$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd9c95b9-2aa1-31c4-9d9a-9f1ff1c73e62.roa File: bd9c95b9-2aa1-31c4-9d9a-9f1ff1c73e62.roa (raw, json) Hash identifier: rmLjPbey40OymkAnmR87ot789h1Ov+3o3GOhlxgBdKg= Subject key identifier: 35:70:F2:E1:72:7D:39:A8:64:8A:94:99:52:9C:AD:70:97:BA:F7:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367583FC9B33F4F8196CD4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd9c95b9-2aa1-31c4-9d9a-9f1ff1c73e62.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.221.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:75:83:fc:9b:33:f4:f8:19:6c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a7ed06c5-3bb6-47df-9a94-4da943985d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:7f:4d:8a:79:c6:71:81:07:a5:06:45:82: 6b:1d:dd:9b:85:47:cc:25:4c:12:06:35:1a:2e:be: bf:3b:dd:0f:0d:ca:53:bd:cc:aa:32:22:9f:b4:66: 0a:1e:60:30:26:2a:2f:bf:6a:d4:86:1a:3f:98:74: 4d:47:34:54:e4:b5:3c:d4:36:b2:0a:98:87:3a:d4: 85:12:70:92:1c:4b:37:7b:b9:a8:ef:1b:64:ac:cd: b0:bb:ed:22:eb:13:d3:e5:1c:f7:83:d6:78:66:a4: 98:dc:57:a1:44:90:dc:d4:09:3f:5f:13:f0:42:b3: c0:3d:55:b5:53:7b:e7:17:eb:7d:29:08:9a:16:7a: ee:d9:16:6c:42:0d:f4:ef:d8:b9:0f:f8:01:7f:7d: ee:27:fb:83:47:1f:2b:5b:10:11:c7:b4:ae:c7:68: aa:71:51:d3:19:f6:ec:a7:25:22:e8:b4:6a:78:13: e1:d1:b4:19:b6:bc:79:8e:cb:27:1b:ad:2f:bd:26: 90:b7:38:e5:56:48:8a:58:e5:de:f9:cf:ed:e0:45: ca:e6:1e:d8:6e:b4:eb:54:1f:cb:77:70:bf:dd:36: 45:e7:dc:fb:22:8d:e8:09:72:8b:42:a2:97:c8:40: f2:22:23:e3:62:2a:e8:5b:dd:5c:d2:98:0d:95:4f: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:70:F2:E1:72:7D:39:A8:64:8A:94:99:52:9C:AD:70:97:BA:F7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd9c95b9-2aa1-31c4-9d9a-9f1ff1c73e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ba:da:e6:08:48:0e:a8:9a:ff:aa:e2:7c:c1:d0:25:4f:74: 55:6e:c5:4f:5e:55:7b:76:51:04:d0:18:9f:e9:b8:46:50:07: 14:fb:b4:36:da:6e:79:0f:d2:bf:fe:cd:b0:dc:2a:45:f0:66: d4:76:86:03:09:27:13:4c:03:a8:8a:2e:dc:a8:bc:f6:c6:1a: bc:35:4e:7d:3a:40:4b:13:60:be:3f:81:57:56:ed:83:47:ef: 9f:b3:79:52:b8:83:a9:b6:2e:d8:fc:00:7e:b9:a0:af:d9:ea: c6:f2:4f:14:26:23:33:63:6f:14:f2:eb:d6:95:2d:31:a5:ee: 80:7d:41:50:60:48:85:e5:73:c9:05:b8:64:90:53:7d:eb:7f: de:eb:f4:9e:9e:c3:41:b0:c1:ba:81:41:f7:15:2b:b9:c2:73: 58:95:4a:9d:ea:bf:2f:58:d7:1c:a9:b8:c8:a8:57:a4:f2:de: 48:14:bc:52:22:6c:79:b5:36:d3:77:1e:5c:83:7d:3a:0c:ed: 5d:ed:66:b2:01:25:90:04:f7:22:ea:be:27:5d:a7:1c:7c:f6: 8d:00:95:8f:60:97:d1:fd:1b:4e:e8:20:a5:be:6a:fe:63:53: 13:b6:ec:68:1f:34:9a:da:ab:82:29:01:d6:70:2b:df:15:6c: 7c:65:a6:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnWD/Jsz9PgZbNQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTdlZDA2YzUtM2JiNi00N2RmLTlhOTQtNGRhOTQzOTg1ZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng5/TYp5xnGBB6UGRYJrHd2bhUfMJUwSBjUa Lr6/O90PDcpTvcyqMiKftGYKHmAwJiovv2rUhho/mHRNRzRU5LU81DayCpiHOtSF EnCSHEs3e7mo7xtkrM2wu+0i6xPT5Rz3g9Z4ZqSY3FehRJDc1Ak/XxPwQrPAPVW1 U3vnF+t9KQiaFnru2RZsQg3079i5D/gBf33uJ/uDRx8rWxARx7Sux2iqcVHTGfbs pyUi6LRqeBPh0bQZtrx5jssnG60vvSaQtzjlVkiKWOXe+c/t4EXK5h7YbrTrVB/L d3C/3TZF59z7Io3oCXKLQqKXyEDyIiPjYiroW91c0pgNlU/AWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVw8uFyfTmoZIqUmVKcrXCXuvdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmQ5Yzk1YjktMmFhMS0z MWM0LTlkOWEtOWYxZmYxYzczZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy62uYISA6omv+q4nzB0CVPdFVuxU9eVXt2UQTQGJ/puEZQBxT7tDba bnkP0r/+zbDcKkXwZtR2hgMJJxNMA6iKLtyovPbGGrw1Tn06QEsTYL4/gVdW7YNH 75+zeVK4g6m2Ltj8AH65oK/Z6sbyTxQmIzNjbxTy69aVLTGl7oB9QVBgSIXlc8kF uGSQU33rf97r9J6ew0GwwbqBQfcVK7nCc1iVSp3qvy9Y1xypuMioV6Ty3kgUvFIi bHm1NtN3HlyDfToM7V3tZrIBJZAE9yLqviddpxx89o0AlY9gl9H9G07oIKW+av5j UxO27GgfNJraq4IpAdZwK98VbHxlpvY= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:57 2025 by rpki-client