$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb428346-b938-3c7e-8dbc-2f69162eda0e.roa File: bb428346-b938-3c7e-8dbc-2f69162eda0e.roa (raw, json) Hash identifier: QPtZnILpfMFt2R32+ZlqnxWTf3OsmkyzfPiNldxXxTY= Subject key identifier: E2:AB:86:A4:46:21:2A:70:6E:A2:03:FD:D4:A9:EC:EC:B1:07:9D:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366E9C3241B98D3B10FDC8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb428346-b938-3c7e-8dbc-2f69162eda0e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:6e:9c:32:41:b9:8d:3b:10:fd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=6c0b883f-3341-438d-a01f-dbff3a83f841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:3f:6c:60:57:e2:38:ef:68:62:ff:07:a2: db:6a:d3:a1:9e:c4:9d:36:79:62:d7:dc:e2:ab:dc: 3f:49:b2:2b:e4:c0:90:ce:03:e5:8f:a3:a0:97:b2: ee:54:f0:e4:f9:fb:8a:6c:a3:d9:ec:0b:ae:12:77: 94:1a:41:dc:92:00:da:d6:f4:24:b6:10:b2:6c:54: bd:f1:b6:78:0b:23:44:3d:01:0c:5b:f7:f3:a7:02: 5a:6c:64:51:8d:50:6a:14:2e:a6:8b:15:65:4b:fd: d2:9e:95:d8:88:c7:08:95:5d:6d:e8:fd:fc:0c:74: 7f:da:3c:42:32:da:27:cb:67:bb:4c:2e:41:10:4a: 42:1e:f8:ca:d0:a5:4c:7a:63:74:4f:72:97:76:7b: bb:c9:7e:3a:51:19:4b:5a:e7:fe:64:a6:55:9a:cb: d9:9e:31:be:33:98:f1:2c:7f:8c:18:af:7f:82:c0: 9d:df:61:35:6d:4b:0d:77:bb:5d:a5:6d:87:4f:3e: 26:2f:f7:4c:bf:de:98:38:9f:96:bf:4a:af:c4:7c: 2d:dc:39:fd:18:1f:e4:75:bd:a4:8d:56:d4:4e:70: 6c:f7:7a:4c:e0:e5:e2:cd:da:0e:34:00:3f:3d:d7: b9:c1:74:f5:73:6d:79:36:ea:c0:f8:e7:3c:03:32: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AB:86:A4:46:21:2A:70:6E:A2:03:FD:D4:A9:EC:EC:B1:07:9D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb428346-b938-3c7e-8dbc-2f69162eda0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e7:6c:0f:18:e2:3e:c0:20:02:47:15:ea:a0:c3:f2:24:b4: cb:da:b7:cc:cb:72:30:8d:04:90:43:d6:93:e6:3e:c1:08:3d: bf:6a:4d:eb:c7:19:7c:f6:82:6b:dd:ce:05:54:60:40:af:ff: ce:7c:1b:d1:dc:9a:d4:43:e8:64:d1:8b:31:16:63:0c:1e:ec: e7:9a:28:f8:07:9c:93:b7:87:37:ec:ef:93:f0:bf:35:b6:37: 45:7a:5e:9a:8d:76:1e:e0:ec:b2:75:74:15:40:9e:33:bd:e4: 5d:b2:ed:5a:d4:ec:98:38:83:a4:36:5d:cf:04:39:68:cd:64: 51:8e:a9:35:33:38:4b:ef:99:07:33:a8:f4:db:db:17:20:3b: 42:42:75:95:8b:cd:37:ed:04:d7:82:5c:e8:52:e0:75:93:24: 6a:31:df:90:0f:d7:04:71:89:53:9f:c9:75:7e:df:da:74:31: a4:62:a5:e3:ef:a1:8d:66:dd:a0:69:8a:0e:a5:c4:c6:3a:fe: 4a:08:ff:a0:95:ab:a6:47:b7:ce:90:ff:4b:27:b0:72:13:76: c5:d6:5e:d4:5f:33:1d:18:73:48:04:9e:89:65:e4:87:4a:a0: 6c:33:67:99:20:f6:e0:17:35:be:af:ac:6e:c5:6c:3d:d6:6c: 53:e6:a6:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNm6cMkG5jTsQ/cgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NmMwYjg4M2YtMzM0MS00MzhkLWEwMWYtZGJmZjNhODNmODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmww/bGBX4jjvaGL/B6LbatOhnsSdNnli19zi q9w/SbIr5MCQzgPlj6Ogl7LuVPDk+fuKbKPZ7AuuEneUGkHckgDa1vQkthCybFS9 8bZ4CyNEPQEMW/fzpwJabGRRjVBqFC6mixVlS/3SnpXYiMcIlV1t6P38DHR/2jxC Mtony2e7TC5BEEpCHvjK0KVMemN0T3KXdnu7yX46URlLWuf+ZKZVmsvZnjG+M5jx LH+MGK9/gsCd32E1bUsNd7tdpW2HTz4mL/dMv96YOJ+Wv0qvxHwt3Dn9GB/kdb2k jVbUTnBs93pM4OXizdoONAA/Pde5wXT1c215NurA+Oc8AzKNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKrhqRGISpwbqID/dSp7OyxB52OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI0MjgzNDYtYjkzOC0z YzdlLThkYmMtMmY2OTE2MmVkYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPnbA8Y4j7AIAJHFeqgw/IktMvat8zLcjCNBJBD1pPmPsEIPb9qTevH GXz2gmvdzgVUYECv/858G9HcmtRD6GTRizEWYwwe7OeaKPgHnJO3hzfs75PwvzW2 N0V6XpqNdh7g7LJ1dBVAnjO95F2y7VrU7Jg4g6Q2Xc8EOWjNZFGOqTUzOEvvmQcz qPTb2xcgO0JCdZWLzTftBNeCXOhS4HWTJGox35AP1wRxiVOfyXV+39p0MaRipePv oY1m3aBpig6lxMY6/koI/6CVq6ZHt86Q/0snsHITdsXWXtRfMx0Yc0gEnoll5IdK oGwzZ5kg9uAXNb6vrG7FbD3WbFPmplI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:28:41 2025 by rpki-client