIvqkAZnxGE0Lk eLI0Sc9/zjGX06PKI+Nw3c/ydcEY8x9AfuSQkihOBTGFfRzLX3LzWZtkfKlZgldA a1tIzyoYrx6AwbkXdXHBdvlABJyk/UPWDgLqn+snvIyIr7KNSjCS3LghtSHzaTG2 xjp8RGvAN304wPrq9yULWZYETH0Fe9YC970uM2+eJ2EpRObSqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATSS401ufenGPFvPY9S9HHZEAOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjU3M2UxYzItY2M5MS0z OTY2LTkzNTEtY2ZmM2YzNjgxMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS3ISFjAovXmt6ZyoZMAhtoNzrSsMuwMVAHagp5vaRv0YK7w18vKJ3a jbTYgSyzqSNuZFmCYGSMP2gUNRWagMGBPmgvKefOQZGpfbo7amSzUXko3iUZokuI G5CcMBDF4rCumxYnVo6DEWFIbQCvKbwcCsWPLQJAAByblEkyjBkDdMtuLbk2i7jb y2GACPOo6KmetkNfpzwERpzELG3dHastvxoPSyn+m9hfKvb2KPN5hcV8vqGQ2iww dS+CKycAw98FXr5HgL+soBnbXCSFGBxtAIkezOmFI/1Rj//Nf4gfbPqqQwwIZVJ/ ePpqCfkJxIhxV2ebFkvda20GMMZvpJc= -----END CERTIFICATE-----Generated at Sat Aug 9 03:04:26 2025 by rpki-client