$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f875a32-69d0-3a3d-bf38-67f56862e7dc.roa File: 5f875a32-69d0-3a3d-bf38-67f56862e7dc.roa (raw, json) Hash identifier: 6DgERcQmFGMWmlDYfcOkWrwFEvzyu2GWenFKIm38KRQ= Subject key identifier: 95:7D:C4:57:37:AE:63:C8:5E:3C:FB:B1:E6:54:95:DD:5E:43:4A:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636775C2C23FEE4D5AF1340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f875a32-69d0-3a3d-bf38-67f56862e7dc.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.221.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:77:5c:2c:23:fe:e4:d5:af:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=96344094-b1de-4234-8908-cfceab253cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f3:83:dd:4a:70:ce:91:ce:cd:1b:12:b6:58: 54:54:56:60:11:51:4d:e9:a9:32:2c:e9:80:e9:8d: 7d:d4:20:99:84:47:c8:0c:32:d1:fa:53:ab:f4:02: 94:b5:f9:f1:cf:f0:a6:fe:a1:a4:8b:bb:2b:1c:0d: fa:53:3f:60:d2:cd:05:5c:9e:59:38:62:c2:1f:fd: bd:df:67:81:09:16:a1:56:f8:d6:c0:83:09:a9:bb: d4:63:0a:95:93:55:92:92:22:2b:0a:74:70:06:c5: c6:57:b6:49:a1:ea:76:8b:04:d3:3f:43:17:b3:bd: 58:3c:07:f6:bd:53:12:ea:a6:df:68:55:20:fa:2d: 50:6a:a1:57:50:78:02:98:e7:fc:f8:cf:a7:2f:4d: f1:3b:db:4c:5b:60:13:d5:90:d9:c5:0f:ba:1f:c5: 76:28:64:e7:74:3e:ec:8b:d2:7e:8f:0c:99:ac:d0: ba:d7:fc:04:04:d5:93:c0:ac:14:63:1a:fb:69:17: ea:9f:84:a8:1b:04:43:06:9f:c8:29:96:57:4c:60: 5f:d1:8e:5b:12:26:3a:b9:a4:1b:7e:6c:f5:5f:95: 76:88:fd:7e:1d:eb:13:fb:25:bd:ef:13:99:46:5f: 06:b2:da:e7:4b:48:74:b0:28:c5:e4:d0:0d:6f:41: 9c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:C4:57:37:AE:63:C8:5E:3C:FB:B1:E6:54:95:DD:5E:43:4A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f875a32-69d0-3a3d-bf38-67f56862e7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:64:34:96:0c:0c:0d:9f:27:fd:80:04:04:78:b5:e4:bf:92: 29:c5:8e:88:3a:46:81:48:9f:2a:d5:f4:2d:41:d3:27:d7:72: 91:56:95:33:eb:f0:62:8f:b2:c1:91:f1:2d:84:b2:2b:bb:75: ad:bf:47:e1:68:a6:93:fa:42:a2:3f:5c:3d:15:d5:f5:24:c0: 24:70:53:43:23:7d:97:3d:64:51:95:a8:84:23:16:98:c3:71: 10:08:31:aa:ed:7a:64:43:5c:7b:7e:33:d1:c7:00:00:17:d5: ff:58:e7:35:86:88:46:41:01:46:96:77:8d:6f:5c:e5:af:c7: cf:fc:45:dc:c7:f9:da:30:c3:2b:0a:8a:99:df:5e:16:22:3c: 9b:1b:c9:ea:c6:02:c9:16:1e:08:d0:44:dd:3c:e6:90:6d:a6: 7f:70:b3:3a:2f:e7:90:66:13:a5:57:cc:a7:e6:e9:8c:9f:9b: ef:6f:7d:51:9b:32:e1:24:8a:a6:9e:74:95:e2:32:03:51:fc: 8e:38:1c:e6:e9:64:3e:2a:a9:8f:3d:33:0f:f1:94:95:c6:94: a1:d2:81:a0:b9:2a:6b:a8:71:ff:0a:00:dd:b4:ee:55:5b:9f: 4f:b8:3e:3d:7e:0f:f3:3a:f5:c9:8f:8b:3c:27:09:00:31:73: 4f:10:9b:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNndcLCP+5NWvE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OTYzNDQwOTQtYjFkZS00MjM0LTg5MDgtY2ZjZWFiMjUzY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1POD3UpwzpHOzRsStlhUVFZgEVFN6akyLOmA 6Y191CCZhEfIDDLR+lOr9AKUtfnxz/Cm/qGki7srHA36Uz9g0s0FXJ5ZOGLCH/29 32eBCRahVvjWwIMJqbvUYwqVk1WSkiIrCnRwBsXGV7ZJoep2iwTTP0MXs71YPAf2 vVMS6qbfaFUg+i1QaqFXUHgCmOf8+M+nL03xO9tMW2AT1ZDZxQ+6H8V2KGTndD7s i9J+jwyZrNC61/wEBNWTwKwUYxr7aRfqn4SoGwRDBp/IKZZXTGBf0Y5bEiY6uaQb fmz1X5V2iP1+HesT+yW97xOZRl8GstrnS0h0sCjF5NANb0GcjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV9xFc3rmPIXjz7seZUld1eQ0rMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWY4NzVhMzItNjlkMC0z YTNkLWJmMzgtNjdmNTY4NjJlN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1kNJYMDA2fJ/2ABAR4teS/kinFjog6RoFInyrV9C1B0yfXcpFWlTPr 8GKPssGR8S2Esiu7da2/R+FoppP6QqI/XD0V1fUkwCRwU0MjfZc9ZFGVqIQjFpjD cRAIMartemRDXHt+M9HHAAAX1f9Y5zWGiEZBAUaWd41vXOWvx8/8RdzH+dowwysK ipnfXhYiPJsbyerGAskWHgjQRN085pBtpn9wszov55BmE6VXzKfm6Yyfm+9vfVGb MuEkiqaedJXiMgNR/I44HObpZD4qqY89Mw/xlJXGlKHSgaC5Kmuocf8KAN207lVb n0+4Pj1+D/M69cmPizwnCQAxc08Qm/8= -----END CERTIFICATE-----Generated at Sun Aug 24 00:33:36 2025 by rpki-client