$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da26ae0c-a09e-341f-82f2-b20d10a0e82c.roa File: da26ae0c-a09e-341f-82f2-b20d10a0e82c.roa (raw, json) Hash identifier: /vnSbOLPe/hUK4rwxZT9+5atjVzlESaNHFAoHBNHSSk= Subject key identifier: 01:65:D3:DF:56:22:9D:4E:62:1E:D2:B8:EA:04:9A:73:73:6B:F6:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963672BB2A445742010D0880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da26ae0c-a09e-341f-82f2-b20d10a0e82c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:72:bb:2a:44:57:42:01:0d:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=35a76ff1-6a12-478a-aa85-8515835cb956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:f7:79:2d:af:1e:33:6d:8f:5e:2f:39:c3: 48:70:0d:d2:28:b3:89:b1:1b:f7:73:91:8d:e3:b3: 43:1a:32:fc:b0:3a:45:a9:22:3e:d2:0c:97:79:d7: 84:05:46:80:5a:bd:e0:4c:8d:11:9b:fe:43:56:4f: 73:e5:ab:c9:8d:f5:31:67:38:93:1f:86:87:d8:f1: 51:01:3f:b8:ed:01:cd:53:39:31:aa:83:7b:e0:d2: 0f:20:fe:20:f3:fe:f7:87:31:0f:81:56:8a:80:8a: a4:27:4c:c0:51:83:48:c7:08:2e:35:87:55:07:dd: 0f:09:68:f3:66:6f:fa:39:14:47:bf:26:13:98:a2: 4a:bb:c0:05:c0:0f:26:d4:f1:09:a3:91:bc:59:5b: 44:b7:bc:85:66:24:14:77:03:a3:61:cd:04:67:f9: ad:1b:d6:2a:4d:e1:cf:1f:aa:ff:42:7f:8f:ac:8a: 04:41:f2:11:a6:7a:67:2a:11:4b:fd:88:c3:ca:7a: 86:e1:b6:01:1e:e3:93:c8:3d:d9:31:23:3b:d6:0a: 7a:6b:49:36:7a:40:8a:2d:88:72:04:d9:a6:66:45: 40:f8:58:3c:c3:13:42:70:ea:38:b1:d9:b2:68:de: 24:6b:c4:0a:a6:da:8b:5b:96:3c:df:75:fc:4a:de: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:65:D3:DF:56:22:9D:4E:62:1E:D2:B8:EA:04:9A:73:73:6B:F6:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da26ae0c-a09e-341f-82f2-b20d10a0e82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:64:73:f0:30:40:e9:68:48:e4:16:1e:8d:8d:f3:b2:10:8b: 94:9b:56:3a:28:d0:a7:5e:95:44:43:86:17:9b:2e:a3:dd:cb: 19:7f:85:0e:b8:17:38:4e:42:66:d2:45:ce:52:21:83:ea:c9: 17:b4:70:19:33:23:f9:c2:aa:16:a9:c0:ef:c8:d4:cd:d5:ae: 1d:78:d7:a3:69:87:e7:07:aa:ed:5b:fe:b6:5f:9b:d4:f2:ef: 09:ec:6b:71:6e:ee:6d:ba:0b:1b:eb:35:10:79:43:ee:a2:87: 19:9e:8d:34:58:13:01:c8:ab:f3:c2:1c:db:46:a5:0b:89:15: 26:12:b3:cd:ae:4a:a6:77:ba:7a:8d:4b:20:1a:d3:0f:89:f0: 9f:bb:d0:1e:d0:d3:e5:5b:59:9d:ef:22:e1:2c:6b:2c:11:47: 19:ad:48:ff:8f:7b:a4:51:83:c2:29:44:ca:f8:d2:d2:5d:7b: 35:0e:71:04:dc:2f:9e:92:bb:b6:48:ca:a1:3a:b1:25:57:af: e3:8c:31:a0:9c:99:47:e5:69:7a:ae:94:8a:7c:60:29:28:20: a3:ee:b8:e4:98:b2:90:e1:0f:bc:38:0a:a6:06:59:46:69:a2: c7:ea:28:55:9e:fe:98:02:8f:2b:73:09:a0:bd:4c:55:75:f2: 99:c0:3e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnK7KkRXQgENCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzVhNzZmZjEtNmExMi00NzhhLWFhODUtODUxNTgzNWNiOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviL3eS2vHjNtj14vOcNIcA3SKLOJsRv3c5GN 47NDGjL8sDpFqSI+0gyXedeEBUaAWr3gTI0Rm/5DVk9z5avJjfUxZziTH4aH2PFR AT+47QHNUzkxqoN74NIPIP4g8/73hzEPgVaKgIqkJ0zAUYNIxwguNYdVB90PCWjz Zm/6ORRHvyYTmKJKu8AFwA8m1PEJo5G8WVtEt7yFZiQUdwOjYc0EZ/mtG9YqTeHP H6r/Qn+PrIoEQfIRpnpnKhFL/YjDynqG4bYBHuOTyD3ZMSM71gp6a0k2ekCKLYhy BNmmZkVA+Fg8wxNCcOo4sdmyaN4ka8QKptqLW5Y833X8St4CzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFl099WIp1OYh7SuOoEmnNza/Y7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGEyNmFlMGMtYTA5ZS0z NDFmLTgyZjItYjIwZDEwYTBlODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNxWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZkc/AwQOloSOQWHo2N87IQi5SbVjoo0KdelURDhhebLqPdyxl/hQ64 FzhOQmbSRc5SIYPqyRe0cBkzI/nCqhapwO/I1M3Vrh1416Nph+cHqu1b/rZfm9Ty 7wnsa3Fu7m26CxvrNRB5Q+6ihxmejTRYEwHIq/PCHNtGpQuJFSYSs82uSqZ3unqN SyAa0w+J8J+70B7Q0+VbWZ3vIuEsaywRRxmtSP+Pe6RRg8IpRMr40tJdezUOcQTc L56Su7ZIyqE6sSVXr+OMMaCcmUflaXqulIp8YCkoIKPuuOSYspDhD7w4CqYGWUZp osfqKFWe/pgCjytzCaC9TFV18pnAPvc= -----END CERTIFICATE-----Generated at Wed Aug 6 05:14:29 2025 by rpki-client