$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db87597d-4341-3d49-8637-5aabb8fb954c.roa File: db87597d-4341-3d49-8637-5aabb8fb954c.roa (raw, json) Hash identifier: pa0iIOmC06Kk4LNKgVy0y76HGr9nTM8reyTYRY+2AEM= Subject key identifier: 65:68:E4:46:13:BA:86:6A:49:C7:E1:A8:A0:4C:5C:5B:99:9D:EA:1B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963629D892C5EF8D70A7E700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db87597d-4341-3d49-8637-5aabb8fb954c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.209.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:29:d8:92:c5:ef:8d:70:a7:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=37b9df92-3971-4900-b53a-eeab73dc4e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:71:0a:e2:8b:16:d3:17:0a:1f:2a:a7:c5: 70:b0:f1:3d:61:56:54:8a:07:98:37:03:1e:0d:e2: 6e:5e:52:b4:76:12:de:5e:fa:fd:2d:b8:12:dc:52: 0c:dc:e5:7c:1b:7f:82:7a:9e:bf:c7:2b:60:a0:25: 5b:f8:ec:76:92:82:a7:9f:f3:34:62:31:d8:27:60: a1:3f:fe:d7:0d:f5:4b:84:28:3e:e9:19:6d:42:81: 85:1d:96:13:6c:9e:b1:8e:dd:9c:28:65:db:7e:11: d2:91:5f:81:03:77:07:7c:59:90:0c:61:5b:2b:fa: 5e:39:9d:a5:a5:05:b2:4d:1b:6e:e3:83:5e:b2:2b: ef:24:17:67:b7:9a:45:b0:2f:05:99:f7:13:f4:25: 53:ec:ac:8d:e6:74:c2:60:4c:59:a6:d5:00:2e:bb: ac:f7:bd:81:65:ed:bc:b2:2e:31:e0:08:cd:e4:fa: 5a:7b:54:16:35:4e:66:2b:64:3a:7a:5e:b2:66:4e: 85:bd:f5:9d:fa:c4:2c:43:26:31:b2:b3:0e:0d:6d: 41:73:58:92:ec:d3:d5:45:d3:36:f8:ab:a0:f3:2a: 04:5b:cf:58:b5:47:ef:ba:61:67:78:d2:97:82:c1: e1:28:e1:71:e9:38:ea:7a:a8:f7:c5:b2:44:ca:df: 74:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:68:E4:46:13:BA:86:6A:49:C7:E1:A8:A0:4C:5C:5B:99:9D:EA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db87597d-4341-3d49-8637-5aabb8fb954c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:59:ee:35:55:78:96:14:a5:3d:18:44:c2:84:f8:4b:6b:dd: 7a:8e:d3:f9:71:c3:c6:07:0f:6c:97:dd:a9:3c:27:4f:20:66: 34:e8:20:da:08:e6:2d:9b:17:ed:6a:d3:1b:93:4e:79:7b:b4: 48:4f:fd:0c:88:e5:ce:34:0f:ab:ed:e9:9a:14:9c:74:b3:66: 0d:41:2e:f7:1d:4f:b0:e1:66:b1:91:1a:50:c0:08:8c:27:c3: 8b:33:2b:13:5c:7c:1e:2d:ef:e4:c1:7a:98:84:d6:bc:6c:bc: 4a:10:c5:b5:c5:9b:7a:4e:32:a8:ef:0d:ef:f8:e9:7e:c9:f4: a8:d3:a9:66:9e:20:7c:0e:73:03:d6:59:80:85:77:b7:1d:16: f4:78:15:bc:48:e3:27:e4:98:2f:c8:93:48:7d:1d:bb:54:76: b5:18:b6:66:35:9b:c8:21:4c:89:f1:eb:c3:83:ce:ff:92:14: e4:a8:fc:ea:db:cb:75:c1:da:3c:2e:6e:25:59:38:03:a3:67: fc:79:8a:3e:c8:9d:e3:e3:50:27:9e:d9:33:27:20:ed:41:1d: 8c:f1:db:30:18:15:4a:af:52:da:af:50:e0:b2:6a:69:5d:38: db:a7:f1:db:e8:9b:1c:39:60:24:80:9b:13:69:24:42:e4:35: 1f:11:a8:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNinYksXvjXCn5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzdiOWRmOTItMzk3MS00OTAwLWI1M2EtZWVhYjczZGM0ZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9dxCuKLFtMXCh8qp8VwsPE9YVZUigeYNwMe DeJuXlK0dhLeXvr9LbgS3FIM3OV8G3+Cep6/xytgoCVb+Ox2koKnn/M0YjHYJ2Ch P/7XDfVLhCg+6RltQoGFHZYTbJ6xjt2cKGXbfhHSkV+BA3cHfFmQDGFbK/peOZ2l pQWyTRtu44NesivvJBdnt5pFsC8FmfcT9CVT7KyN5nTCYExZptUALrus972BZe28 si4x4AjN5Ppae1QWNU5mK2Q6el6yZk6FvfWd+sQsQyYxsrMODW1Bc1iS7NPVRdM2 +Kug8yoEW89YtUfvumFneNKXgsHhKOFx6Tjqeqj3xbJEyt90AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVo5EYTuoZqScfhqKBMXFuZneobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGI4NzU5N2QtNDM0MS0z ZDQ5LTg2MzctNWFhYmI4ZmI5NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJZ7jVVeJYUpT0YRMKE+Etr3XqO0/lxw8YHD2yX3ak8J08gZjToINoI 5i2bF+1q0xuTTnl7tEhP/QyI5c40D6vt6ZoUnHSzZg1BLvcdT7DhZrGRGlDACIwn w4szKxNcfB4t7+TBepiE1rxsvEoQxbXFm3pOMqjvDe/46X7J9KjTqWaeIHwOcwPW WYCFd7cdFvR4FbxI4yfkmC/Ik0h9HbtUdrUYtmY1m8ghTInx68ODzv+SFOSo/Orb y3XB2jwubiVZOAOjZ/x5ij7InePjUCee2TMnIO1BHYzx2zAYFUqvUtqvUOCyamld ONun8dvomxw5YCSAmxNpJELkNR8RqD8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:57:50 2025 by rpki-client