$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fce1b4ee-f603-363a-8770-3febb666a029.roa File: fce1b4ee-f603-363a-8770-3febb666a029.roa (raw, json) Hash identifier: 4km/veejYUvDFIvpl8oF/i8ho8vuIenxJNPDRp+wWlg= Subject key identifier: DF:56:ED:A5:92:0D:55:58:A5:CD:75:F5:58:6F:E9:0A:9D:D0:88:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963677E4CC782D09F1283100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fce1b4ee-f603-363a-8770-3febb666a029.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.221.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:77:e4:cc:78:2d:09:f1:28:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=4d2aa1ae-9ec5-456e-a897-905c0bb19cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:ef:11:97:bb:d8:8c:57:c7:77:23:b3:3f: 56:b4:12:b6:0d:7b:21:45:51:f1:af:42:c6:2c:0e: f6:2c:71:04:cb:cf:fd:e2:2d:dc:c3:1b:bb:88:75: ef:4e:b7:e0:06:db:f7:95:13:75:ee:33:24:7f:8a: 56:dd:08:31:d0:b6:a3:6e:d9:16:91:2e:b6:37:a4: 13:f4:f0:bf:a5:5d:fb:29:99:f4:d5:58:ae:b6:96: 41:89:37:5b:bb:49:c8:21:7b:4e:4e:f9:f5:42:d8: 56:b0:de:5f:f9:7e:9c:29:d0:6e:6b:9d:b9:0b:e1: 29:15:c1:8a:07:42:ad:b7:08:2f:f6:b7:50:a9:40: 79:4c:e4:b8:06:ff:7e:fa:a5:2c:82:a1:ac:93:69: c4:53:bc:00:05:f6:98:ac:69:46:e4:a0:af:bf:82: 6a:a6:40:bf:fb:fa:c8:e3:51:c9:8c:8c:28:0b:ba: 4a:1c:b9:6f:30:f8:e0:ed:80:1a:f0:d4:62:e6:e3: 55:c7:51:24:9d:58:eb:4f:7d:38:3c:c7:8c:75:d0: 80:8f:b0:c2:5d:4a:f1:0c:1d:05:a5:f9:4a:0f:00: 59:71:5c:5b:38:10:7a:ff:be:d0:67:a9:c2:32:cc: 60:f0:7f:35:fe:6e:c6:63:80:37:c9:69:06:c7:0c: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:56:ED:A5:92:0D:55:58:A5:CD:75:F5:58:6F:E9:0A:9D:D0:88:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fce1b4ee-f603-363a-8770-3febb666a029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:74:5b:7c:0f:1c:b7:47:31:d6:ff:cd:0e:fe:3c:f4:ca:19: 92:72:87:c4:be:30:db:94:3a:2f:35:b0:cc:61:d2:ec:61:81: 0f:8b:f5:a4:c8:36:9a:85:8e:f4:25:0c:77:cf:14:20:50:e5: db:17:7b:ea:78:17:8e:39:8c:3a:75:79:92:d1:23:e3:06:07: f0:6f:d5:a9:a3:1c:87:11:ce:63:5d:27:1a:d4:16:59:94:32: 5c:a8:db:bf:9e:da:25:2d:0d:61:55:ae:ef:7e:ba:92:2e:eb: 43:52:32:8f:04:1d:0f:e9:21:b7:93:94:b2:fd:b0:96:dd:e8: 22:d7:d2:90:2a:79:1a:cb:27:72:2f:67:7d:f6:45:3e:d9:c1: c0:16:43:11:6d:4b:83:dc:a9:98:79:59:d1:5c:62:d9:af:01: 6b:66:e8:dd:8d:00:b1:c8:2b:6b:db:c0:56:83:4b:82:61:a7: 2f:a4:42:f9:64:c0:c2:da:97:bc:6f:d1:16:4f:20:f0:4d:23: 5d:fd:a7:71:c8:83:9c:86:dd:a7:8c:d1:29:71:f6:53:1e:0e: 45:c9:10:6d:dd:73:71:d6:51:67:e5:06:ce:52:ff:fd:a8:4f: c2:92:81:53:12:48:25:c3:19:39:43:a8:92:c3:f4:5e:0b:09: 22:bc:fe:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnfkzHgtCfEoMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NGQyYWExYWUtOWVjNS00NTZlLWE4OTctOTA1YzBiYjE5Y2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlPvEZe72IxXx3cjsz9WtBK2DXshRVHxr0LG LA72LHEEy8/94i3cwxu7iHXvTrfgBtv3lRN17jMkf4pW3Qgx0LajbtkWkS62N6QT 9PC/pV37KZn01ViutpZBiTdbu0nIIXtOTvn1QthWsN5f+X6cKdBua525C+EpFcGK B0Kttwgv9rdQqUB5TOS4Bv9++qUsgqGsk2nEU7wABfaYrGlG5KCvv4JqpkC/+/rI 41HJjIwoC7pKHLlvMPjg7YAa8NRi5uNVx1EknVjrT304PMeMddCAj7DCXUrxDB0F pflKDwBZcVxbOBB6/77QZ6nCMsxg8H81/m7GY4A3yWkGxwzZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9W7aWSDVVYpc119Vhv6Qqd0IhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmNlMWI0ZWUtZjYwMy0z NjNhLTg3NzAtM2ZlYmI2NjZhMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG10W3wPHLdHMdb/zQ7+PPTKGZJyh8S+MNuUOi81sMxh0uxhgQ+L9aTI NpqFjvQlDHfPFCBQ5dsXe+p4F445jDp1eZLRI+MGB/Bv1amjHIcRzmNdJxrUFlmU Mlyo27+e2iUtDWFVru9+upIu60NSMo8EHQ/pIbeTlLL9sJbd6CLX0pAqeRrLJ3Iv Z332RT7ZwcAWQxFtS4PcqZh5WdFcYtmvAWtm6N2NALHIK2vbwFaDS4Jhpy+kQvlk wMLal7xv0RZPIPBNI139p3HIg5yG3aeM0Slx9lMeDkXJEG3dc3HWUWflBs5S//2o T8KSgVMSSCXDGTlDqJLD9F4LCSK8/iU= -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:13 2025 by rpki-client