$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ff4ebf4-710d-3201-8d31-cd0abd8fa072.roa File: 6ff4ebf4-710d-3201-8d31-cd0abd8fa072.roa (raw, json) Hash identifier: d+FVHXo6w3kEskjsZCFHcCNi2tSthvREWXawTl14erQ= Subject key identifier: 00:53:17:76:B7:85:9E:0E:AE:A1:80:07:AB:02:AE:E1:C1:67:09:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA68F327F5745EF7DAD2280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ff4ebf4-710d-3201-8d31-cd0abd8fa072.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.219.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:8f:32:7f:57:45:ef:7d:ad:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=67b61c02-116a-4a52-8947-00fbe0eeb162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:16:55:f6:61:86:40:67:c3:3c:cc:55:b3:53: bf:de:1d:44:80:ab:4e:cb:34:80:03:20:93:9a:3f: 1d:8d:06:88:de:01:41:e4:72:10:f9:b3:3b:c1:98: 29:9d:7e:bf:24:cc:82:ce:40:3a:99:82:d8:f0:99: f4:b1:04:54:f6:f8:0e:1c:fa:62:27:f3:5a:56:3c: 7c:24:12:cd:90:14:2d:b8:12:38:16:13:cb:ee:f6: d2:6b:79:99:43:98:ee:e7:6c:f5:3b:bd:2f:23:a0: ac:1f:e9:cd:f9:48:11:d2:28:1a:e2:2c:8d:1c:03: 21:ef:ff:46:73:b4:1e:26:dc:23:5f:69:86:2f:1d: 61:26:b9:0a:f4:df:e6:e4:6b:fc:11:9b:da:cf:8e: 5f:d7:ad:11:4a:8f:ea:4d:d8:1a:39:34:18:f5:36: 27:9e:d9:74:49:b6:72:e7:78:a1:9f:a9:3e:69:e4: 87:c6:f2:69:a7:0f:2b:04:16:77:7c:97:b7:77:c9: 29:61:21:fa:ed:01:96:cf:82:85:ee:8f:dc:d8:dc: ee:9a:4a:a6:f5:e8:58:85:1f:b9:f1:6d:b0:37:d9: 55:dd:83:c7:79:e9:59:22:54:92:e5:43:5e:e1:a7: 32:67:fe:1a:bd:22:42:f9:5a:ed:60:68:34:3c:09: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:53:17:76:B7:85:9E:0E:AE:A1:80:07:AB:02:AE:E1:C1:67:09:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ff4ebf4-710d-3201-8d31-cd0abd8fa072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ef:04:f0:b1:a4:fc:a4:76:3d:1a:2c:6a:e3:04:7e:e0:92: dd:3b:3d:d6:2d:4d:95:31:6e:a4:b3:f9:fb:87:61:68:82:25: dc:70:6c:88:a8:0d:d8:84:63:cb:37:82:07:4b:80:41:7f:c1: 92:df:f0:73:03:2f:97:fd:ea:98:c7:ca:d0:84:4a:1e:41:e4: 88:1e:bd:01:6a:d4:ec:bb:1a:66:96:8e:6e:95:67:19:25:8f: 66:0d:6e:7b:e8:0e:7d:a0:dd:ec:2b:dd:9b:ef:00:2e:ed:89: 47:19:1d:b8:d8:7b:82:7e:3d:08:79:08:96:ed:b1:cf:04:02: a9:f6:34:3c:c2:a8:28:65:e0:6e:e7:eb:1d:4c:da:ea:24:6c: 1b:a9:be:89:10:46:aa:8a:3d:c5:99:37:b7:4f:13:26:39:cc: 81:b1:9b:20:e2:85:e3:e5:ef:76:05:a1:0b:69:8b:d7:84:75: 88:40:db:1d:03:58:bb:65:35:7e:ff:b8:b1:ca:ee:65:0a:cd: bf:04:c3:3f:e5:db:b5:95:69:d7:8f:4f:63:c5:eb:37:5a:ba: da:bb:b0:ea:8f:16:eb:ab:f8:f5:a8:73:2c:91:e5:db:09:95: bd:2b:f3:da:c9:7a:1f:bc:82:27:a4:5d:0c:e2:82:09:c4:b9: b1:27:78:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpo8yf1dF732tIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NjdiNjFjMDItMTE2YS00YTUyLTg5NDctMDBmYmUwZWViMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBZV9mGGQGfDPMxVs1O/3h1EgKtOyzSAAyCT mj8djQaI3gFB5HIQ+bM7wZgpnX6/JMyCzkA6mYLY8Jn0sQRU9vgOHPpiJ/NaVjx8 JBLNkBQtuBI4FhPL7vbSa3mZQ5ju52z1O70vI6CsH+nN+UgR0iga4iyNHAMh7/9G c7QeJtwjX2mGLx1hJrkK9N/m5Gv8EZvaz45f160RSo/qTdgaOTQY9TYnntl0SbZy 53ihn6k+aeSHxvJppw8rBBZ3fJe3d8kpYSH67QGWz4KF7o/c2Nzumkqm9ehYhR+5 8W2wN9lV3YPHeelZIlSS5UNe4acyZ/4avSJC+VrtYGg0PAlLdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABTF3a3hZ4OrqGAB6sCruHBZwkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmZmNGViZjQtNzEwZC0z MjAxLThkMzEtY2QwYWJkOGZhMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXvBPCxpPykdj0aLGrjBH7gkt07PdYtTZUxbqSz+fuHYWiCJdxwbIio DdiEY8s3ggdLgEF/wZLf8HMDL5f96pjHytCESh5B5IgevQFq1Oy7GmaWjm6VZxkl j2YNbnvoDn2g3ewr3ZvvAC7tiUcZHbjYe4J+PQh5CJbtsc8EAqn2NDzCqChl4G7n 6x1M2uokbBupvokQRqqKPcWZN7dPEyY5zIGxmyDihePl73YFoQtpi9eEdYhA2x0D WLtlNX7/uLHK7mUKzb8Ewz/l27WVadePT2PF6zdautq7sOqPFuur+PWocyyR5dsJ lb0r89rJeh+8giekXQziggnEubEneOg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:01 2025 by rpki-client