$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad3e0d96-7a26-3984-9a80-30eb6481f933.roa File: ad3e0d96-7a26-3984-9a80-30eb6481f933.roa (raw, json) Hash identifier: wviX0SaSmuVvv9F6JFhU52tIkFVkRlKGW/jDLJPFLzY= Subject key identifier: 27:8F:39:6F:84:C8:C8:D9:01:7D:D8:2F:84:C4:13:EE:E4:80:82:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366D051B94F87DF4707400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad3e0d96-7a26-3984-9a80-30eb6481f933.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.197.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6d:05:1b:94:f8:7d:f4:70:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f838954e-9d93-425d-887f-fbd30cb1ce50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e1:cb:71:29:c1:94:02:f7:a8:04:d9:46:79: 97:ad:a0:45:05:78:d9:5f:b5:43:38:f9:8c:f3:98: 30:0d:4f:0a:55:57:cf:dc:5e:f1:1b:68:6f:bd:db: 99:42:7b:b4:d9:d8:5f:69:fe:77:67:e3:60:61:4e: 34:a7:52:8b:5b:3b:b3:20:18:c9:5b:01:8a:e2:c0: f1:ba:a4:97:53:3f:19:be:69:eb:b3:7c:39:a9:39: ba:a8:b4:c7:26:40:5a:a5:ef:a0:6a:0b:34:b9:42: 1b:68:32:4b:9a:64:14:de:77:0a:e4:a3:8c:71:5d: 7c:23:a9:05:ae:67:80:0f:b8:e4:f6:e4:18:3d:66: 3d:c7:82:31:70:3e:6d:8e:c4:0f:2e:98:aa:73:e6: 44:25:71:9c:f4:f3:08:f6:f5:87:5a:48:c1:0b:49: c3:06:7b:92:4f:40:2a:0f:fd:93:dd:af:f2:fb:c6: d1:b8:49:e0:77:aa:61:84:0a:7a:a5:90:b3:66:71: 96:aa:58:db:af:e8:00:cb:ce:c8:c2:8c:ec:95:e1: 15:98:bc:00:92:a9:eb:ce:d3:17:47:85:28:77:ce: 2a:8f:9b:54:7b:62:7c:62:2c:bb:d8:0d:b6:af:75: 04:14:a9:f8:21:c7:b3:3b:bc:09:60:8f:b8:f2:1d: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8F:39:6F:84:C8:C8:D9:01:7D:D8:2F:84:C4:13:EE:E4:80:82:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad3e0d96-7a26-3984-9a80-30eb6481f933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:43:86:22:2b:8d:ed:a5:51:7a:f4:17:fd:4b:06:eb:39:69: ef:be:fb:2d:8e:e3:10:01:9a:ca:4f:63:4e:5b:67:8c:d0:4d: de:c1:51:5f:9b:48:6b:4f:74:e9:8d:c2:54:1a:20:e1:7f:7f: e5:35:c0:ac:16:bc:42:2f:43:bf:31:f8:27:da:fd:01:86:81: b5:cf:79:eb:9d:6a:f3:14:6f:25:6c:19:45:d1:b3:29:5b:cb: 88:0d:cf:14:2a:eb:5c:9a:8f:80:2e:40:32:b7:fd:72:1e:13: fc:c0:0b:bb:6f:69:03:f2:d3:00:e8:34:42:74:f6:5a:30:dc: e9:c9:ee:17:9e:a8:17:99:d8:4d:a1:af:91:97:4d:96:79:fc: b6:46:22:40:19:8b:64:8c:2c:27:cd:13:0e:26:61:50:21:21: bb:a5:5f:28:ed:cd:71:09:cb:e2:d8:d0:20:60:4f:74:48:61: 9b:3c:bb:73:27:0c:c9:c9:f9:7b:96:2f:36:7d:c1:b9:37:34: 6c:9f:a1:11:92:27:c1:ad:96:b0:d0:e0:84:c3:56:42:1a:5b: 9c:e8:42:11:37:71:dc:b1:86:15:86:72:58:8b:66:29:ec:6e: c3:28:e6:3b:a3:f0:76:b7:4f:fa:be:89:0f:01:16:a4:ee:94: f4:a6:e3:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNm0FG5T4ffRwdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjgzODk1NGUtOWQ5My00MjVkLTg4N2YtZmJkMzBjYjFjZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOHLcSnBlAL3qATZRnmXraBFBXjZX7VDOPmM 85gwDU8KVVfP3F7xG2hvvduZQnu02dhfaf53Z+NgYU40p1KLWzuzIBjJWwGK4sDx uqSXUz8Zvmnrs3w5qTm6qLTHJkBape+gags0uUIbaDJLmmQU3ncK5KOMcV18I6kF rmeAD7jk9uQYPWY9x4IxcD5tjsQPLpiqc+ZEJXGc9PMI9vWHWkjBC0nDBnuST0Aq D/2T3a/y+8bRuEngd6phhAp6pZCzZnGWqljbr+gAy87IwozsleEVmLwAkqnrztMX R4Uod84qj5tUe2J8Yiy72A22r3UEFKn4IcezO7wJYI+48h2J3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCePOW+EyMjZAX3YL4TEE+7kgILOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWQzZTBkOTYtN2EyNi0z OTg0LTlhODAtMzBlYjY0ODFmOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdDhiIrje2lUXr0F/1LBus5ae+++y2O4xABmspPY05bZ4zQTd7BUV+b SGtPdOmNwlQaIOF/f+U1wKwWvEIvQ78x+Cfa/QGGgbXPeeudavMUbyVsGUXRsylb y4gNzxQq61yaj4AuQDK3/XIeE/zAC7tvaQPy0wDoNEJ09low3OnJ7heeqBeZ2E2h r5GXTZZ5/LZGIkAZi2SMLCfNEw4mYVAhIbulXyjtzXEJy+LY0CBgT3RIYZs8u3Mn DMnJ+XuWLzZ9wbk3NGyfoRGSJ8GtlrDQ4ITDVkIaW5zoQhE3cdyxhhWGcliLZins bsMo5juj8Ha3T/q+iQ8BFqTulPSm4wI= -----END CERTIFICATE-----Generated at Wed Aug 20 18:25:03 2025 by rpki-client