$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d49c6945-4977-3602-b93e-f66fd163f1d0.roa File: d49c6945-4977-3602-b93e-f66fd163f1d0.roa (raw, json) Hash identifier: ACat1bBP1AiROmqCQDLmiyBtMD1b8XFuuYI8670/HkM= Subject key identifier: BB:34:65:3F:AA:AF:48:A9:D3:18:17:55:91:DD:A0:8A:88:C9:78:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963629181AC81BC2932294C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d49c6945-4977-3602-b93e-f66fd163f1d0.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.200.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:29:18:1a:c8:1b:c2:93:22:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7da1a82f-986a-47b1-8fc2-352f021bafc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:00:67:69:23:c7:38:a5:df:8a:4c:4f:00: fd:54:6b:0e:71:d7:af:94:94:a6:11:22:ad:06:9b: 67:00:e6:34:e0:26:c2:76:be:d4:71:97:ad:ab:79: 31:aa:94:ba:85:78:4c:62:97:de:1a:1a:d1:7c:3d: ff:ae:1d:af:2c:e7:b0:3a:41:60:81:92:91:49:83: c2:ee:35:b1:b4:2d:d5:be:64:cc:34:dd:90:2c:21: 48:fe:2f:c0:db:c6:08:3c:7e:c6:80:15:ae:d5:86: b9:38:d7:39:d5:75:5d:b8:99:86:85:a2:2e:3a:ec: fc:4d:0f:a1:70:9e:ab:8b:01:3b:32:4f:34:90:c2: cf:e8:48:7f:58:66:af:b1:01:c7:ed:32:a9:91:33: 0a:ea:29:69:a0:0c:1d:c5:d6:22:8a:b6:d3:24:3f: a4:44:f1:21:6b:c9:d2:1e:e5:33:47:a9:bc:dd:d6: c5:2a:59:1a:ed:6e:b3:6b:14:56:42:a2:20:1a:e8: 41:9c:42:e4:67:b3:b0:5f:e6:ed:ee:35:35:88:5a: 74:8f:2e:b6:f7:52:05:f5:39:5f:7e:95:d5:b4:dc: de:eb:a4:79:19:d3:75:97:33:79:a0:6c:1f:7f:42: 19:df:53:72:dd:f8:ee:a5:e3:43:37:d8:c8:a0:85: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:34:65:3F:AA:AF:48:A9:D3:18:17:55:91:DD:A0:8A:88:C9:78:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d49c6945-4977-3602-b93e-f66fd163f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:14:d3:d9:83:56:b4:2c:29:45:8d:bb:79:1a:46:a5:d8:34: 31:1e:75:90:5f:d3:a8:1f:88:b3:b5:6a:ea:6d:ad:22:05:5f: 69:1a:df:4f:6c:a8:84:3c:b9:60:2e:e0:8f:87:0c:af:9c:0c: a8:b5:42:a7:b5:55:10:8c:dc:30:e7:3d:ec:5b:64:ef:fc:c7: e1:9a:d5:71:24:a3:0c:e4:38:7c:af:97:42:19:92:f3:11:54: 52:c2:a1:b7:89:0f:4d:92:8d:a0:07:e4:6b:b8:d6:46:b6:bd: 17:ef:05:0d:1b:9e:c5:a5:5f:53:05:01:5c:7f:7f:e9:1e:62: 9d:df:6a:47:cd:f9:16:e5:93:85:15:54:50:c5:69:14:cf:51: f6:00:f4:5d:0b:ec:09:55:b4:ca:fb:51:d9:40:f7:46:f4:41: 2f:b2:1b:34:0f:82:ce:ed:18:ad:27:7f:ea:a2:39:4d:96:85: e9:6e:71:7b:f8:f2:d4:6d:26:72:83:8f:61:33:9b:80:da:cf: c9:0a:9b:ef:4c:17:57:10:72:be:2c:54:d3:2f:2e:eb:a9:97: 7b:f0:16:45:30:6f:e6:e0:46:7d:37:ab:f4:7e:23:57:79:65: ed:47:bd:d2:23:fc:60:ce:9e:76:69:6f:78:62:77:ef:7c:f5: c5:dc:41:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNikYGsgbwpMilMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk N2RhMWE4MmYtOTg2YS00N2IxLThmYzItMzUyZjAyMWJhZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIoAZ2kjxzil34pMTwD9VGsOcdevlJSmESKt BptnAOY04CbCdr7UcZetq3kxqpS6hXhMYpfeGhrRfD3/rh2vLOewOkFggZKRSYPC 7jWxtC3VvmTMNN2QLCFI/i/A28YIPH7GgBWu1Ya5ONc51XVduJmGhaIuOuz8TQ+h cJ6riwE7Mk80kMLP6Eh/WGavsQHH7TKpkTMK6ilpoAwdxdYiirbTJD+kRPEha8nS HuUzR6m83dbFKlka7W6zaxRWQqIgGuhBnELkZ7OwX+bt7jU1iFp0jy6291IF9Tlf fpXVtNze66R5GdN1lzN5oGwff0IZ31Ny3fjupeNDN9jIoIWXYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs0ZT+qr0ip0xgXVZHdoIqIyXhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDQ5YzY5NDUtNDk3Ny0z NjAyLWI5M2UtZjY2ZmQxNjNmMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwU09mDVrQsKUWNu3kaRqXYNDEedZBf06gfiLO1auptrSIFX2ka309s qIQ8uWAu4I+HDK+cDKi1Qqe1VRCM3DDnPexbZO/8x+Ga1XEkowzkOHyvl0IZkvMR VFLCobeJD02SjaAH5Gu41ka2vRfvBQ0bnsWlX1MFAVx/f+keYp3fakfN+Rblk4UV VFDFaRTPUfYA9F0L7AlVtMr7UdlA90b0QS+yGzQPgs7tGK0nf+qiOU2WhelucXv4 8tRtJnKDj2Ezm4Daz8kKm+9MF1cQcr4sVNMvLuupl3vwFkUwb+bgRn03q/R+I1d5 Ze1HvdIj/GDOnnZpb3hid+989cXcQc4= -----END CERTIFICATE-----Generated at Wed Aug 6 11:14:25 2025 by rpki-client