$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f33f1ea-547d-371f-81a6-b54928a6ade3.roa File: 7f33f1ea-547d-371f-81a6-b54928a6ade3.roa (raw, json) Hash identifier: eMl/XolY4MLp06v56pykAiVIiKbxVQ4lrrr7o5ekACk= Subject key identifier: 86:BE:1E:8E:E5:4D:B2:5E:49:77:69:85:5D:D0:32:A8:FA:1C:CF:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA66482D6D83C8F59E4A380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f33f1ea-547d-371f-81a6-b54928a6ade3.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.219.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:64:82:d6:d8:3c:8f:59:e4:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=c1cad418-a752-421f-b670-0b0ce4c44bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:20:25:01:a0:b3:bd:54:bb:da:94:ab:dc:06: f9:7e:58:3d:ae:83:13:56:06:f0:58:5f:df:35:b4: 09:45:00:dc:4b:b9:83:6a:91:0d:b9:5c:64:5c:5e: 66:97:ba:66:dd:ef:35:75:b2:30:22:35:6e:4c:6d: 24:f5:f0:81:e1:40:18:d2:96:e0:8f:67:6e:6e:52: 34:6d:78:60:27:df:1e:9e:f6:c3:ca:28:37:49:cd: 0b:38:19:d3:dc:de:81:29:2a:f9:af:40:cd:34:e9: ff:78:9f:af:fe:39:92:94:20:63:b5:75:8c:b8:bc: 90:54:d1:25:ea:b4:07:42:08:1b:d2:98:2c:1f:86: 31:a0:36:c6:21:d8:ed:02:7c:d7:c8:28:2a:bc:73: d5:c6:5c:56:cf:fd:1f:0b:6b:ab:08:ab:91:81:bf: c3:6d:3c:55:a7:23:fb:e5:91:7a:80:56:f9:f0:90: 3f:96:fb:7c:f4:9c:9b:f8:f8:1f:48:1d:f9:20:3e: 36:66:6e:11:ad:c9:8c:e8:3b:8d:04:9e:3a:41:ff: 64:52:ec:67:f2:f8:62:14:fc:b0:97:28:1b:be:ae: 75:af:6d:60:45:77:ab:28:81:5b:6a:79:21:4b:a3: b7:bf:55:b2:d1:dd:75:c4:9b:0f:56:c2:90:fe:61: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BE:1E:8E:E5:4D:B2:5E:49:77:69:85:5D:D0:32:A8:FA:1C:CF:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f33f1ea-547d-371f-81a6-b54928a6ade3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8b:39:f9:60:3b:b9:0d:c4:24:2b:39:30:57:3d:a4:e7:d3: ab:e7:1e:4a:23:01:aa:a8:a4:36:8f:50:e7:55:3d:f1:a3:72: 1e:8a:09:c6:cd:c7:14:ce:00:fc:35:b8:00:f3:ee:36:2e:05: 3e:dd:70:20:c1:4f:4d:3e:95:2d:57:ce:86:90:55:aa:57:0e: 90:0c:0c:61:4a:f2:63:79:1a:c6:c5:b0:72:50:87:3e:df:b7: e8:40:5c:67:1c:d1:1b:42:f5:bf:98:26:d5:3e:60:f3:fc:65: b5:c3:4f:8d:ae:fc:4d:c1:54:5d:d9:90:ba:db:8b:21:86:ab: 04:64:37:22:5f:78:33:90:32:f9:a9:19:d2:2b:f8:64:6a:b9: 6a:24:7b:65:7b:a5:c3:b8:01:eb:29:03:9f:4d:ca:33:18:83: 58:d5:c4:60:ef:85:45:b5:90:f0:ca:6d:5d:52:d5:25:63:0c: bc:94:43:7a:1b:5a:87:37:9d:85:dc:e2:81:45:e3:f0:2e:0d: 66:00:c3:f8:5b:4c:c0:a5:67:8d:6f:1a:f3:4e:0e:73:5a:be: 3d:47:04:38:f3:05:a5:b6:f6:6c:83:68:84:cd:92:34:c5:ba: 01:ce:97:98:bf:e0:8f:2e:6c:96:49:82:53:da:65:ea:88:7c: 04:ab:77:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmSC1tg8j1nko4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YzFjYWQ0MTgtYTc1Mi00MjFmLWI2NzAtMGIwY2U0YzQ0YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/CAlAaCzvVS72pSr3Ab5flg9roMTVgbwWF/f NbQJRQDcS7mDapENuVxkXF5ml7pm3e81dbIwIjVuTG0k9fCB4UAY0pbgj2dublI0 bXhgJ98envbDyig3Sc0LOBnT3N6BKSr5r0DNNOn/eJ+v/jmSlCBjtXWMuLyQVNEl 6rQHQggb0pgsH4YxoDbGIdjtAnzXyCgqvHPVxlxWz/0fC2urCKuRgb/DbTxVpyP7 5ZF6gFb58JA/lvt89Jyb+PgfSB35ID42Zm4RrcmM6DuNBJ46Qf9kUuxn8vhiFPyw lygbvq51r21gRXerKIFbankhS6O3v1Wy0d11xJsPVsKQ/mG6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa+Ho7lTbJeSXdphV3QMqj6HM90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2YzM2YxZWEtNTQ3ZC0z NzFmLTgxYTYtYjU0OTI4YTZhZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGLOflgO7kNxCQrOTBXPaTn06vnHkojAaqopDaPUOdVPfGjch6KCcbN xxTOAPw1uADz7jYuBT7dcCDBT00+lS1XzoaQVapXDpAMDGFK8mN5GsbFsHJQhz7f t+hAXGcc0RtC9b+YJtU+YPP8ZbXDT42u/E3BVF3ZkLrbiyGGqwRkNyJfeDOQMvmp GdIr+GRquWoke2V7pcO4AespA59NyjMYg1jVxGDvhUW1kPDKbV1S1SVjDLyUQ3ob Woc3nYXc4oFF4/AuDWYAw/hbTMClZ41vGvNODnNavj1HBDjzBaW29myDaITNkjTF ugHOl5i/4I8ubJZJglPaZeqIfASrd38= -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:02 2025 by rpki-client