$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbf724ed-56df-389c-87dc-d7556fbdd97c.roa File: cbf724ed-56df-389c-87dc-d7556fbdd97c.roa (raw, json) Hash identifier: Y5eDZMN4nWAyi62D0xT3tDy2ALoytMOPTf49CIVwHAY= Subject key identifier: FE:80:73:65:AF:1E:50:90:10:E7:1F:A2:60:D9:A1:F6:68:24:3F:19 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963629ACB001DD149EA85F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbf724ed-56df-389c-87dc-d7556fbdd97c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.209.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:29:ac:b0:01:dd:14:9e:a8:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=10cff574-f0fc-45bd-afb8-d8cf3e46f213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:79:35:b5:82:3f:b0:e4:9f:32:a0:09:fc: e3:6c:1e:bc:26:62:7c:5f:d9:5e:46:5b:31:83:aa: c8:d1:f6:32:8d:35:06:d8:95:0b:15:aa:cd:3f:38: ad:8e:3e:f6:2d:d5:a7:3a:38:17:8d:19:22:40:29: 23:50:e1:3b:06:9b:8d:86:77:4f:7e:78:87:3f:e1: 79:45:31:fc:fb:c0:75:27:05:9a:f8:1a:9f:17:ce: eb:84:f7:a6:a3:76:80:ef:c9:0a:86:06:f4:8c:e6: e5:b6:85:d5:3f:28:5a:9f:db:a6:33:2b:71:34:c0: 45:e7:9d:bf:55:c4:ba:33:5c:00:97:4a:a2:33:a2: 84:4f:25:dd:95:64:19:19:31:13:4a:70:f1:ba:df: 5c:70:03:7e:09:ca:25:10:6d:90:e9:eb:f2:34:68: fc:3f:b2:35:7e:fb:8c:df:a2:06:2e:bf:78:46:1c: 04:0f:c0:b3:b4:3e:14:25:30:b5:3e:44:45:96:47: 92:7c:62:73:34:f5:0f:4a:06:0f:02:49:11:7e:0b: 50:a0:c1:82:4c:18:84:4a:7d:d8:61:19:4b:e9:ca: ce:59:af:4b:49:58:9b:89:cb:44:30:ec:df:c4:85: fe:3c:22:b6:75:35:97:04:f4:34:d7:87:75:8f:ac: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:80:73:65:AF:1E:50:90:10:E7:1F:A2:60:D9:A1:F6:68:24:3F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbf724ed-56df-389c-87dc-d7556fbdd97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2c:69:70:b5:25:4b:92:bf:7d:db:96:db:07:e2:03:82:5b: ba:5f:10:d2:28:a4:3c:48:6d:1f:a0:9e:34:07:0c:32:99:85: 8d:40:6c:dd:87:d1:ed:be:ed:02:0a:46:96:3a:51:91:eb:95: ce:61:d4:f8:18:b2:13:83:11:b4:f2:9b:1e:47:a0:f7:3e:b9: d6:67:ea:d4:34:9b:1a:31:a9:ec:27:c6:80:dd:aa:38:34:a4: 44:9a:76:6f:f4:1e:59:3e:61:84:cc:a4:59:0a:6a:fa:f4:65: 4a:d5:75:3e:6e:33:c0:88:fa:4b:85:65:bb:55:47:9e:aa:0f: a1:66:a6:38:09:9b:f3:ec:5a:98:d2:0a:63:95:19:38:da:22: 3e:d2:32:13:cf:dc:6d:4a:4b:d1:bc:b8:c8:5b:58:e2:02:89: 38:d8:f3:5a:25:ea:1a:48:08:c9:54:4d:9c:7c:1d:fd:b1:0c: ac:e0:92:e2:d5:44:a0:fb:a3:76:8a:84:32:0b:ac:5d:51:74: d4:d5:6c:3a:c2:22:5e:40:2d:be:9d:92:61:e7:15:4e:a0:3a: ab:ba:ce:ae:98:8a:8c:9e:00:d8:26:64:d1:62:0a:b1:ad:fc: ba:e8:e5:de:95:3e:30:10:b1:bb:dd:8c:7a:c2:37:d3:d2:39: f4:46:be:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNimssAHdFJ6oXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MTBjZmY1NzQtZjBmYy00NWJkLWFmYjgtZDhjZjNlNDZmMjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6Z5NbWCP7DknzKgCfzjbB68JmJ8X9leRlsx g6rI0fYyjTUG2JULFarNPzitjj72LdWnOjgXjRkiQCkjUOE7BpuNhndPfniHP+F5 RTH8+8B1JwWa+BqfF87rhPemo3aA78kKhgb0jObltoXVPyhan9umMytxNMBF552/ VcS6M1wAl0qiM6KETyXdlWQZGTETSnDxut9ccAN+CcolEG2Q6evyNGj8P7I1fvuM 36IGLr94RhwED8CztD4UJTC1PkRFlkeSfGJzNPUPSgYPAkkRfgtQoMGCTBiESn3Y YRlL6crOWa9LSVibictEMOzfxIX+PCK2dTWXBPQ014d1j6yUGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6Ac2WvHlCQEOcfomDZofZoJD8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2JmNzI0ZWQtNTZkZi0z ODljLTg3ZGMtZDc1NTZmYmRkOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYsaXC1JUuSv33bltsH4gOCW7pfENIopDxIbR+gnjQHDDKZhY1AbN2H 0e2+7QIKRpY6UZHrlc5h1PgYshODEbTymx5HoPc+udZn6tQ0mxoxqewnxoDdqjg0 pESadm/0Hlk+YYTMpFkKavr0ZUrVdT5uM8CI+kuFZbtVR56qD6FmpjgJm/PsWpjS CmOVGTjaIj7SMhPP3G1KS9G8uMhbWOICiTjY81ol6hpICMlUTZx8Hf2xDKzgkuLV RKD7o3aKhDILrF1RdNTVbDrCIl5ALb6dkmHnFU6gOqu6zq6YioyeANgmZNFiCrGt /Lro5d6VPjAQsbvdjHrCN9PSOfRGvok= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:58 2025 by rpki-client