$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa File: 98581b07-31ae-380b-9152-29fa36e9ac7c.roa (raw, json) Hash identifier: 1ToZ0BEXtmcXiCz27rNdf0stoeLaNb325qHtW12z/D4= Subject key identifier: 05:AA:7D:C5:5A:22:E8:E7:0B:B6:8D:C6:E7:5A:F0:FE:63:B8:1B:4F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA610FF05E9FDE543883C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 72.219.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:61:0f:f0:5e:9f:de:54:38:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=771c76d1-cc08-4930-8e1b-e1c92019a582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:d7:62:e6:fb:df:a1:e4:89:0a:26:3f:fa: 39:99:15:06:db:c4:f9:27:35:dc:ad:b9:56:20:a0: b1:a1:e8:02:e9:29:72:f2:a6:45:a5:29:86:0b:41: e1:a4:45:7a:0c:28:6c:b5:62:5c:bd:6f:db:33:51: ee:01:1c:73:1b:8d:f3:d6:c4:d2:6e:2e:d8:56:eb: 71:c4:58:05:6e:11:04:39:fc:03:25:04:18:d0:e8: 6d:cd:0d:e4:88:38:1e:69:51:91:6d:fe:17:2a:7c: f8:a3:ec:85:0d:ff:d2:54:e1:38:73:15:c8:f7:c8: 4b:43:2f:ee:6b:d0:08:3b:af:f6:83:82:5d:e2:75: c6:fc:c6:2b:0e:67:3b:89:ea:68:01:ea:5c:4c:5e: 03:3d:e7:ce:e6:d5:09:c2:1f:0b:99:36:e2:31:39: bf:a5:34:2d:d4:7c:ae:3e:cd:75:df:e8:ec:eb:47: 98:ac:62:86:19:c4:ce:8e:a7:fd:ba:1c:89:c4:f6: fc:5f:3f:49:84:79:28:71:6b:b7:c2:8b:34:5a:93: 52:f6:09:d7:05:43:5f:8f:38:02:b8:55:78:40:83: fb:80:d2:26:f0:8a:44:5e:81:24:7e:0f:21:c5:1a: c6:55:75:ca:f2:67:20:84:b6:fb:8d:03:3f:a3:40: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AA:7D:C5:5A:22:E8:E7:0B:B6:8D:C6:E7:5A:F0:FE:63:B8:1B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4d:67:4b:20:a8:4a:85:0f:f3:18:a1:b1:8a:87:46:58:81: d7:a8:3e:81:89:b9:33:c9:4b:4b:f5:ae:53:7e:d0:45:1d:5e: 63:99:e3:de:9a:d0:71:8d:e0:a7:87:bd:5c:02:7e:29:9e:48: 35:1d:9e:34:f4:af:6c:35:a2:ad:36:42:62:fc:5a:f8:03:bf: 16:72:bb:08:d8:b4:4c:d7:58:ad:70:0e:6a:46:81:77:54:15: 50:56:67:bf:7a:e2:b8:ec:68:07:08:1a:4b:27:1b:7b:22:32: 43:0f:4a:77:d4:59:b0:bb:c0:e4:a0:91:3c:01:28:70:1e:6f: aa:62:28:20:90:1d:1a:d6:e2:ba:7c:5c:f0:84:e6:bd:90:6c: 24:57:40:6d:24:7c:bf:5b:5d:65:e3:01:ff:39:91:13:77:cc: 5b:00:08:0d:88:7e:2f:4b:42:00:16:66:a3:6d:a0:ea:9d:7c: 6e:ce:51:24:9c:7f:b7:9c:f8:43:57:4f:a9:53:76:27:d0:03: 1b:c9:6c:e2:6c:16:f7:69:f1:3b:25:f7:bc:d8:d3:61:8f:47: 6d:55:45:09:68:4d:37:64:60:4a:52:7b:61:a8:a3:8f:4c:c6: 2c:28:e5:af:da:05:30:fd:5b:c2:8f:d1:e8:ea:97:2f:06:11: 83:4d:2e:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mEP8F6f3lQ4g8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NzcxYzc2ZDEtY2MwOC00OTMwLThlMWItZTFjOTIwMTlhNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsirXYub736HkiQomP/o5mRUG28T5JzXcrblW IKCxoegC6Sly8qZFpSmGC0HhpEV6DChstWJcvW/bM1HuARxzG43z1sTSbi7YVutx xFgFbhEEOfwDJQQY0OhtzQ3kiDgeaVGRbf4XKnz4o+yFDf/SVOE4cxXI98hLQy/u a9AIO6/2g4Jd4nXG/MYrDmc7iepoAepcTF4DPefO5tUJwh8LmTbiMTm/pTQt1Hyu Ps113+js60eYrGKGGcTOjqf9uhyJxPb8Xz9JhHkocWu3wos0WpNS9gnXBUNfjzgC uFV4QIP7gNIm8IpEXoEkfg8hxRrGVXXK8mcghLb7jQM/o0BF8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWqfcVaIujnC7aNxuda8P5juBtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTg1ODFiMDctMzFhZS0z ODBiLTkxNTItMjlmYTM2ZTlhYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhNZ0sgqEqFD/MYobGKh0ZYgdeoPoGJuTPJS0v1rlN+0EUdXmOZ496a 0HGN4KeHvVwCfimeSDUdnjT0r2w1oq02QmL8WvgDvxZyuwjYtEzXWK1wDmpGgXdU FVBWZ7964rjsaAcIGksnG3siMkMPSnfUWbC7wOSgkTwBKHAeb6piKCCQHRrW4rp8 XPCE5r2QbCRXQG0kfL9bXWXjAf85kRN3zFsACA2Ifi9LQgAWZqNtoOqdfG7OUSSc f7ec+ENXT6lTdifQAxvJbOJsFvdp8Tsl97zY02GPR21VRQloTTdkYEpSe2Goo49M xiwo5a/aBTD9W8KP0ejqly8GEYNNLsU= -----END CERTIFICATE-----Generated at Tue Jul 1 18:56:39 2025 by rpki-client