$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa File: 98581b07-31ae-380b-9152-29fa36e9ac7c.roa (raw, json) Hash identifier: diz61oPauQ/Up6EiSCikY8TJmDtvbULF5SLXJXXRBpw= Subject key identifier: C6:3D:2D:C4:90:53:63:37:BC:0D:D6:80:46:37:F7:5C:6C:C7:76:4D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA664A8414556170D42E480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.219.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:64:a8:41:45:56:17:0d:42:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=ef559f01-29cb-40e6-8da1-eb9d5d5ab0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:d5:d7:8b:d0:8e:4b:66:a0:b3:52:59:94: 02:ed:80:b4:e5:97:5e:a5:2e:a3:f9:b9:1d:a8:31: 63:4c:c3:93:6f:05:a9:f6:b0:d9:fa:d0:8f:79:b9: 9a:10:2d:cc:e0:a2:9a:36:03:d4:e9:0c:82:33:e5: 15:27:c8:14:6c:c5:61:e0:a6:f1:87:b8:63:00:dd: 0f:c1:12:8f:b0:a9:af:31:aa:cd:23:6b:2a:f9:9b: 92:d8:36:68:7f:4d:ec:23:c0:be:ec:03:24:bb:a0: 46:d3:b9:47:4b:15:77:8a:45:1d:06:04:41:f4:ee: ee:6c:1b:43:1d:30:1f:07:fb:49:1f:c5:ee:d8:de: 17:d5:21:6d:d3:7a:83:ea:59:c1:75:a0:ad:ad:58: 2b:39:c9:01:83:4d:6c:54:ed:73:e2:8c:78:b9:a0: e1:ea:10:17:3a:48:a1:a1:f7:eb:90:51:6b:79:49: 98:d9:ad:16:ce:cb:22:ed:66:16:17:2c:57:d3:f2: ef:a8:32:82:39:75:2e:62:7c:df:81:56:fa:09:15: b1:c7:dd:28:e5:55:4b:b0:92:da:a5:ba:89:66:f3: 62:9a:c2:82:64:cb:18:e3:df:85:2b:fe:e0:87:63: 31:05:5b:28:04:73:f8:e9:c7:17:90:8a:f5:a4:65: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3D:2D:C4:90:53:63:37:BC:0D:D6:80:46:37:F7:5C:6C:C7:76:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:bb:41:f7:50:6f:e2:9f:62:8a:07:12:97:95:e6:00:53:26: 0e:7d:86:5c:49:a8:54:fb:be:58:ed:de:2d:5f:0d:b9:61:ee: 92:47:04:62:3b:f4:7e:11:3f:f2:50:23:cf:b4:bd:e6:95:26: e4:72:19:ff:b9:cb:fd:38:e4:bb:e7:17:26:e4:1b:28:de:2b: 17:c8:75:ef:d6:e2:e4:34:49:a9:7e:d9:e7:43:3a:34:6d:d1: 8d:9c:ee:72:14:42:9e:9f:33:42:18:c3:95:3c:c4:9c:40:0b: e3:7e:12:1b:72:65:d7:a4:94:16:8a:70:f9:e8:3d:38:4f:a1: 1e:3a:20:8a:b5:3b:f4:b3:32:4e:0b:98:63:a0:02:83:93:f4: cd:aa:d4:cd:f9:d4:18:87:3a:a7:ee:62:9f:7b:ad:92:c5:1b: 9c:76:55:b3:b7:6a:e3:2e:a2:10:68:bc:49:03:8c:a0:8b:e0: 2b:25:93:5c:fb:49:fa:58:52:ce:25:51:6a:81:28:dd:65:2c: df:ed:77:85:0c:bd:bb:a3:a3:20:55:47:27:40:e7:a7:c8:24: be:d0:78:1c:66:08:05:4a:be:7e:df:d7:9c:13:bb:71:90:63: 23:42:c6:42:07:a1:c5:c6:ef:b6:d6:e1:09:0e:d0:cf:85:86: d6:b6:88:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmSoQUVWFw1C5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWY1NTlmMDEtMjljYi00MGU2LThkYTEtZWI5ZDVkNWFiMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBLV14vQjktmoLNSWZQC7YC05ZdepS6j+bkd qDFjTMOTbwWp9rDZ+tCPebmaEC3M4KKaNgPU6QyCM+UVJ8gUbMVh4Kbxh7hjAN0P wRKPsKmvMarNI2sq+ZuS2DZof03sI8C+7AMku6BG07lHSxV3ikUdBgRB9O7ubBtD HTAfB/tJH8Xu2N4X1SFt03qD6lnBdaCtrVgrOckBg01sVO1z4ox4uaDh6hAXOkih offrkFFreUmY2a0Wzssi7WYWFyxX0/LvqDKCOXUuYnzfgVb6CRWxx90o5VVLsJLa pbqJZvNimsKCZMsY49+FK/7gh2MxBVsoBHP46ccXkIr1pGWVvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY9LcSQU2M3vA3WgEY391xsx3ZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTg1ODFiMDctMzFhZS0z ODBiLTkxNTItMjlmYTM2ZTlhYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG7QfdQb+KfYooHEpeV5gBTJg59hlxJqFT7vljt3i1fDblh7pJHBGI7 9H4RP/JQI8+0veaVJuRyGf+5y/045LvnFybkGyjeKxfIde/W4uQ0Sal+2edDOjRt 0Y2c7nIUQp6fM0IYw5U8xJxAC+N+EhtyZdeklBaKcPnoPThPoR46IIq1O/SzMk4L mGOgAoOT9M2q1M351BiHOqfuYp97rZLFG5x2VbO3auMuohBovEkDjKCL4Cslk1z7 SfpYUs4lUWqBKN1lLN/td4UMvbujoyBVRydA56fIJL7QeBxmCAVKvn7f15wTu3GQ YyNCxkIHocXG77bW4QkO0M+Fhta2iB4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:02 2025 by rpki-client