$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb415ebb-1c36-3065-b437-c0d04e3e2f9a.roa File: eb415ebb-1c36-3065-b437-c0d04e3e2f9a.roa (raw, json) Hash identifier: 2Ca0uvNFdJx1sHSgBzoKamu62LZyZhjQS+bb3Ewg6wo= Subject key identifier: CD:56:53:BD:F3:ED:28:66:E5:11:2C:80:92:D1:28:29:FB:11:D6:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636778BDFFA55F6B31C8300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb415ebb-1c36-3065-b437-c0d04e3e2f9a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.221.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:77:8b:df:fa:55:f6:b3:1c:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=c8ef1a10-bc28-4960-ba2c-8e0562487de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:2c:46:9a:07:72:7c:53:88:82:90:45:0a: 10:fe:5a:11:9b:4e:5f:e7:ce:0d:ff:ea:20:10:52: fa:08:4f:4c:c1:22:2c:29:cc:00:98:8f:5c:3d:e0: e6:08:85:44:fc:5a:20:87:8e:8a:51:7f:69:e4:e9: 5a:1e:97:d1:53:1e:6a:a0:09:4a:66:3b:1b:03:fd: 12:31:4b:25:c4:71:61:8b:17:4a:32:8e:c9:30:b2: ec:81:7f:83:00:bf:da:cc:e2:e4:a8:b2:1a:c2:44: 23:ce:6d:4e:50:83:fc:3c:65:26:07:f7:40:d5:c8: da:08:ec:bd:a8:4c:43:28:04:44:d1:c8:47:d9:8a: a3:a1:1e:e4:4b:de:88:ed:b3:61:61:d8:b5:b6:1f: 93:d7:fc:8b:81:f6:09:4d:15:af:c9:be:81:72:6a: a6:13:84:ab:22:07:fc:c8:b2:e5:ee:05:3e:a6:31: 5d:ac:4b:41:17:1f:f2:3d:d1:81:1e:cb:e6:8f:16: 05:d4:bf:63:55:86:5b:27:9a:2b:16:3d:1d:f7:0e: 25:d0:42:4d:65:5e:89:b8:2e:6d:ee:75:77:29:ff: 7d:96:0a:23:f6:a0:a2:9a:9f:1b:76:39:02:6d:a3: dd:19:ba:f2:b5:08:9e:5d:85:e4:76:20:6b:37:d9: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:56:53:BD:F3:ED:28:66:E5:11:2C:80:92:D1:28:29:FB:11:D6:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb415ebb-1c36-3065-b437-c0d04e3e2f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ee:4e:4b:f5:ac:43:56:a0:d2:39:6a:6c:64:a1:07:9c:55: da:26:9d:a9:03:7d:12:6d:92:5b:34:aa:80:3e:5b:96:3b:22: 07:d6:c7:5b:ec:8f:4a:4d:43:32:2c:3b:88:8b:06:c6:05:2d: 99:8b:5e:de:74:d0:d2:40:35:52:dc:75:9d:5e:ed:9e:7a:40: 68:99:83:85:b8:1d:c5:cf:60:39:17:89:82:7e:50:c9:a8:e7: be:45:d0:b2:e4:44:55:7c:06:89:2d:74:3e:b0:d3:02:2c:14: ba:ed:8e:b5:6c:53:de:18:8c:a0:7b:32:95:0f:d0:49:3f:5a: 99:86:9a:03:a0:86:91:32:ea:bf:8d:6a:b4:e2:4a:c4:5b:46: a8:62:03:e8:6e:f0:71:b8:44:fc:59:e2:a8:b2:6f:fa:1c:65: 84:5f:61:5a:d1:62:d1:3e:15:e3:0e:26:f1:91:35:45:09:db: b0:33:75:6c:5a:9f:43:42:97:5d:c5:60:bd:40:d2:92:03:de: 2c:f3:ba:32:76:b3:0e:fe:29:d7:b8:f8:fc:96:27:cb:50:d8: e7:33:ec:07:5b:93:b1:5f:5c:23:c7:4f:2f:d9:e7:f7:a9:8b: e8:c1:78:12:91:11:b8:fd:38:c4:6e:b4:11:2f:b3:a0:3b:eb: 26:a9:c2:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNneL3/pV9rMcgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YzhlZjFhMTAtYmMyOC00OTYwLWJhMmMtOGUwNTYyNDg3ZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh0sRpoHcnxTiIKQRQoQ/loRm05f584N/+og EFL6CE9MwSIsKcwAmI9cPeDmCIVE/Fogh46KUX9p5OlaHpfRUx5qoAlKZjsbA/0S MUslxHFhixdKMo7JMLLsgX+DAL/azOLkqLIawkQjzm1OUIP8PGUmB/dA1cjaCOy9 qExDKARE0chH2YqjoR7kS96I7bNhYdi1th+T1/yLgfYJTRWvyb6BcmqmE4SrIgf8 yLLl7gU+pjFdrEtBFx/yPdGBHsvmjxYF1L9jVYZbJ5orFj0d9w4l0EJNZV6JuC5t 7nV3Kf99lgoj9qCimp8bdjkCbaPdGbrytQieXYXkdiBrN9nfIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1WU73z7Shm5REsgJLRKCn7EdaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWI0MTVlYmItMWMzNi0z MDY1LWI0MzctYzBkMDRlM2UyZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvuTkv1rENWoNI5amxkoQecVdomnakDfRJtkls0qoA+W5Y7IgfWx1vs j0pNQzIsO4iLBsYFLZmLXt500NJANVLcdZ1e7Z56QGiZg4W4HcXPYDkXiYJ+UMmo 575F0LLkRFV8BoktdD6w0wIsFLrtjrVsU94YjKB7MpUP0Ek/WpmGmgOghpEy6r+N arTiSsRbRqhiA+hu8HG4RPxZ4qiyb/ocZYRfYVrRYtE+FeMOJvGRNUUJ27AzdWxa n0NCl13FYL1A0pID3izzujJ2sw7+Kde4+PyWJ8tQ2Ocz7Adbk7FfXCPHTy/Z5/ep i+jBeBKREbj9OMRutBEvs6A76yapwv8= -----END CERTIFICATE-----Generated at Thu Aug 7 02:04:04 2025 by rpki-client