$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfb83cdd-32b0-31b4-a3c6-bc6578e0a94b.roa File: cfb83cdd-32b0-31b4-a3c6-bc6578e0a94b.roa (raw, json) Hash identifier: TriBUu9rGod5jd9Sa52zl2MmY3ZjqlQgNXGFszX3Xbk= Subject key identifier: 02:3B:52:26:84:3B:CA:7D:0F:61:9A:3A:78:42:23:C7:7F:CE:2D:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366F6813D773EA4158C700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfb83cdd-32b0-31b4-a3c6-bc6578e0a94b.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6f:68:13:d7:73:ea:41:58:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8048f90a-4bd7-4d77-a0ce-c7c4a5fe0d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:71:be:bd:ca:a1:7a:6f:e7:e8:6e:36:0c: df:6f:e2:6c:9b:8a:2c:86:04:36:ba:4e:7a:a5:ed: a3:6a:6c:ca:32:c3:50:30:ba:8f:bc:47:66:71:65: df:c1:8e:07:42:da:cc:ff:0a:64:5d:9d:d7:7b:a1: 47:4a:e9:7c:01:92:5a:5b:f6:b5:bd:75:90:3c:f2: 82:fc:19:6e:db:a9:ad:7e:8c:69:3c:06:a4:47:f9: ba:59:0c:1b:38:29:3e:5a:4b:04:2e:ea:f8:8c:17: 43:e7:3c:46:cb:73:49:19:c2:ab:0f:9a:b6:78:d5: c4:17:f0:d0:57:28:7c:8e:25:31:c9:8a:be:f7:27: cd:5a:f8:c8:0a:09:5f:50:83:35:d4:c9:f2:9d:8c: 84:48:21:1d:20:c9:54:2c:9f:d5:bb:80:cb:2d:75: 52:47:ed:66:f7:e4:34:c6:ad:5f:b3:18:3c:a3:b8: 06:bb:9d:46:1a:3d:80:57:b3:22:8b:04:c8:e8:17: a3:c6:f4:2d:ce:74:aa:2a:a9:65:bd:f3:1e:9d:c6: d1:7a:9a:04:b5:8e:2f:ae:f5:ed:67:37:13:8e:50: 5a:b9:27:bf:f7:01:67:4d:ee:f5:b5:e3:1d:fb:2c: 82:5c:19:e3:24:62:cc:e8:34:94:f3:06:ae:a8:3c: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3B:52:26:84:3B:CA:7D:0F:61:9A:3A:78:42:23:C7:7F:CE:2D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfb83cdd-32b0-31b4-a3c6-bc6578e0a94b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d5:d7:16:4c:32:02:a5:b1:3a:07:18:9b:3c:4a:a7:be:ac: d8:3e:f7:3b:ee:ed:5f:bd:42:60:45:54:dc:cb:43:24:07:9d: 05:20:20:0d:cc:56:ce:0e:59:91:02:1f:f1:e5:40:19:07:41: 6a:24:59:89:bf:62:58:41:f8:70:7d:24:f5:90:ca:0e:04:42: 53:21:34:ac:d5:0a:87:00:0f:14:79:98:b3:5f:f7:6e:8d:4e: a4:2a:38:ca:c0:49:ce:44:43:b9:5b:e0:9b:a8:a2:4f:d8:5f: ad:26:64:c6:da:e2:f0:53:d5:cb:76:9e:99:ef:a0:fe:18:23: eb:da:8c:c1:e6:fe:bc:a5:db:b7:0c:dd:89:13:0c:55:a9:e5: 0b:2d:96:e9:78:71:f7:2b:56:37:60:d7:05:b7:cb:32:fe:70: be:0c:77:66:88:6a:90:0e:c3:fc:2d:19:33:98:ba:7b:3c:48: 53:38:1a:ba:67:5a:e0:df:1a:0d:22:77:2a:62:65:b2:f7:6f: b0:47:75:53:ae:6a:3b:c3:09:28:3e:cc:1a:66:2c:55:41:08: dc:6e:de:fd:59:31:31:b6:ef:3f:04:ba:b9:71:5c:1e:3a:53: 58:a7:53:e0:8b:72:59:85:a4:a2:1c:d6:73:ed:0d:cf:57:42: 34:d6:68:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNm9oE9dz6kFYxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODA0OGY5MGEtNGJkNy00ZDc3LWEwY2UtYzdjNGE1ZmUwZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Jxvr3KoXpv5+huNgzfb+Jsm4oshgQ2uk56 pe2jamzKMsNQMLqPvEdmcWXfwY4HQtrM/wpkXZ3Xe6FHSul8AZJaW/a1vXWQPPKC /Blu26mtfoxpPAakR/m6WQwbOCk+WksELur4jBdD5zxGy3NJGcKrD5q2eNXEF/DQ Vyh8jiUxyYq+9yfNWvjICglfUIM11MnynYyESCEdIMlULJ/Vu4DLLXVSR+1m9+Q0 xq1fsxg8o7gGu51GGj2AV7MiiwTI6BejxvQtznSqKqllvfMencbRepoEtY4vrvXt ZzcTjlBauSe/9wFnTe71teMd+yyCXBnjJGLM6DSU8wauqDzj5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI7UiaEO8p9D2GaOnhCI8d/zi2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ZiODNjZGQtMzJiMC0z MWI0LWEzYzYtYmM2NTc4ZTBhOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjV1xZMMgKlsToHGJs8Sqe+rNg+9zvu7V+9QmBFVNzLQyQHnQUgIA3M Vs4OWZECH/HlQBkHQWokWYm/YlhB+HB9JPWQyg4EQlMhNKzVCocADxR5mLNf926N TqQqOMrASc5EQ7lb4Juook/YX60mZMba4vBT1ct2npnvoP4YI+vajMHm/ryl27cM 3YkTDFWp5Qstlul4cfcrVjdg1wW3yzL+cL4Md2aIapAOw/wtGTOYuns8SFM4Grpn WuDfGg0idypiZbL3b7BHdVOuajvDCSg+zBpmLFVBCNxu3v1ZMTG27z8EurlxXB46 U1inU+CLclmFpKIc1nPtDc9XQjTWaPY= -----END CERTIFICATE-----Generated at Tue Aug 5 17:19:44 2025 by rpki-client