$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaa247ab-3aea-3cba-844e-8630e768f8ca.roa File: aaa247ab-3aea-3cba-844e-8630e768f8ca.roa (raw, json) Hash identifier: ukp54vFJsuEKer04QFiSZ3Q0A6D8A7xs9EiSKRq/dAU= Subject key identifier: B6:43:69:A9:0A:46:14:78:26:FE:CB:3F:57:C6:D2:C9:9F:B9:C8:0A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367214BD191C21D0905D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaa247ab-3aea-3cba-844e-8630e768f8ca.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:72:14:bd:19:1c:21:d0:90:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=58a9fe09-cd9e-4cc5-977c-dadfe3deeaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:33:8b:bb:ae:f9:a1:25:30:a1:bf:45:0b: 93:d1:fa:49:11:ab:c3:94:17:45:91:48:c1:a7:66: 62:e9:17:71:44:1d:20:0f:79:0b:94:51:69:e9:f4: 64:47:43:26:44:f4:4b:20:9c:46:b0:b9:86:a3:a6: cb:7f:7b:b6:f3:7b:5b:8b:48:cf:91:63:78:98:fc: 4b:e0:40:23:e7:bc:b8:17:fc:40:4f:19:c1:07:a5: 59:cb:ca:44:07:1c:5d:3e:b8:9d:0b:6c:95:d5:74: 92:49:03:59:e3:fd:5d:65:12:55:f6:e6:de:81:9b: 4b:da:a5:40:0b:61:f4:48:b3:59:28:e9:01:84:16: f9:a5:1f:b9:c6:09:bb:c6:f3:75:7b:6d:66:07:3f: f7:5a:93:43:80:54:6e:17:b2:ac:c4:7e:32:23:1e: 0b:a8:e7:a7:b9:38:64:ed:3f:01:2b:86:bf:91:d9: db:57:c4:60:06:30:e8:da:ae:4d:99:d6:f4:57:5c: 06:8a:cc:a9:89:6e:ff:33:0e:87:46:7b:ca:9c:d4: 46:77:96:5a:35:aa:4b:94:e2:14:91:61:2c:d4:cb: 49:4c:c7:7c:77:8b:92:f8:74:69:de:93:32:02:f6: 9f:bd:5a:22:64:da:7f:aa:d1:39:20:15:2a:09:09: 2b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:43:69:A9:0A:46:14:78:26:FE:CB:3F:57:C6:D2:C9:9F:B9:C8:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaa247ab-3aea-3cba-844e-8630e768f8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a2:04:4c:ad:dd:08:0d:c8:56:97:55:59:86:0d:ee:1a:f1: 59:ce:60:e1:43:02:02:e5:c5:17:7b:36:bc:77:64:9e:31:6c: ab:c7:ca:f9:fd:bd:56:e1:34:58:b6:0d:72:d5:64:29:4e:97: a9:ba:2f:60:fc:1e:cf:63:bd:9e:ff:47:a0:ac:86:2a:17:61: 37:a6:1b:b1:67:59:99:bf:97:d7:0a:18:ca:00:2c:5f:88:f3: 0d:31:7a:ab:a3:37:49:e9:57:9e:99:0f:97:73:78:38:77:56: 4b:24:1a:ce:49:ff:b3:b1:fa:d0:dc:b4:b0:2c:c9:6d:6c:00: 81:c4:81:d4:99:0d:a6:8d:c6:37:97:99:b5:b8:a7:7a:38:d2: 0a:75:b9:bc:ca:24:0c:91:aa:27:92:e0:4c:0b:2d:79:c7:e0: f5:a2:0c:58:75:36:ee:29:6b:5b:26:b5:b4:55:45:47:60:c1: 7a:ec:0d:16:c8:2a:2c:76:d6:92:9a:f1:18:3d:aa:68:cc:e8: 09:8b:67:ac:90:63:27:ee:f8:3f:14:d8:6e:78:b5:27:26:d7: 35:05:28:ef:e7:97:ed:61:f4:84:35:c4:fe:8f:d3:15:02:b9: 7f:7d:e0:c9:e4:8a:50:9f:e3:73:4c:12:52:07:18:f4:3c:9c: 05:f6:1a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnIUvRkcIdCQXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NThhOWZlMDktY2Q5ZS00Y2M1LTk3N2MtZGFkZmUzZGVlYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnozi7uu+aElMKG/RQuT0fpJEavDlBdFkUjB p2Zi6RdxRB0gD3kLlFFp6fRkR0MmRPRLIJxGsLmGo6bLf3u283tbi0jPkWN4mPxL 4EAj57y4F/xATxnBB6VZy8pEBxxdPridC2yV1XSSSQNZ4/1dZRJV9ubegZtL2qVA C2H0SLNZKOkBhBb5pR+5xgm7xvN1e21mBz/3WpNDgFRuF7KsxH4yIx4LqOenuThk 7T8BK4a/kdnbV8RgBjDo2q5Nmdb0V1wGisypiW7/Mw6HRnvKnNRGd5ZaNapLlOIU kWEs1MtJTMd8d4uS+HRp3pMyAvafvVoiZNp/qtE5IBUqCQkrfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZDaakKRhR4Jv7LP1fG0smfucgKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFhMjQ3YWItM2FlYS0z Y2JhLTg0NGUtODYzMGU3NjhmOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKiBEyt3QgNyFaXVVmGDe4a8VnOYOFDAgLlxRd7Nrx3ZJ4xbKvHyvn9 vVbhNFi2DXLVZClOl6m6L2D8Hs9jvZ7/R6CshioXYTemG7FnWZm/l9cKGMoALF+I 8w0xequjN0npV56ZD5dzeDh3VkskGs5J/7Ox+tDctLAsyW1sAIHEgdSZDaaNxjeX mbW4p3o40gp1ubzKJAyRqieS4EwLLXnH4PWiDFh1Nu4pa1smtbRVRUdgwXrsDRbI Kix21pKa8Rg9qmjM6AmLZ6yQYyfu+D8U2G54tScm1zUFKO/nl+1h9IQ1xP6P0xUC uX994MnkilCf43NMElIHGPQ8nAX2Gmc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:05 2025 by rpki-client