$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a55f4a51-3348-33ef-9b47-de09417b2735.roa File: a55f4a51-3348-33ef-9b47-de09417b2735.roa (raw, json) Hash identifier: d80chzSrghObUZE7x4iTpnuPySsweivfA2yhSMpJUoc= Subject key identifier: 9E:BC:DF:26:80:BC:16:29:1D:6C:86:A8:5B:35:F0:E8:DC:C9:26:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963675240EABE8D1C9E25000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a55f4a51-3348-33ef-9b47-de09417b2735.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:75:24:0e:ab:e8:d1:c9:e2:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=88948a9e-283d-481e-bd5f-c2664fd82388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6e:74:7e:eb:59:92:44:3c:c1:f6:34:c4:64: 93:e7:07:f6:ce:7f:38:3e:dc:a3:66:05:0c:84:01: 08:83:38:37:4d:49:12:4c:0e:4a:e6:89:ce:26:1a: 38:18:77:78:d7:91:1e:44:2b:c3:da:fc:74:a1:9b: 22:1e:5c:f8:af:26:aa:4b:5b:2b:05:7f:58:f3:bd: 14:20:14:ab:97:ea:fa:8c:ba:c8:c5:0e:35:0a:96: 4c:d9:20:e3:50:a2:47:a3:5c:11:85:b9:17:01:70: 98:85:f5:43:59:05:e7:b8:53:ac:e3:4c:a1:6d:82: 26:db:cb:de:04:9a:2b:b6:ab:2a:ab:a2:49:41:2a: 44:04:d7:b5:91:b7:bf:eb:29:a0:65:ef:81:38:db: d4:b8:93:e5:d4:5e:ea:e4:a2:8d:02:bf:88:27:a6: 9b:46:51:1b:4d:dd:98:92:41:cc:22:96:f0:95:22: b8:0b:ad:a6:47:cd:cc:9b:11:59:ef:ad:6a:bb:d9: c5:01:b1:96:83:d4:34:d0:1b:cb:f1:3d:a8:1f:ec: dd:1a:0e:e6:2b:20:e5:88:00:c3:82:bf:44:de:b3: 52:52:87:23:3f:17:89:30:90:32:79:a2:10:dc:c1: 0d:a8:b6:ca:31:80:98:9c:cb:90:04:93:8a:09:ac: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BC:DF:26:80:BC:16:29:1D:6C:86:A8:5B:35:F0:E8:DC:C9:26:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a55f4a51-3348-33ef-9b47-de09417b2735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:68:53:4d:41:40:9a:17:8d:89:56:da:a2:02:3b:8c:c3:2e: 3b:e6:fc:b9:65:d1:42:7a:2b:45:3b:a1:a2:7b:71:b9:37:98: 0c:ee:1d:e6:01:e6:5f:52:15:ef:1e:76:56:16:7a:01:5e:e1: fd:17:6b:4c:c1:af:3f:b1:88:7a:bc:c0:b7:0b:52:90:5a:da: 93:ef:05:f8:50:02:08:d2:c7:e5:02:98:a0:d6:59:03:41:51: b5:77:63:43:a2:c2:5b:ba:e7:09:02:1d:73:20:c0:71:84:4b: ee:97:3b:ce:de:0c:4b:4e:20:07:25:cf:f4:f2:12:50:b6:5b: 76:f9:98:ca:46:96:05:be:aa:0f:d4:4d:1c:ac:d6:da:0e:f5: 25:d4:5d:ff:5a:63:37:de:08:9b:b3:4d:5d:1b:82:32:34:c7: 55:f0:cd:6c:5a:d8:f9:d8:7b:44:3a:a5:6e:6a:72:5d:00:9d: 4f:c0:73:5d:fb:2e:10:12:7a:61:54:aa:2f:76:af:cb:b9:5b: a5:10:ab:05:a5:bf:60:d0:c4:44:36:0f:18:d7:66:c8:a7:bc: 39:1e:35:e5:39:3d:46:ab:6b:35:32:9e:ce:e1:6f:f9:21:47: 32:c9:b7:bd:1d:e1:44:ca:ca:65:dc:36:15:61:17:bc:ba:9b: 5e:98:f9:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnUkDqvo0cniUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODg5NDhhOWUtMjgzZC00ODFlLWJkNWYtYzI2NjRmZDgyMzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG50futZkkQ8wfY0xGST5wf2zn84PtyjZgUM hAEIgzg3TUkSTA5K5onOJho4GHd415EeRCvD2vx0oZsiHlz4ryaqS1srBX9Y870U IBSrl+r6jLrIxQ41CpZM2SDjUKJHo1wRhbkXAXCYhfVDWQXnuFOs40yhbYIm28ve BJortqsqq6JJQSpEBNe1kbe/6ymgZe+BONvUuJPl1F7q5KKNAr+IJ6abRlEbTd2Y kkHMIpbwlSK4C62mR83MmxFZ761qu9nFAbGWg9Q00BvL8T2oH+zdGg7mKyDliADD gr9E3rNSUocjPxeJMJAyeaIQ3MENqLbKMYCYnMuQBJOKCaztFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ683yaAvBYpHWyGqFs18OjcySagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTU1ZjRhNTEtMzM0OC0z M2VmLTliNDctZGUwOTQxN2IyNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNz0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFoU01BQJoXjYlW2qICO4zDLjvm/Lll0UJ6K0U7oaJ7cbk3mAzuHeYB 5l9SFe8edlYWegFe4f0Xa0zBrz+xiHq8wLcLUpBa2pPvBfhQAgjSx+UCmKDWWQNB UbV3Y0Oiwlu65wkCHXMgwHGES+6XO87eDEtOIAclz/TyElC2W3b5mMpGlgW+qg/U TRys1toO9SXUXf9aYzfeCJuzTV0bgjI0x1XwzWxa2PnYe0Q6pW5qcl0AnU/Ac137 LhASemFUqi92r8u5W6UQqwWlv2DQxEQ2DxjXZsinvDkeNeU5PUarazUyns7hb/kh RzLJt70d4UTKymXcNhVhF7y6m16Y+Rs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:18 2025 by rpki-client