$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda1c97e-79b9-3f70-a14b-be333a43abb1.roa File: dda1c97e-79b9-3f70-a14b-be333a43abb1.roa (raw, json) Hash identifier: aSIKKeDG00sRUXJuipygnVmfLYf1meu+/UtbYqnFH/g= Subject key identifier: B1:08:56:52:CF:33:2F:14:37:1A:48:8D:48:62:5E:F7:CB:80:38:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636730FB7F26E2E20464540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda1c97e-79b9-3f70-a14b-be333a43abb1.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:73:0f:b7:f2:6e:2e:20:46:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=777947b5-c216-468c-b2ee-e2fff073815b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:83:6d:8d:c6:3d:bc:29:97:f6:f3:4b:5c: ce:60:b8:8e:7c:02:98:6b:bf:e0:12:5e:18:4d:ed: 10:27:5a:a6:2e:92:c7:d4:56:b9:e9:2d:c1:81:76: 43:cf:73:04:f6:25:63:97:59:4b:3c:e7:f7:3b:d3: e4:2f:2b:20:1b:ad:1b:b7:3b:26:ac:77:23:8a:22: 94:1b:fb:10:3a:a4:c5:d2:81:55:22:6e:5c:a2:5b: 6e:01:bd:08:eb:89:12:81:46:e4:d3:69:d8:f2:da: 0b:91:4f:73:54:3b:c9:e7:e9:11:30:e5:14:0b:12: 1d:24:d3:d1:3c:a8:bf:aa:00:50:90:b9:87:10:d7: 23:98:b6:13:5a:12:7f:bd:f8:11:25:8d:22:33:b8: c7:ad:67:90:d3:47:43:b5:41:eb:29:b2:a2:77:fb: 3c:db:3a:64:de:8a:20:bf:38:7d:b2:56:40:be:9c: 37:d0:ba:1a:e2:a5:9f:7b:89:a8:3f:ac:6c:07:f6: 34:c8:22:9c:c3:b8:d4:6d:94:07:2c:d3:cc:f2:55: d3:e2:e5:f4:1a:9f:08:9d:8d:5f:3a:c9:a8:e4:b9: a9:aa:2e:14:a9:71:52:4d:cb:6e:b0:65:fe:3e:7e: 56:86:58:95:b3:93:94:91:ca:7c:90:5a:b2:4e:fe: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:08:56:52:CF:33:2F:14:37:1A:48:8D:48:62:5E:F7:CB:80:38:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda1c97e-79b9-3f70-a14b-be333a43abb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f0:ed:db:ad:e6:52:3a:63:61:ed:8c:f0:24:23:38:fa:07: 19:23:13:d3:32:68:05:76:a2:7d:81:04:eb:de:f3:8d:aa:3c: dc:fa:c9:db:4d:0d:f5:99:79:35:b1:b5:6e:77:0a:65:50:9e: 07:c9:ea:cb:41:d2:38:07:cf:84:65:d4:b4:37:e8:bc:07:02: 6b:0a:17:5c:0b:85:c9:bb:e4:5f:b3:c1:2e:da:65:7a:a6:71: 9a:1a:0f:9d:34:cc:f6:c6:96:92:28:f4:58:d6:95:00:c3:e9: 5e:68:e0:8d:40:9d:1f:75:5c:a2:27:c0:e5:8e:5b:2c:31:61: 9b:0b:ac:e5:a2:e3:23:62:d0:f6:25:da:f5:9b:6f:42:44:86: 22:ce:d7:d1:13:8d:a2:40:a5:78:a0:8f:8b:97:91:9c:c9:55: 67:16:b3:47:b2:95:0a:8a:29:58:92:39:6f:59:9f:52:ef:e6: 7c:13:b0:c4:04:e9:e9:7c:f6:23:d6:0c:6b:4a:dd:46:2e:d1: 94:59:0b:32:31:56:0e:60:09:8a:4e:5d:56:81:d3:bd:08:24: 38:bf:5f:e1:8a:d5:9b:82:7b:40:f8:45:35:a0:c5:2e:32:b1: 4a:50:a6:5c:82:b6:8b:6d:f4:88:20:db:59:77:54:a8:28:eb: 49:4f:8b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnMPt/JuLiBGRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Nzc3OTQ3YjUtYzIxNi00NjhjLWIyZWUtZTJmZmYwNzM4MTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5mDbY3GPbwpl/bzS1zOYLiOfAKYa7/gEl4Y Te0QJ1qmLpLH1Fa56S3BgXZDz3ME9iVjl1lLPOf3O9PkLysgG60btzsmrHcjiiKU G/sQOqTF0oFVIm5coltuAb0I64kSgUbk02nY8toLkU9zVDvJ5+kRMOUUCxIdJNPR PKi/qgBQkLmHENcjmLYTWhJ/vfgRJY0iM7jHrWeQ00dDtUHrKbKid/s82zpk3oog vzh9slZAvpw30Loa4qWfe4moP6xsB/Y0yCKcw7jUbZQHLNPM8lXT4uX0Gp8InY1f Osmo5Lmpqi4UqXFSTctusGX+Pn5WhliVs5OUkcp8kFqyTv6J9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEIVlLPMy8UNxpIjUhiXvfLgDjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRhMWM5N2UtNzliOS0z ZjcwLWExNGItYmUzMzNhNDNhYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/w7dut5lI6Y2HtjPAkIzj6BxkjE9MyaAV2on2BBOve842qPNz6ydtN DfWZeTWxtW53CmVQngfJ6stB0jgHz4Rl1LQ36LwHAmsKF1wLhcm75F+zwS7aZXqm cZoaD500zPbGlpIo9FjWlQDD6V5o4I1AnR91XKInwOWOWywxYZsLrOWi4yNi0PYl 2vWbb0JEhiLO19ETjaJApXigj4uXkZzJVWcWs0eylQqKKViSOW9Zn1Lv5nwTsMQE 6el89iPWDGtK3UYu0ZRZCzIxVg5gCYpOXVaB070IJDi/X+GK1ZuCe0D4RTWgxS4y sUpQplyCtott9Igg21l3VKgo60lPi04= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:25 2025 by rpki-client