$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f39c2338-8a22-3c96-8997-86eedf83969e.roa File: f39c2338-8a22-3c96-8997-86eedf83969e.roa (raw, json) Hash identifier: Z8F49kgX++xCJpkUz+RDw53wvW4Ordx1PolGhwUuDqI= Subject key identifier: F9:F4:9C:4E:74:2C:B1:73:D2:94:50:57:FA:20:3D:FE:35:1D:69:D6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96362A4E3A8DC821B66EBA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f39c2338-8a22-3c96-8997-86eedf83969e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.209.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:2a:4e:3a:8d:c8:21:b6:6e:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7ff86e7f-e8dd-4e07-ac2f-19427548bec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:dd:9f:c6:66:58:55:40:9a:37:28:ef:14: 56:04:ef:4b:df:e2:2b:e0:2a:a3:c3:d4:66:4e:d9: 29:c9:00:36:1f:25:24:6d:0a:43:b7:43:33:f2:a9: 89:29:6e:70:a7:66:c3:fe:5c:ff:e8:86:74:ac:2e: 12:93:0c:e4:b3:09:96:b7:ec:b5:7f:b6:df:b4:01: 09:f3:20:80:c8:4a:b8:bc:b1:f1:94:00:80:ed:e0: 1d:9d:e3:2d:ef:64:d0:52:64:21:29:03:f5:2f:1e: 3e:85:80:bd:5d:9f:ef:18:cc:09:d3:5a:76:a2:33: 2b:eb:cb:f6:2b:1b:e6:28:b7:7d:eb:0b:1d:36:59: 8d:52:02:fb:f4:33:77:95:56:57:f3:66:94:b1:56: c5:7d:c9:03:dc:8a:bb:66:47:18:d3:61:55:2f:88: cf:7a:f8:fd:4a:62:c8:20:ba:83:ea:d0:08:e0:1b: 3a:4e:30:c3:1b:29:98:74:e1:59:a5:40:f0:85:41: 52:a9:e8:7e:58:5d:cd:9c:39:02:13:b1:6d:7d:db: 88:56:c3:2e:53:2c:0b:e7:47:af:65:47:8f:61:b5: 67:0d:ec:9b:3d:7c:44:82:59:c0:6a:4c:3a:99:da: 4b:8f:5e:56:ac:cb:e7:77:88:a4:9d:f3:f6:ad:c1: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F4:9C:4E:74:2C:B1:73:D2:94:50:57:FA:20:3D:FE:35:1D:69:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f39c2338-8a22-3c96-8997-86eedf83969e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:61:29:99:9a:b7:08:f2:6c:6a:08:f4:eb:eb:58:0d:dd:f7: 46:9e:60:7d:03:af:f7:0d:03:08:53:ea:36:44:05:02:12:cc: ee:3b:06:39:25:cb:c5:07:f5:5a:05:20:9c:b2:d5:8b:49:d4: 5c:dd:52:76:49:c9:e8:91:7c:e9:e8:88:54:fe:14:88:99:56: eb:49:c5:69:dc:4d:b8:45:5f:96:89:9c:6a:9c:41:a9:7d:dd: 50:94:12:7e:1f:76:62:db:31:af:d9:44:4e:6f:c9:a9:38:5c: 70:d0:39:7b:69:70:a2:7c:a1:82:d7:1f:53:a9:94:b4:d9:4b: e4:75:8a:ab:d3:47:ef:03:ba:3e:9b:25:0c:02:f5:7f:47:1d: e4:bd:20:c3:b9:7e:83:3b:9f:46:f9:cd:f0:29:ec:d4:72:70: 90:87:cf:f3:27:fa:64:e1:82:5b:e2:e9:08:77:f7:aa:c7:34: 68:7c:b6:a5:cc:95:4d:b8:b0:48:d7:05:88:17:d2:ca:98:1f: d2:e0:4d:17:f7:79:6e:9c:73:53:66:4c:53:43:ce:73:3a:68: d4:03:87:4b:bd:b3:f5:5d:9f:e8:a3:8f:11:74:76:e3:46:fb: d6:ac:d9:a2:a9:3e:57:3f:68:43:8e:3c:85:9f:8f:3b:e9:72: a8:8a:57:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNipOOo3IIbZuuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk N2ZmODZlN2YtZThkZC00ZTA3LWFjMmYtMTk0Mjc1NDhiZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1//dn8ZmWFVAmjco7xRWBO9L3+Ir4Cqjw9Rm TtkpyQA2HyUkbQpDt0Mz8qmJKW5wp2bD/lz/6IZ0rC4SkwzkswmWt+y1f7bftAEJ 8yCAyEq4vLHxlACA7eAdneMt72TQUmQhKQP1Lx4+hYC9XZ/vGMwJ01p2ojMr68v2 KxvmKLd96wsdNlmNUgL79DN3lVZX82aUsVbFfckD3Iq7ZkcY02FVL4jPevj9SmLI ILqD6tAI4Bs6TjDDGymYdOFZpUDwhUFSqeh+WF3NnDkCE7FtfduIVsMuUywL50ev ZUePYbVnDeybPXxEglnAakw6mdpLj15WrMvnd4iknfP2rcFPXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn0nE50LLFz0pRQV/ogPf41HWnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjM5YzIzMzgtOGEyMi0z Yzk2LTg5OTctODZlZWRmODM5NjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9hKZmatwjybGoI9OvrWA3d90aeYH0Dr/cNAwhT6jZEBQISzO47Bjkl y8UH9VoFIJyy1YtJ1FzdUnZJyeiRfOnoiFT+FIiZVutJxWncTbhFX5aJnGqcQal9 3VCUEn4fdmLbMa/ZRE5vyak4XHDQOXtpcKJ8oYLXH1OplLTZS+R1iqvTR+8Duj6b JQwC9X9HHeS9IMO5foM7n0b5zfAp7NRycJCHz/Mn+mThglvi6Qh396rHNGh8tqXM lU24sEjXBYgX0sqYH9LgTRf3eW6cc1NmTFNDznM6aNQDh0u9s/Vdn+ijjxF0duNG +9as2aKpPlc/aEOOPIWfjzvpcqiKVxM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:44 2025 by rpki-client