$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb3a522e-c6d9-3cd0-bea9-433e85157dc6.roa File: fb3a522e-c6d9-3cd0-bea9-433e85157dc6.roa (raw, json) Hash identifier: TsSQcNEgV2IwopFRSsBaLbT2UPlZsm9KC6WgtqTnB6k= Subject key identifier: 68:12:A8:07:5E:FD:D7:B6:34:EE:E3:4A:64:90:D8:EF:BA:BC:68:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963628709ECC2644B056DC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb3a522e-c6d9-3cd0-bea9-433e85157dc6.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.200.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:28:70:9e:cc:26:44:b0:56:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=886b9851-4a98-4a3c-84b0-72ab4fba5ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:7f:41:24:1f:49:5c:81:82:78:c7:07:4e: e5:72:9e:be:ac:68:6e:02:50:e9:99:33:63:c4:36: f2:dc:7a:65:ce:92:12:73:75:7c:14:0b:53:e2:a4: e9:0a:c3:e7:22:1a:9a:2a:d9:27:78:06:11:90:4a: c1:0a:2d:7c:e4:25:0b:66:8f:51:4f:32:41:f6:22: df:42:5b:4a:52:a3:cd:96:2b:17:00:00:19:40:f2: 88:dc:5c:44:e5:0a:0a:54:33:8f:02:a5:39:31:17: d6:d9:7b:10:01:09:2e:f7:78:4e:3f:54:2a:4f:40: 69:d0:dd:16:d0:7d:17:fd:8e:ae:65:d9:25:e2:b1: 06:6a:e4:92:5e:23:2c:a1:f0:ff:33:a6:8f:c2:a4: 98:9d:c3:9d:76:b6:5b:a3:72:3a:28:78:cf:ff:31: fd:70:31:4b:15:20:a1:cd:c3:f1:b4:ed:b7:7b:05: bf:c3:8b:5e:d1:97:b6:70:45:b3:69:5b:c3:81:f0: 8e:d7:26:a1:23:2c:0b:cc:de:e3:27:44:a0:e5:25: 23:c2:86:7e:2c:58:5e:87:9c:55:77:2e:d9:4e:7c: ba:17:ae:96:f4:15:20:92:e7:62:70:81:73:36:95: 6a:c5:a3:27:1c:80:dc:36:1f:05:6d:c5:c4:2a:10: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:12:A8:07:5E:FD:D7:B6:34:EE:E3:4A:64:90:D8:EF:BA:BC:68:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb3a522e-c6d9-3cd0-bea9-433e85157dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fb:87:24:9c:17:0f:eb:21:11:61:57:05:69:42:8a:f2:d6: 4e:a2:c6:69:b7:bd:69:7b:5e:d9:67:1a:b7:c7:22:db:a6:b5: 0e:64:69:2b:89:cd:4a:d0:fe:77:b3:64:53:cb:a1:09:a8:a4: 33:7d:33:df:01:2d:66:99:34:3f:81:50:0d:39:d2:99:f0:8a: 12:f0:6a:68:0e:f4:fe:5c:8e:1c:43:53:df:9d:17:11:15:77: dc:70:d5:ba:80:b7:b1:16:d1:47:d9:66:6b:3d:60:cd:fd:c9: 70:b7:22:ff:6c:76:88:b4:00:ac:44:8b:16:f6:f8:61:05:3a: 20:16:b5:ee:87:12:d3:ac:e9:75:94:5e:db:60:c1:27:30:28: 89:03:bb:b3:25:f7:46:43:f5:fc:c9:48:9d:cd:55:47:5e:f7: 41:08:0a:ab:92:29:ce:40:a1:7c:ec:c3:98:01:8e:3f:95:17: a0:b6:c7:02:ce:d2:e7:e5:34:b3:99:6e:11:2f:e1:d5:c7:f6: 18:7e:b0:28:5f:20:c2:ee:c4:65:79:2f:c1:ea:e0:e1:5e:f9: b0:c8:a2:20:ef:03:03:7c:5b:a2:be:4c:85:e1:e4:2a:9f:eb: 07:a7:3c:21:67:5e:5b:43:57:9f:5d:73:8f:4f:d1:14:ea:36: e5:bd:7b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNihwnswmRLBW3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODg2Yjk4NTEtNGE5OC00YTNjLTg0YjAtNzJhYjRmYmE1ZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYh/QSQfSVyBgnjHB07lcp6+rGhuAlDpmTNj xDby3HplzpISc3V8FAtT4qTpCsPnIhqaKtkneAYRkErBCi185CULZo9RTzJB9iLf QltKUqPNlisXAAAZQPKI3FxE5QoKVDOPAqU5MRfW2XsQAQku93hOP1QqT0Bp0N0W 0H0X/Y6uZdkl4rEGauSSXiMsofD/M6aPwqSYncOddrZbo3I6KHjP/zH9cDFLFSCh zcPxtO23ewW/w4te0Ze2cEWzaVvDgfCO1yahIywLzN7jJ0Sg5SUjwoZ+LFheh5xV dy7ZTny6F66W9BUgkudicIFzNpVqxaMnHIDcNh8FbcXEKhAtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgSqAde/de2NO7jSmSQ2O+6vGiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmIzYTUyMmUtYzZkOS0z Y2QwLWJlYTktNDMzZTg1MTU3ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr7hyScFw/rIRFhVwVpQory1k6ixmm3vWl7XtlnGrfHItumtQ5kaSuJ zUrQ/nezZFPLoQmopDN9M98BLWaZND+BUA050pnwihLwamgO9P5cjhxDU9+dFxEV d9xw1bqAt7EW0UfZZms9YM39yXC3Iv9sdoi0AKxEixb2+GEFOiAWte6HEtOs6XWU XttgwScwKIkDu7Ml90ZD9fzJSJ3NVUde90EICquSKc5AoXzsw5gBjj+VF6C2xwLO 0uflNLOZbhEv4dXH9hh+sChfIMLuxGV5L8Hq4OFe+bDIoiDvAwN8W6K+TIXh5Cqf 6wenPCFnXltDV59dc49P0RTqNuW9ewY= -----END CERTIFICATE-----Generated at Fri Aug 8 10:17:58 2025 by rpki-client