$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4fd6156-2480-3504-b8fa-b00a6744810f.roa File: d4fd6156-2480-3504-b8fa-b00a6744810f.roa (raw, json) Hash identifier: eqZ8lB4PMVoAuM1PcpHxLdVUGRioUPuDns9kYu7C0W8= Subject key identifier: DC:E9:69:43:C4:F5:D4:C8:86:6B:1E:A8:C7:65:65:C6:C3:1C:F7:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366B1E4EE14563C402F180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4fd6156-2480-3504-b8fa-b00a6744810f.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.197.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6b:1e:4e:e1:45:63:c4:02:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ee9f5f3d-882a-4283-8748-b411a9504f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:19:0b:72:52:1d:50:c8:84:00:b4:ee:46: 07:3c:43:08:52:e4:20:ac:69:90:78:f2:41:0c:fe: 8d:a7:41:18:18:ea:1d:5d:ed:71:96:77:91:14:63: 50:2c:af:d5:7c:f0:40:bd:d5:80:9b:7d:f9:c1:ed: 78:fe:63:3b:9e:71:5c:a7:2e:31:16:52:f4:7b:eb: 5b:0a:5a:60:b3:77:64:11:6d:fd:1e:d3:c6:3b:cd: 99:b5:4f:94:f2:2c:8d:0f:69:3e:40:ef:5a:37:cc: a3:b3:a2:bd:f9:a0:34:b4:9d:d8:de:da:85:6c:14: 87:f0:a0:13:5b:0b:e1:e1:5c:73:68:74:41:e0:19: 6a:d7:a8:8c:61:57:37:6e:f2:53:d8:b9:94:ac:b3: 79:d0:01:ef:79:f9:7c:7a:51:30:bb:63:50:c8:0e: 2f:5d:1f:74:28:3a:0a:3e:a0:91:b7:8e:13:e4:06: ca:e2:4b:06:fe:62:0c:f1:85:c4:4e:30:69:a6:1d: c8:5b:35:3d:7e:32:43:22:c6:68:fa:06:bf:ad:ba: 6f:15:34:2c:80:3a:ad:41:a3:a4:0e:6c:20:69:cd: 84:f7:56:60:86:82:2e:5c:51:a1:c0:7d:82:f7:b8: 15:fc:d7:41:bc:55:2e:0d:34:e2:e7:f2:02:9e:17: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E9:69:43:C4:F5:D4:C8:86:6B:1E:A8:C7:65:65:C6:C3:1C:F7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4fd6156-2480-3504-b8fa-b00a6744810f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ad:72:15:37:69:14:52:d5:85:55:0f:72:79:85:4b:92:bc: ba:71:08:ad:bb:63:14:61:6e:69:90:3b:1b:1e:56:ef:16:bc: 02:41:99:1b:8c:10:63:45:ef:0a:68:19:b9:20:e0:b6:3f:87: 64:ec:bd:32:45:27:71:31:03:1b:f5:6b:2c:77:19:3d:5f:64: a6:af:88:0c:2a:05:7c:0d:be:92:b3:07:67:43:ed:18:4b:42: fd:7d:a8:71:01:90:f5:24:d1:e0:3f:82:56:93:2c:49:90:0a: 0f:e6:6d:18:72:11:67:dc:27:66:c4:47:27:3a:6d:86:e0:69: 26:0e:7c:5f:48:3b:09:16:c1:fa:46:4a:d5:c0:e0:29:05:14: 66:3b:3c:87:d8:9f:ab:39:bd:82:54:e7:42:61:d7:24:b6:4e: 7e:c2:c1:8a:4c:5c:4c:87:3b:b6:2c:91:79:25:62:1a:f1:c0: ba:0a:b9:4f:45:93:53:98:04:d6:74:62:1d:60:8d:40:5c:fd: bf:5f:a1:29:65:29:a8:b6:df:94:a9:b9:8b:79:c2:56:35:4e: c0:a2:2b:ee:a7:67:a7:a9:79:a7:20:00:46:3c:b3:ac:1d:44: 2d:f4:9b:b0:1f:d9:03:d9:94:8c:2e:f7:56:e2:b0:6c:63:30: 9d:21:fa:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmseTuFFY8QC8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWU5ZjVmM2QtODgyYS00MjgzLTg3NDgtYjQxMWE5NTA0ZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZUZC3JSHVDIhAC07kYHPEMIUuQgrGmQePJB DP6Np0EYGOodXe1xlneRFGNQLK/VfPBAvdWAm335we14/mM7nnFcpy4xFlL0e+tb Clpgs3dkEW39HtPGO82ZtU+U8iyND2k+QO9aN8yjs6K9+aA0tJ3Y3tqFbBSH8KAT Wwvh4VxzaHRB4Blq16iMYVc3bvJT2LmUrLN50AHvefl8elEwu2NQyA4vXR90KDoK PqCRt44T5AbK4ksG/mIM8YXETjBpph3IWzU9fjJDIsZo+ga/rbpvFTQsgDqtQaOk Dmwgac2E91ZghoIuXFGhwH2C97gV/NdBvFUuDTTi5/ICnhf2bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzpaUPE9dTIhmseqMdlZcbDHPecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDRmZDYxNTYtMjQ4MC0z NTA0LWI4ZmEtYjAwYTY3NDQ4MTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOtchU3aRRS1YVVD3J5hUuSvLpxCK27YxRhbmmQOxseVu8WvAJBmRuM EGNF7wpoGbkg4LY/h2TsvTJFJ3ExAxv1ayx3GT1fZKaviAwqBXwNvpKzB2dD7RhL Qv19qHEBkPUk0eA/glaTLEmQCg/mbRhyEWfcJ2bERyc6bYbgaSYOfF9IOwkWwfpG StXA4CkFFGY7PIfYn6s5vYJU50Jh1yS2Tn7CwYpMXEyHO7YskXklYhrxwLoKuU9F k1OYBNZ0Yh1gjUBc/b9foSllKai235SpuYt5wlY1TsCiK+6nZ6epeacgAEY8s6wd RC30m7Af2QPZlIwu91bisGxjMJ0h+t4= -----END CERTIFICATE-----Generated at Sat Aug 9 01:10:21 2025 by rpki-client