$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/848a4e44-6bb3-318e-bae5-1a695087738d.roa File: 848a4e44-6bb3-318e-bae5-1a695087738d.roa (raw, json) Hash identifier: 8d0JPA3k+HTu11UvuGkEez6WRIC+LdDlDKM7vrS4zNI= Subject key identifier: 88:62:60:7F:69:7E:DC:68:A5:73:80:DE:1F:BB:04:A2:33:6B:EB:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFE6F691F33B0E358F1FD90 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/848a4e44-6bb3-318e-bae5-1a695087738d.roa Signing time: Thu 19 Jun 2025 10:37:44 +0000 ROA not before: Thu 19 Jun 2025 10:37:44 +0000 ROA not after: Wed 17 Sep 2025 10:37:44 +0000 asID: 22773 IP address blocks: 174.74.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fe:6f:69:1f:33:b0:e3:58:f1:fd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:37:44 2025 GMT Not After : Sep 17 10:37:44 2025 GMT Subject: CN=4cd3f9e0-a112-4b81-8213-3f1b38dcae81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:0e:80:1d:cc:b3:e5:bc:7c:7e:95:32:03: b6:9e:7a:71:e9:7f:bc:84:20:d8:52:49:6d:02:83: 45:5d:1d:44:a8:47:cc:db:a6:52:24:de:8e:bd:c5: 75:22:fc:c4:0b:13:f1:65:eb:b8:18:ea:f8:3e:96: c6:0f:f4:87:6b:15:4a:28:ab:0d:c7:32:bb:99:9c: 76:34:e0:b4:ff:5d:a0:a7:e9:db:e2:6e:7f:36:17: 70:24:d7:2b:a1:22:18:de:9e:a1:2f:75:b8:d0:b6: c9:8f:97:4c:ec:67:a6:37:de:35:ad:14:ba:a9:cf: 34:56:66:b7:a7:82:9d:fe:5a:98:9c:94:5e:1f:6c: 37:6f:b1:2d:e0:ce:23:88:5b:35:5e:9b:66:da:3a: d1:70:7e:26:96:96:99:19:f0:7f:27:0d:7c:f6:9e: 26:85:64:10:ac:8c:4f:7e:08:55:61:40:ea:30:34: cd:ac:f8:ee:cd:52:7c:9c:fd:9c:22:2a:71:a7:8e: 9b:52:22:12:82:a1:14:e1:c9:e0:a8:d9:d2:5b:7d: e1:96:27:ad:6b:c3:12:0f:02:0e:17:a0:f1:a1:48: 70:e2:08:1e:21:a6:6f:73:f5:06:9b:be:2f:ce:a5: 1d:0d:4f:76:61:13:ad:a4:5c:fc:e1:1e:c0:bd:25: 65:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:62:60:7F:69:7E:DC:68:A5:73:80:DE:1F:BB:04:A2:33:6B:EB:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/848a4e44-6bb3-318e-bae5-1a695087738d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:60:43:4b:0d:2d:db:d5:97:4b:37:4e:62:e1:58:5d:8e:0d: b3:b1:af:7e:83:da:60:15:c9:aa:30:bb:b9:8e:bc:86:4f:f9: 7e:33:62:95:81:b0:3a:ed:32:ee:91:ab:32:fb:c1:0e:05:0a: fd:11:79:93:97:bf:d1:77:9c:13:e7:20:89:ee:be:fc:07:60: f8:bf:4e:89:70:12:fd:9f:da:ce:bb:7a:53:4a:af:ab:2f:34: 47:b4:a4:86:a8:dd:58:3e:20:6d:1e:51:66:21:55:44:9d:25: 90:2e:66:6e:d0:f3:89:4d:05:c2:6f:98:c5:57:3e:eb:d0:63: 26:28:53:8c:7f:56:94:fa:91:ea:9a:dd:96:42:4f:ff:20:3d: 77:6b:3d:65:9e:24:2f:a9:4f:6d:80:e5:18:86:84:9a:d7:d1: 74:e2:0a:b1:ec:16:87:8a:95:31:17:89:d6:7b:00:0f:1d:e4: c8:55:71:df:71:d3:09:a2:58:03:19:ed:d0:c2:e3:37:56:ee: 49:6f:19:8b:c7:f9:b1:e7:7f:47:38:e8:37:60:5f:77:18:50: bd:f1:43:e8:77:48:aa:5d:85:4c:8f:31:c6:dc:00:40:85:2a: 39:f6:f8:6a:1f:c3:82:96:85:8c:fe:a2:88:48:a9:67:a2:b1: 47:ef:83:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/m9pHzOw41jx/ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzc0NFoXDTI1MDkxNzEwMzc0NFowLzEtMCsGA1UEAxMk NGNkM2Y5ZTAtYTExMi00YjgxLTgyMTMtM2YxYjM4ZGNhZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mQOgB3Ms+W8fH6VMgO2nnpx6X+8hCDYUklt AoNFXR1EqEfM26ZSJN6OvcV1IvzECxPxZeu4GOr4PpbGD/SHaxVKKKsNxzK7mZx2 NOC0/12gp+nb4m5/NhdwJNcroSIY3p6hL3W40LbJj5dM7GemN941rRS6qc80Vma3 p4Kd/lqYnJReH2w3b7Et4M4jiFs1Xptm2jrRcH4mlpaZGfB/Jw189p4mhWQQrIxP fghVYUDqMDTNrPjuzVJ8nP2cIipxp46bUiISgqEU4cngqNnSW33hlieta8MSDwIO F6DxoUhw4ggeIaZvc/UGm74vzqUdDU92YROtpFz84R7AvSVlWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhiYH9pftxopXOA3h+7BKIza+u2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODQ4YTRlNDQtNmJiMy0z MThlLWJhZTUtMWE2OTUwODc3MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdgQ0sNLdvVl0s3TmLhWF2ODbOxr36D2mAVyaowu7mOvIZP+X4zYpWB sDrtMu6RqzL7wQ4FCv0ReZOXv9F3nBPnIInuvvwHYPi/TolwEv2f2s67elNKr6sv NEe0pIao3Vg+IG0eUWYhVUSdJZAuZm7Q84lNBcJvmMVXPuvQYyYoU4x/VpT6keqa 3ZZCT/8gPXdrPWWeJC+pT22A5RiGhJrX0XTiCrHsFoeKlTEXidZ7AA8d5MhVcd9x 0wmiWAMZ7dDC4zdW7klvGYvH+bHnf0c46DdgX3cYUL3xQ+h3SKpdhUyPMcbcAECF Kjn2+Gofw4KWhYz+oohIqWeisUfvg98= -----END CERTIFICATE-----Generated at Tue Jul 1 21:00:32 2025 by rpki-client