$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd70d123-2ad0-3a8d-a5a2-06d582b89b70.roa File: cd70d123-2ad0-3a8d-a5a2-06d582b89b70.roa (raw, json) Hash identifier: mlK1vDv/j6VWZpf+sUOFIJUvNUxnSwIrLy7NKd7uyNs= Subject key identifier: B2:57:ED:C5:37:9D:21:75:C8:BA:2A:11:A0:F7:2F:11:7A:C8:55:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364B20C4A840AD57AAF740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd70d123-2ad0-3a8d-a5a2-06d582b89b70.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.218.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4b:20:c4:a8:40:ad:57:aa:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=efc371e5-f0fb-4bda-9ae0-5a6a28130a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6d:75:0e:be:e1:be:c4:ec:93:58:7f:8e:04: 85:93:cb:b4:37:cf:44:57:ed:9f:e2:6e:a2:d4:b6: b7:33:cd:63:02:47:e3:44:69:38:19:cf:f5:ad:99: 9c:8a:7c:a0:d0:63:8d:af:8d:65:bb:ef:9e:39:9d: e7:60:93:37:82:ac:b1:d9:01:9b:a7:fb:17:09:df: 19:cc:ce:c0:b2:1a:54:d3:43:bb:a6:41:0a:44:0f: 04:87:c4:30:49:b9:91:63:62:6d:8f:59:27:e1:97: cc:b9:a2:47:33:e7:ea:40:65:be:59:f2:f0:8a:32: d7:54:e9:a3:30:3e:bd:58:4c:37:7e:a7:b2:64:3c: 5d:d9:23:4e:27:53:10:8e:85:69:5d:40:fa:f6:ab: 74:a3:31:ef:e1:27:8b:8b:70:8a:6d:fe:87:af:25: cf:f7:39:ba:9c:21:34:3f:d8:d7:74:dc:33:40:98: e8:15:50:bb:0e:38:48:8c:e2:0b:5c:dc:05:ef:ed: 40:48:21:fa:56:62:50:04:9c:bb:08:72:cd:92:ad: 72:bd:2a:b5:54:9c:92:5f:94:f6:5f:58:f9:57:cc: e6:4e:a3:1d:dc:d2:53:aa:2d:32:d1:42:80:bd:b6: 3e:47:b5:8a:fe:29:e3:fa:7f:dc:60:b2:13:7f:3b: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:57:ED:C5:37:9D:21:75:C8:BA:2A:11:A0:F7:2F:11:7A:C8:55:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd70d123-2ad0-3a8d-a5a2-06d582b89b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3b:1b:6a:fb:95:45:f1:1d:fd:3d:94:c9:9b:aa:79:47:c8: 05:73:2d:46:fe:10:61:96:6b:ff:74:86:31:01:65:14:7e:bc: 2d:18:b6:f8:17:64:b0:51:8c:8c:af:a4:f7:af:ed:0a:43:d8: c5:27:27:78:d4:bf:73:2c:95:f0:e6:53:72:95:2d:ac:7e:66: f5:48:19:55:d7:38:22:68:86:2d:e8:51:d3:29:82:af:25:7d: 00:02:25:07:93:60:60:02:c7:dc:f5:6e:68:23:cb:74:6a:c6: b7:a8:72:3c:49:c9:76:69:3e:00:98:c0:9f:a5:f9:1b:26:ec: 4d:87:c8:2c:49:88:f0:87:53:5f:8b:f5:49:3f:3e:63:da:7f: 2c:1f:28:a1:d2:3a:26:58:3f:5d:ce:54:67:cc:d2:4d:6b:72: 5c:02:2b:13:d1:63:7c:8c:2e:3b:f3:96:f7:09:3d:92:9c:17: b1:4c:ad:db:a9:8d:bf:c7:71:fe:42:48:16:62:c0:f9:13:11: e5:58:00:ca:89:05:ec:68:1a:39:fe:0c:f8:b6:1c:31:95:72: 0a:eb:16:ec:22:19:97:f9:41:d0:db:2e:00:72:b6:66:27:54: 02:02:81:04:dc:37:2c:cc:0e:aa:28:ad:e5:07:b5:20:ce:8a: 6c:af:89:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNksgxKhArVeq90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWZjMzcxZTUtZjBmYi00YmRhLTlhZTAtNWE2YTI4MTMwYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm11Dr7hvsTsk1h/jgSFk8u0N89EV+2f4m6i 1La3M81jAkfjRGk4Gc/1rZmcinyg0GONr41lu++eOZ3nYJM3gqyx2QGbp/sXCd8Z zM7AshpU00O7pkEKRA8Eh8QwSbmRY2Jtj1kn4ZfMuaJHM+fqQGW+WfLwijLXVOmj MD69WEw3fqeyZDxd2SNOJ1MQjoVpXUD69qt0ozHv4SeLi3CKbf6HryXP9zm6nCE0 P9jXdNwzQJjoFVC7DjhIjOILXNwF7+1ASCH6VmJQBJy7CHLNkq1yvSq1VJySX5T2 X1j5V8zmTqMd3NJTqi0y0UKAvbY+R7WK/inj+n/cYLITfzv5JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJX7cU3nSF1yLoqEaD3LxF6yFVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q3MGQxMjMtMmFkMC0z YThkLWE1YTItMDZkNTgyYjg5YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc7G2r7lUXxHf09lMmbqnlHyAVzLUb+EGGWa/90hjEBZRR+vC0YtvgX ZLBRjIyvpPev7QpD2MUnJ3jUv3MslfDmU3KVLax+ZvVIGVXXOCJohi3oUdMpgq8l fQACJQeTYGACx9z1bmgjy3RqxreocjxJyXZpPgCYwJ+l+Rsm7E2HyCxJiPCHU1+L 9Uk/PmPafywfKKHSOiZYP13OVGfM0k1rclwCKxPRY3yMLjvzlvcJPZKcF7FMrdup jb/Hcf5CSBZiwPkTEeVYAMqJBexoGjn+DPi2HDGVcgrrFuwiGZf5QdDbLgBytmYn VAICgQTcNyzMDqooreUHtSDOimyviWE= -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:40 2025 by rpki-client